Yearly Archives: 2009

XSS in the Wild (Updated)

When I recently tried to look up some information about the song L’America by The Doors, I stumbled upon the site songfacts.com (http://www.songfacts.com/detail.php?id=278). At the site, I was immediately greeted by a popup box cheerfully proclaiming “HAI2U”. After having dealt … Continue reading →

Posted in Miscellaneous | 8 Comments

Security Review: Self-scanning Checkout

Self-scanning checkout, also called “self-checkout” is an automated process that enables shoppers to scan, bag, and pay for their purchases without human assistance. A typical self-scanning checkout lane looks like a traditional checkout lane except that the shopper interacts with … Continue reading →

Posted in Security Reviews | 3 Comments

State of Utah Fleeced for $2.5 Million

Over 2.5 Million dollars was stolen from the State of Utah’s Treasury, according to a recent article in the Salt Lake Tribute.  According to the article, an attacker obtained a vendor number for the University of Utah’s construction department, then … Continue reading →

Posted in Current Events | Tagged , | Comments Off on State of Utah Fleeced for $2.5 Million

Current Event: YoBusted.com, busted?

According to a recent article from Business Week, a photo-sharing site, YoBusted.com, has crossed the line between maintaining personal privacy and extortion. This site allows users to post incriminating pictures of friends without proof that his or her permission to … Continue reading →

Posted in Current Events, Ethics | 2 Comments

Security Review: Automobiles

In the United States, automobiles are everywhere.  Most middle-income families own more than one vehicle, and chances are that everybody knows of at least one person whose vehicle has been broken into or stolen.  Cars, trucks, and SUV’s are very … Continue reading →

Posted in Security Reviews | 2 Comments

Weak Password

According to yahoo!News, the statistics of 28,000 passwords that are recently stolen from a popular US website that is posted in physorg.com  “16 percent took a first name as a password … 14 percent relied on the easiest keyboard combinations … Continue reading →

Posted in Current Events, Ethics | 4 Comments

Current events: Microsoft offers money for catching Conficker virus creator

I didn’t pay much attention to the event mentioned earlier about Conficker virus, until this new event related to that event arose – after all, is it such a rare occasion being infected by a virus. To remind you, it … Continue reading →

Posted in Current Events, Miscellaneous | 3 Comments

Security Review: HomeLink Universal Transceiver

The HomeLink Universal Transceiver is a device that, like a universal remote, can record the output of a wide variety of garage door openers and home automation control systems and emulate the output for future use. When used as advertised, … Continue reading →

Posted in Physical Security, Security Reviews | Comments Off on Security Review: HomeLink Universal Transceiver

Security Review : Add-ons

An add-on is a simple plugin that you use, say for firefox, to let you do your work more easily. This also lets you customize the browser in ways that do not affect the productivity of other people. Add-ons are … Continue reading →

Posted in Policy, Security Reviews | Tagged , , | 1 Comment

Current Events: $9 million ATM scam

  The FBI is investigating an ATM scam that has occurred within a 30 minute period on November 8th. About 130 different ATM machines have been accessed to withdraw a total of about $9 million dollars. The scam hit 49 … Continue reading →

Posted in Current Events, Privacy | 6 Comments