31
32
33
Analysis of bank PIN numbers
Is your PIN number too predictable? Detailed analysis on PIN number databases.
34
35
36
Storing Passwords Securely
Why "SHA 256-bits enterprise-grade password encryption" is only slightly better than storing passwords in plain text, and better ways to do it.
37
Hotel Wifi JavaScript Injection
So I’m checking my blog on the hotel wifi, like ya do, and I notice something a little off with the style. There’s a dark colored bar at the top of the page that shouldn’t be there. That’s funny. Maybe a recent Firefox update changed how they treat CSS?
38
39
Lessons for uncultured web developers
Who likes being treated like they’re in a minority group? Unless it means you’re in that exclusive group of playboy (or girl) billionaires, “minority group” often ends up with you being unfairly discriminated against because you don’t represent the perceived majority. As with social discrimination, technology…
40
SHA-3 to Be Announced
NIST is about to announce the new hash algorithm that will become SHA-3. This is the result of a six-year competition, and my own Skein is one of the five remaining finalists (out of an initial 64). It’s probably too late for me to affect the final decision, but I am hoping for “no award.” It’s not that the new hash…
41
42
43
44
45
Damn Cool Algorithms: Homomorphic Hashing
Posted by Nick Johnson | Filed under homomorphic-hashing , damn-cool-algorithms , fountain-codes
46
47
48
Please turn on two-factor authentication
You should read Mat Honan’s heartbreaking tale of a hack attack and the ensuing discussion on Techmeme. Much of the story is about Amazon or Apple’s security practices, but I would stil…
49
Smuggling USB Sticks
"This Is Not A Film" by Iranian director Jafar Panahi, who is under house arrest in his country for alleged “propaganda against the regime,” will be screened under the Free Jafar Panahi Program of the 13th Cinemanila. The film was smuggled from Iran in a Flash-Drive hidden inside a cake to Cannes for screening a few…
50
Charlie Stross on Girls Around Me
There is an app, currently on the Apple app store as a free download, called Girls Around Me .
51
Using the HTML5 Fullscreen API for Phishing Attacks
Feross Aboukhadijeh is a computer security researcher, teacher, web developer, designer, long distance runner, gamer, music lover, and builder of websites that (sometimes) go viral.
52
Joe Biden tried to ban email encryption back in 1991
There are rumors that the Obama campaign used an Ubuntu-based Linux distribution, though further analysis seems to indicate that these images were fakes. It would be great if someone from the Obama…
53
Hacking an ATM
At the Black Hat conference in 2010, an ATM designed and built by my employer was setup on stage, and a security researcher demonstrated an ...
54
Linux Local Privilege Escalation via SUID /proc/pid/mem Write
Introducing Mempodipper , an exploit for CVE-2012-0056. /proc/ pid /mem is an interface for reading and writing, directly, process memory by seeking around with the same addresses as the process's virtual memory space. In 2.6.39, the protections against unauthorized access to /proc/ pid /mem were deemed sufficient…
55
56
57
58
59
#1 CSRF Is A Vulnerability In All Browsers
Navigation: #1 CSRF Is A Vulnerability In All Browsers - You MUST Deny It ASAP. #2 top secret(will be published on April 1) #3 Another Ra...
60
Mozilla blogger bought 1 million Facebook entries (full name, e-mail) for $5
I have the bloody habit to look for cheap deals on some websites and today I’ve got the featured offer to buy more than 1 million Facebook entries containing Full Name, e-mail and Facebook profile URL. I make a quick check over the data and surprise, surprise: most of them are real and I even know some of those users.