Freeware - ControlMyMonitor v1.05 Monitor change setting tool

I would like to mention this Nirsoft Software that permit to change, at lower level, several monitor settings. 

http://www.nirsoft.net/utils/control_my_monitor.html

Cloud - Azure Exam 70-533 and 30 days trial link

Considering that companies are moving slightly to hybrid cloud I would like to mention this Microsoft that permit to gain following certification:

https://www.microsoft.com/en-us/learning/exam-70-533.aspx

At precedent link several resources link and exam information are available.

About precedent exam it would be useful evaluate Azure 30 Days trial period account creation.

https://azure.microsoft.com/en-us/offers/ms-azr-0044p/

We offer eligible customers $200 in Azure credits (“Credits”) to be used within the first 30 days of sign-up and 12 months of select free services (services subject to change)

Here they are some old blog articles related to cloud:

Microsoft - Azure and Veeam Connect

HyperV 2012 - Free Download Ebook

[update 2018.06.17]

Here it is link to have a new free trial 30 days account on Azure:

https://azure.microsoft.com/en-us/free/?CR_CC=200246113&WT.mc_id=A062BFFBA

Video Audio - Online free converter

I would like to mention this website that permit online convertion about these Audiovideo formats:

https://www.apowersoft.it/convertitore-video-gratuito

MP4, MOV, AVI, WMV, MKV, SWF, ASF, FLV, VOB, RM, 3GP, WEBM, MPG, DV, M4A, M4R, MP3, WAV, FLAC, WMA, AC3, AAC, OGG e RA

4K, 3D, HD, AVCHD, HEVC

Security - Free Tool to encrypt data Safe Explorer

I would like to mention this free tool that easily it created an encripted file that can be mounted as a normal HD drive.

Data are encrypted so security is enhanced:

http://www.safehousesoftware.com/Default.aspx

other related blog articles:

Hacker - Truecrypt alternatives

USB - Some free encrypting tools

Hacker - How you can crypt data before to store them in the cloud

USB - FREE super-strong 256-bit encryption PORTABLE software for any hard drive or USB Flash memory stick

Programs - Bitlocker how to implement in your organization

Server - BitLocker: Planning and Policies

Program - Brute Force Wordpress Plugin

About Wordpress I would like to mention this Wordpress plugin that work with .htaccess file.

Brute Force Login Protection  can be found/downloaded here:

https://wordpress.org/plugins/brute-force-login-protection/

Here they are major features:

1. Limit the number of allowed login attempts using normal login form/Auth Cookies
2. Manually block/unblock/(whitelist trusted)  IP addresses
3. Delay execution after a failed login attempt (to slow down brute force attack)
4. Option to inform user about remaining attempts on login page
5. Option to email administrator when an IP has been blocked
6. Custom message to show to blocked users

about plugin installation it is decisevely straight:

1. Install the plugin either via the WordPress.org plugin directory, or by uploading the files to your wp-content/plugin directory.

2. Activate the plugin through the WordPress admin panel.

3. Customize the settings on the settings page.

Hacker - WPA2 password crack

We are all aware about security weakness that Wi-Fi it has, that does not dipend from protocol used.

Infact Wifi it has allways some risks that could never become equal to 0.

Vulnerability found it is related to Wi-fi Protected Access 2 (WPA2). It does not permit to acquire WPA2 password but man in the middle

https://papers.mathyvanhoef.com/ccs2017.pdf

The idea it is that each person that is near to Wi-Fi could implement  Key Reinstallation AttaCK (KRACK) and read trassferred data between PCs and router/access point (man in the middle attack with password, email, sensitive date reading...).

this kind of attack is really efficace against Android/Linux that use wpa_supplican during wi-fi connection process  (but it could be applied to all O.S./devices as well)

You can take a look to this article that better explain an example on how to get this result.

http://www.html.it/articoli/wpa2-password-crack-attacco-al-wifi/

These results could be reached using these tools:

Kali Linux, la suite per gli attacchi WiFi Aircrack-ng, il software per eliminare la protezione HTTPS denominato SSLstrip e WireShark.

Summarizing attack procedure steps:

1. Using vulnerability it create a Wifi fake with same SSID but on different channel.
2. It switch remote device to connect to new fake Wifi and decript all traffick that became in clear mode.

To solve issue you should:

1. Upgrade Router/access point firmware 

2. pcs/mobile devices o.s. (more urgently)

It is available this Python Script to understand if your devices is vulnerable:

GitHub.