Daily Archives: March 16, 2008

Security Review: Costco

Summary: In order to shop at Costco, one must have a membership and proof of that membership. When an individual purchases a membership at Costco, they and their spouse may use the membership at any Costco. Otherwise, no one else … Continue reading

Posted in Security Reviews | 8 Comments

Apple’s Hymn/FairPlay DRM

Summary FairPlay is an encryption scheme (DRM) developed by Apple to  prevent users from further distributing playable content to other users. It  has been cracked numerous times in different ways to create unrestricted/unencrypted versions of the content. The technology has … Continue reading

Posted in Security Reviews | Comments Off on Apple’s Hymn/FairPlay DRM

Current Events: No need for jello, fingerprint USB sticks are easy to crack.

No need to go to great lengths to try to spoof finger print scanners on USB sticks. You can just tell the device that the data is public. Researches discovered this vulnerability in models from 9pay and A-Data fingerprint USB … Continue reading

Posted in Current Events, Privacy | Comments Off on Current Events: No need for jello, fingerprint USB sticks are easy to crack.

Hundreds of Thousands of Web Pages Hijacked

McAfee noticed Wednesday an ongoing attack that modifies web pages to redirect traffic to another site in China. This site then infects PC’s with a Trojan to steal personal information, including usernames/passwords for online banking. According to McAfee, “one gang” … Continue reading

Posted in Current Events | 1 Comment

Security Review: Husky Cards with Smart Card Technology

Summary The Husky Card is a University of Washington student’s lifeline.  It provides student identification, building access, public transportation, and access to monetary funds for use on and around campus.  Starting in 2009, the Husky Card will get an upgrade … Continue reading

Posted in Security Reviews | 5 Comments

Steam: The Content Distribution Platform for Games

Within the last couple of years, Valve Corporation (of Half-Life fame) over in Bellevue designed and implemented a content distribution platform called “Steam” with the intent of distributing its games through a distributed network placed around the world. Their goal … Continue reading

Posted in Security Reviews | Tagged , , | 3 Comments

Virus laden hardware emerges

While the idea of software viruses is by no means new to those who work with computers, a new vector of attack seems to be developing in the form of hardware shipped from the manufacturer that is already infected with malware. … Continue reading

Posted in Current Events | 1 Comment

Security Review: The Switch from IPv4 to IPv6

The premise is, at some point in the future, it would be ideal for the internet to be using IPv6 as it’s main backbone, rather than the current IPv4. A discussion of the features and algorithms of IPv6 is beyond … Continue reading

Posted in Security Reviews | Comments Off on Security Review: The Switch from IPv4 to IPv6

Security Review: iPhone

iPhone offers lots of convenient functionality, such as phone, internet, music play and etc., making it a communication power house. However, it also opens up lots of new security risks. Since there is already an security review on iPhone 3rd … Continue reading

Posted in Security Reviews | Comments Off on Security Review: iPhone

M-Pesa: Banking via SMS

I was recently informed about a rather interesting service that is being used in Kenya called M-PESA.   According to their website, “M-PESA provides an affordable, fast, convenient and safe way to transfer money by SMS anywhere in Kenya. Through … Continue reading

Posted in Miscellaneous, Security Reviews | Tagged , | 2 Comments