Recent Twats
- @PatrickElOso Today I don't feel like doing anything I just wanna lay in my bed Don't feel like picking up my phone, so leave a message...
- RT @RealGilbert: The RIP Eddie Murphy reports are false! The cops found a dead black guy and just assumed it was either Eddie Murphy or ...
- Why Twitter’s new policy is helpful for free-speech advocates - http://t.co/lMFgD7F1
Archives
- January 2012
- December 2011
- November 2011
- October 2011
- September 2011
- August 2011
- July 2011
- June 2011
- May 2011
- April 2011
- February 2011
- January 2011
- December 2010
- November 2010
- October 2010
- September 2010
- August 2010
- July 2010
- June 2010
- May 2010
- April 2010
- March 2010
- February 2010
- January 2010
- December 2009
- November 2009
- October 2009
- September 2009
- August 2009
- July 2009
- June 2009
- May 2009
- April 2009
- March 2009
- February 2009
- January 2009
Monthly Archives: August 2010
The insecurity of Sirius XM Satellite radio…
I recently received a snail mail to renew my Sirius XM Satellite radio account. They gave me two simple options for renewal: 1) Call via telephone or 2) Renew online. They were nice enough to include my username and password in the … Continue reading
Posted in news
Leave a comment
Generating an SSL server report card
The kind folks over at Qualys are running a site which will “grade” an SSL server based on its security configuration. The site below will generate a report card of a site’s SSL configuration based on factors such as the certificate … Continue reading
Computer Forensics practice
You’ve just finished receiving digital forensics training or acquired a new tool (FTK, Encase, Sleuth). Now what? You’re waiting for some real cases to crack. In the meantime, over on the SANS Forensics blog, Ken Pryor has posted an excellent … Continue reading
Adobe Flash Begins to Respect Private Browsing
There’s been some recent news regarding the insecurity of web browsers’ Private Browsing feature and how not so private it really is. A big culprit leaving a trail on your computer are Flash cookies which are stored and governed outside … Continue reading
Posted in news
Leave a comment
jailbreakme.com question and answer
F-Secure has posted a Q+A about the recent jailbreakme.com website and the PDF/kernel vulnerability it exploits in iOS. It’s worth a read and can be found here: http://www.f-secure.com/weblog/archives/00002004.html Of note: Effects iOS, NOT just the iPhone (this means ipod, touch, … Continue reading
Posted in news
Leave a comment
Implementing password resets
David Shpritz from the Securabit podcast wrote a short paper aimed at developers on how to build secure password reset functionality. Highlights: Always email a password reset link as another means to verify identity Consider use of SMS message for … Continue reading
Posted in news
Leave a comment
Secunia 2010 Half Year Report
The Secunia Half Year report has been released and can be found here: http://secunia.com/gfx/pdf/Secunia_Half_Year_Report_2010.pdf There’s an interesting article on Apple Insider which is critical of the findings especially considering Secunia really throws Apple under the bus as “having the most … Continue reading
Posted in news
Leave a comment
Defcon and Black Hat Recap
Andy Greenberg from The Firewall has a nice wrap-up from the recently completed security conventions…. Employees at Apple, Google, BP and many other companies spilled secrets in a “social engineering” contest that challenged Defcon attendees to call corporations and trick … Continue reading
Posted in news
Leave a comment
Mid Year Security Report Recap
Found this comprehensive list of recently released mid year security reports on the SecuraBit website: Verizon 2010 Data Breach Investigations Report (DBIR) The big news here is that the DBIR now includes data from the U.S. Secret Service, giving the … Continue reading
Posted in news
Leave a comment