Monthly Archives: January 2008
Security Review: Mandylion Password Manager
Summary Password complexity and policy enforcement in today’s enterprise has forced users to take unsecure measures to ensure recollection of the many passwords they use. Users may put passwords in text files on their computer, re-use old passwords frequently, or write … Continue reading
UWnews hacked?
I stumbled upon this and wanted to share: First go here -> http://uwnews.washington.edu/ni/article.asp?articleID=34207 Now go here -> http://uwnews.washington.edu/ni/ Any thoughts? Just a basic site defacing?
Perfect Security: Delusional and Misdirected
I hesitate to post commentary about this article, but feel that is important to deconstruct claims by those believing they have all the answers. Especially when they are posting in high-profile blog sites. InfoWorld’s Security adviser Roger A. Grimes has … Continue reading
One Username to Rule Them All
My husband has been working on a pet project lately that needs to have a user login system. Although he could build one himself or purchase a system, he is probably going to go with OpenID. Using OpenID simplifies the … Continue reading
Here are RFID Debit Cards, whether you wanted them or not.
In the world of banking, attention has turned to the prospect of using RFID technology for contactless transactions via bank cards. While this in of itself is a security concern, John Leyden brought to light in his article (http://www.theregister.co.uk/2008/01/27/paywave/) that … Continue reading
Logic Bomb Fails to Cripple Medco’s Systems
In a recent article on Computerworld, it was reported that a former system administrator of Medco planted a logic bomb which was intended to cripple the company’s network. Medco deals with prescribing drugs and various other heath services. Due to … Continue reading
Pillaged MySpace Photos Show Up in BitTorrent Download
More than half of the million images that are private photos of MySpace users was stolen and uploaded onto BitTorrent. This is a huge privacy breach to MySpace users. The hacker, “DMaul”, said that he learned the security hole from … Continue reading
Alledged Skype Surveillance by German Police
Documents posted today on WikiLeaks suggest that German police in Bavaria may have used a trojan for intercepting Skype calls as part of their surveillance of suspects. One document is an offer from DigiTask, a German company, to rent Skype … Continue reading
DoS attacks and International Tension
Last May during a protested movement of a World War II soviet statue, Estonian governmental and political sites were flooded in a series of Denial of Service (DoS) attacks. These attacks consisted of hammering the sites servers with requests till … Continue reading
$7.1 billion loss at major European Bank due to fraud
I haven’t been able to thoroughly analyze this situation, but it seemed like something particularly germane to this blog (so I decided to post it with brief commentary). Basically, the French bank Société Générale (SocGen) recently revealed that single rogue … Continue reading