Educause Security Discussion mailing list archives

new versions of Spider available


From: Wyman Miles <wm63 () CORNELL EDU>
Date: Wed, 7 Jun 2006 11:47:29 -0400

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

We've posted two new versions of Spider at http://www.cit.cornell.edu:

Linux (Spider 4.0):
- - bug fixes in spider_server when listening on a public interface
- - bug fixed in regex handling in spider_server

Linux spider is a bastardized evolution of a tool originally intended to
scour Web sites, so it'll probably be facing a total rewrite shortly.  It
carries too much convoluted baggage of its haphazard development.

Win32 (Spider 2.1.9a):
- - major bug fixes in the installer that were causing odd hangs because the
ZIP handling library wasn't in place
- - installer bug fixes to detect and warn about absence of .NET Framework
and need for admin rights
- - scan inside ZIP, gzip, bzip2 archives
- - search for and scan alternate data streams on NTFS volumes
- - improvements to the log viewer including the ability to launch the
native
app associated with scanned files
- - more default file extensions to skip
- - improved validation of certain file types before scanning
- - optional atime resets after scanning

In the absence of major bugs to fix, Spider 2.1.9a is going to be our
recommended version.  Feature additions are currently being queued for the
2.2 version.  We ought to be releasing the VisualStudio project files in a
few days.

An OSX-native version of Spider is under development.

We'll probably be launching a dedicated e-mail list for spider and the
general effort of programmatic discovery of confidential data.  I'll post
that when it happens.

Wyman Miles
Senior Security Engineer
Cornell University, Ithaca, NY
(607) 255-8421
-----BEGIN PGP SIGNATURE-----
Version: Mulberry PGP Plugin v3.0
Comment: processed by Mulberry PGP Plugin

iQA/AwUBRIb1EsRE6QfTb3V0EQK74ACfW9Ud8PbWzEuHHoagblSWsUBC86IAoPpf
HWBW/GlX5vkxPyeihcFqb6KD
=Jo8h
-----END PGP SIGNATURE-----

Current thread: