Reddit reviews Silence on the Wire: A Field Guide to Passive Reconnaissance and Indirect Attacks

We both enjoyed reading Silence on the Wire: https://www.amazon.com/Silence-Wire-Passive-Reconnaissance-Indirect/dp/1593270461

Yup, passive reconnaissance is quite different from those other programming books ;)

Give Skipfish a try. It was written and open sourced by Michal Zalewski, author of Silence on the Wire.

Silence on the Wire is a set of very interesting lateral/passive attack scenarios in information security. It's not a how-to or "field guide," however; consider it more of a series of theoretical scenarios good for insights and perspective, to help understand and begin to think about the many ways in which a simple tool, mechanism, or a common practice can be exploited for other uses. Some of these scenarios are far-fetched, and others are already out-dated, but that's not the strength of the book.

One great part about this book is that it does not require much knowledge on any of the topics covered, whether technical or otherwise. Zalewski gives an adequate primer on just about everything you need to know in order to understand the basics of what's going on.

It's not light reading by any means, though. This is a great book if you want to wrap your mind around some very cleverly designed scenarios.

Silence on the Wire. Not a whole lot of practical information, but it gives amazing insight into the proper mindset.

+anagrambros:

We both enjoyed reading Silence on the Wire: https://www.amazon.com/Silence-Wire-Passive-Reconnaissance-Indirect/dp/1593270461

It's a bit old, but Silence on the Wire is a great read about indirect attacks such as keyboard monitoring (amongst many others)