Entries Categorized as 'Security'

Try This Captcha

Date July 14, 2008

Try this captcha.

Workshop on Security and Human Behaviour 2008

Date July 2, 2008

At the moment I am especially interested in security and human behaviour (there’s a good article to start in German on zeit.de: Die Konjunktur der Ängste). Ross Anderson and Bruce Schneier were blogging about this workshop, where a lot of interesting people attended, for example James Randi.
Here is a list of all attendees and their [...]

The Six Dumbest Ideas In Computer Security

Date June 20, 2008

Old, but good: Marcus Ranum’s “The Six Dumbest Ideas in Computer Security”.

Hacking A Coffee Maker

Date June 20, 2008

Someone hacked a Jura F90 Coffee maker.

How To Open An Electronic Lock?

Date June 18, 2008

Just take a magnetic ring. You can find additional information here.
We had (!) such a lock at the office, but it was removed and replaced by a much more secure device
These are the kind of attacks/hacks I really appreciate, because they make us more secure. This demo shows us how easy it is [...]

Cracking 1024-bit RSA Key?

Date June 13, 2008

Kaspersky Lab is launching an international distributed effort to crack a 1024-bit RSA key used by the Gpcode Virus.
From their website:
We estimate it would take around 15 million modern computers, running for about a year, to crack such a key.
First, I don’t think they can crack a 1024-bit RSA key and second, what if the [...]

Attacks On Infrastructure

Date June 13, 2008

This article in Technology Review (German) describes the emerging problems of infrastructural assets like power plants when they are connected to the internet for economic reasons. When SCADA systems are controlable from remote we will experience serious attacks in future.
But not only attacks are dangerous. The more connected computers and software are the more they [...]

Fax Signatures

Date June 3, 2008

Bruce Schneier writes about fax signatures and why they are still used though they do provide almost no security.

Windoze: “Built-In” Security Tools

Date May 30, 2008

For those of us who didn’t know this: Built-in Windows Command-Line Security Tools. “Built-In”, haha …

Debian’s poor OpenSSL Randomness

Date May 16, 2008

This is worth reading.

Update: The Debian people created a website with instructions to rollover keys. And there’s also a Perl script for testing SSH servers an other packages for vulnerabilities.
Update 2: Bruce Schneier jumped in. And here is a xkcd cartoon and some source.
Update 3: Here are some useful tips (in German).