UW Computer Security Research and Course Blog
Pages
-
Recent Posts
- Moving to a Forum
- Current Event – A Broader Look on Wireless Access Point Vulnerabilities
- Current Event : Keyboard hacking (from thin air!)
- Security Review: Urban Chicken Coops
- Google’s Online Library
- Security Review: New Weapons in the Fight Against Doping
- Security Review: Helios Online Voting
- Security Review: Online Taxes
- Security Review: Eye-Fi
- Security Review: Hollywood Awards Presentations
Recent Comments
- Mike on Current Event – A Broader Look on Wireless Access Point Vulnerabilities
- Evil Rocks on Current Event: California Politician Wants All Satellite Imagery of Schools, Churches, and Government Buildings to Be ‘Blurred’
- Evil Rocks on Security Review: Apartment Complex Rent Drop-boxes
- jap24 on Current Event: California Politician Wants All Satellite Imagery of Schools, Churches, and Government Buildings to Be ‘Blurred’
- UW Computer Security Research and Course Blog » Security Review: Google Voice on Security Review – Google Voice
- Matt on Current Event: Kremlin loyalist admits to launching DDoS attack on Estonia
- Claudel on Current Event: Telegraph website hacked
- alexmeng on Security Review: Portable Computing
- alexmeng on Current events: Adobe Reader Vulnerability
- Father_Of_1000000 on Facebook’s lax security
- Lisa P on Security Review: Automobiles
- Matt on Security Review: Portable Computing
- devynp on Security Review: Portable Computing
- liaowt on Current Event: The Elusive Tigger.A Trojan
- Josh Goodwin on Security Review: Automobiles
Archives
Categories
Course Staff
Security Blogs
UW CSE Resources
Meta
Monthly Archives: January 2008
Security Review: Mandylion Password Manager
Summary Password complexity and policy enforcement in today’s enterprise has forced users to take unsecure measures to ensure recollection of the many passwords they use. Users may put passwords in text files on their computer, re-use old passwords frequently, or write … Continue reading
Posted in Security Reviews
3 Comments
UWnews hacked?
I stumbled upon this and wanted to share: First go here -> http://uwnews.washington.edu/ni/article.asp?articleID=34207 Now go here -> http://uwnews.washington.edu/ni/ Any thoughts? Just a basic site defacing?
Posted in Miscellaneous
1 Comment
Perfect Security: Delusional and Misdirected
I hesitate to post commentary about this article, but feel that is important to deconstruct claims by those believing they have all the answers. Especially when they are posting in high-profile blog sites. InfoWorld’s Security adviser Roger A. Grimes has … Continue reading
Posted in Current Events
1 Comment
One Username to Rule Them All
My husband has been working on a pet project lately that needs to have a user login system. Although he could build one himself or purchase a system, he is probably going to go with OpenID. Using OpenID simplifies the … Continue reading
Here are RFID Debit Cards, whether you wanted them or not.
In the world of banking, attention has turned to the prospect of using RFID technology for contactless transactions via bank cards. While this in of itself is a security concern, John Leyden brought to light in his article (http://www.theregister.co.uk/2008/01/27/paywave/) that … Continue reading
Posted in Current Events
7 Comments
Logic Bomb Fails to Cripple Medco’s Systems
In a recent article on Computerworld, it was reported that a former system administrator of Medco planted a logic bomb which was intended to cripple the company’s network. Medco deals with prescribing drugs and various other heath services. Due to … Continue reading
Posted in Current Events, Ethics, Policy
2 Comments
Pillaged MySpace Photos Show Up in BitTorrent Download
More than half of the million images that are private photos of MySpace users was stolen and uploaded onto BitTorrent. This is a huge privacy breach to MySpace users. The hacker, “DMaul”, said that he learned the security hole from … Continue reading
Posted in Availability, Current Events, Privacy
5 Comments
Alledged Skype Surveillance by German Police
Documents posted today on WikiLeaks suggest that German police in Bavaria may have used a trojan for intercepting Skype calls as part of their surveillance of suspects. One document is an offer from DigiTask, a German company, to rent Skype … Continue reading
Posted in Current Events, Privacy
4 Comments
DoS attacks and International Tension
Last May during a protested movement of a World War II soviet statue, Estonian governmental and political sites were flooded in a series of Denial of Service (DoS) attacks. These attacks consisted of hammering the sites servers with requests till … Continue reading
Posted in Availability, Current Events
2 Comments
$7.1 billion loss at major European Bank due to fraud
I haven’t been able to thoroughly analyze this situation, but it seemed like something particularly germane to this blog (so I decided to post it with brief commentary). Basically, the French bank Société Générale (SocGen) recently revealed that single rogue … Continue reading
Posted in Current Events
3 Comments