NEWS: Sniffer hijacks secure traffic from unpatched iPhones

Unpatched iPhones can be exploited even with availability of SSL. One of the methods, published 9 years ago, is so easy that "my mother could actually use this", says Chet Wisniewski, a security researcher with Sophos.

Moral of the story, unless you have iOS 5 with over-the-air-updates, make sure to plug in your iPhone and get it updated.

TIPS & TRICKS: MLGPOs

Learned something new today. There's Active Directory Group Policies Objects (GPOs) and Local Group Policies. Starting with Vista, there is now something called Multiple Local Group Policy Objects (MLGPOs). Here's a quick summary of how these work:

Level 1: Affects everyone
Level 2A: Affects the person if they're a Joe User
Level 2B: Affects the person if they're a local Admin
Level 3: Affects a specific person based on username

With AD GPO's available, I'm not sure why LGPOs are needed. However, I do like having granularity with MLGPOs. Hope I find it useful at some point.

Here's a blog post about it:

http://www.gpanswers.com/blog/140-gp-client-and-internals/695-why-local-gpos-matter.html