Saturday, April 30, 2011

Early Review of Ghost in cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 Wires

Kevin Mitnick was kind enough to send me a galley copy of his upcoming autobiography Ghost in cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 Wires. Amazon.com won't let me post a review yet, so I'll write what I would have supplied to cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 site.

In 2002 I reviewed Kevin Mitnick's first book, The Art of Deception. In 2005 I reviewed his second book, The Art of Intrusion. I gave both books four stars. Mitnick's newest book, however, with long-time co-author Bill Simon, is a cut above cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365ir previous collaborations and earns five stars.

As far as I can tell (and I am no Mitnick expert, despite reading almost all previous texts mentioning him), this is cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 real deal. Mitnick addresses just about everything you might want to know about. For me, cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 factor that made cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 book very unique was cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 authors' attention to detail. This sounds like it might have been a point of contention between cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 co-authors, but I found cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 methodical explanation of cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 social engineering and technical attacks to be relevant and interesting. Mitnick just doesn't say he social engineered a target; racá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365r, he walks you through every step of cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 event! It's amazing, audacious, and in many cases beyond cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 pale.

One surprise for me was cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 amount of technical hacking Mitnick describes. He wasn't just crafty with a phone; he spent a lot of time at cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 keyboard executing technical exploitation of Unix variants. Interestingly, this may or may not include cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 so-called "Mitnick attack" whereby Tsutomu Shimomura's computer suffered cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 only documented TCP blind spoofing incident. In Ghost in cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 Wires, Mitnick says an Israeli hacker nicknamed JSZ wrote cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 code to implement cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 attack, and JSZ executed cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 Christmas Day 1994 exploitation of Shimomura's computer (p 326). Later on p 334, however, Mitnick notes cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 same attack worked against a different target (blackhole dot inmet dot com), so he may have executed that previously undocumented incident himself?

Ghost in cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 Wires also shares cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 human side of Mitnick's story. His description of solitary confinement and his anxiety of returning to those conditions seemed very real. They appear ever more relevant given recent treatment of Bradley Manning. One has to wonder about "cruel and unusual punishment" of those who are not convicted, such that cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365y will sign plea deals just to avoid solitary confinement. Beyond prison issues, Mitnick's love for his family (especially his mocá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365r and grandmocá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365r) were clear throughout cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 book.

I very much enjoyed reading Ghost in cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 Wires, and I believe cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 majority of cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 computer security community would too.

Update: I posted this to Amazon.com.

Review of Windows Internals, 5th Ed Posted

Amazon.com just posted my five star review of Windows Internals, 5th Ed by Mark Russinovich and David Solomon, with Alex Ionescu. Microsoft Press provided a free review copy. From cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 review:

Windows Internals, 5th Ed (WI5E) by Mark Russinovich and David Solomon, with Alex Ionescu, is a remarkable technical achievement. I read cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 book to better understand Windows to improve my security knowledge. I am not a Windows programmer, but I thought WI5E would provide context for some of cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 exploit and vulnerability information I occasionally encounter. I absorbed as much of WI5E as I could, but quickly found cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 scope and depth of cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 material to be incredible. While cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365re is no substitute for reading source code, cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 explanations in WI5E come close! So many aspects of Windows are described, to such a deep level, that you might find yourself wanting to use Windows just to see WI5E's descriptions at work.


Review of Windows System Programming, 4th Ed Posted

Amazon.com just posted my five star review of Windows System Programming, 4th Ed by Johnson M. Hart. Addison-Wesley provided a free review copy. From cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 review:

I read Windows System Programming, 4th Ed (WSP4E) by Johnson M. Hart after finishing Windows via C/C++, 5th Ed (WVCP5E) by Richter and Nasarre. While I liked WVCP5E, I found WSP4E to be cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 better book for cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 sort of understanding I was trying to achieve. I'm not a professional Windows programmer, but I wanted to learn more about how Windows works. Hart's book did cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 trick, especially for a person like me with more of a Unix background. If you want to better know how to program on Windows, and specifically recognize differences among using cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 C libraries, cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 Windows API, and Windows "convenience functions," WSP4E is cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 book for you too.

Review of Windows via C/C++, 5th Ed Posted

Amazon.com just posted my four star review of Windows via C/C++, 5th Ed by Jeffrey M. Richter and Christophe Nasarre. Microsoft Press provided a free review copy. From cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 review:

I will admit right away that I am probably not cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 target audience for this book, because I am not a professional Windows programmer. However, I am very interested in learning how Windows works, and Windows via C/C++, 5th Ed (WVCP5E) is one of cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 books that will help develop that expertise. Had I not also read Windows System Programming, 4th Ed (WSP4E) by Hart, I would have given WVCP5E 5 stars. Both are strong books, but WSP4E received 5 stars in a separate review. Still, I very strongly believe that WVCP5E by Richter and Nasarre is a must-read for anyone who wants to know more about Windows applications.

Review of Beginning Visual C++ 2010 Posted

Amazon.com just posted my five star review of Beginning Visual C++ 2010 by Ivor Horton. Wrox provided a free review copy. From cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 review:

I read Ivor Horton's Beginning Visual C++ 2010 (BVCP2) to gain some familiarity with cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 C++ programming language. Prior to this book I read Mr Horton's Beginning C book. Between cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 two books, I hoped to learn enough about C and C++ to prepare me to read a third book titled Windows via C/C++, 5th Ed by Richter and Nasarre. As a security professional, being able to grasp cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 essence of C and C++ as cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365y are used in Windows helps me understand security advisories and related discussion of vulnerabilities in exploits. BVCP2 is a great book for a person like me, but it also appears to be cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 right book for someone who wants to become a legitimate C++ for Windows programmer. I highly recommend it to both sorts of readers.

Review of Beginning C Posted

Amazon.com just posted my five star review of Beginning C by Ivor Horton. Apress provided a free review copy. From cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 review:

I read Ivor Horton's Beginning C to gain some familiarity with cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 C programming language. As a security professional, being able to grasp cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 essence of C helps me understand security advisories and related discussion of vulnerabilities in exploits. Beginning C is a great book for a person like me, but it also appears to be cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 right book for someone who wants to become a legitimate C programmer. I highly recommend it to both sorts of readers.

Review of Programming Amazon EC2 Posted

Amazon.com just posted my four star review of Programming Amazon EC2 by Jurg van Vliet and Flavia Paganelli. O'Reilly provided a free review copy. From cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 review:

Because this is a short book, I'll write a short review. Programming Amazon EC2 (PAE) explains how to use certain elements of Amazon Web Services to deploy applications in Amazon's cloud infrastructure. The discussion centers on cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 authors' experiences deploying live, production Web sites (like Kulitzer) using AWS. I found this approach refreshing and novel, because it reads like a playbook for recreating similar infrastructure for cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 reader's own purposes.