Entries Categorized as 'Security'

See Through Wall with Wifi

Date October 12, 2009

That’s very impressive: Researchers at the University of Utah have found a way to see through walls to detect movement inside a building.

The Building Security In Maturity Model

Date March 17, 2009

The Building Security In Maturity Model (BSIMM), a new model that is a “collection of good ideas and activities that are in use today” to determine the state of software security in an organisation. This maturity model provides a way to compare your internal security model to the best available industrial standards.

Physical Security Maxims

Date September 30, 2008

From Bruce Schneier’s Blog. This is a copy from here.
Physical Security Maxims
Roger G. Johnston, Ph.D., CPP
Vulnerability Assessment Team
Argonne National Laboratory
rogerj@anl.gov     630-252-6168
http://www.ne.anl.gov/capabilities/vat

http://www.cl.cam.ac.uk/~rja14/musicfiles/preprints/Johnston/securitymaxims.ppt
Security Maxims
The following maxims, based on our experience with physical security, nuclear safeguards & vulnerability assessments, are not absolute laws or theorems, but they will be essentially correct 80-90% of  the time.
Infinity Maxim: There [...]

Try This Captcha

Date July 14, 2008

Try this captcha.

Workshop on Security and Human Behaviour 2008

Date July 2, 2008

At the moment I am especially interested in security and human behaviour (there’s a good article to start in German on zeit.de: Die Konjunktur der Ängste). Ross Anderson and Bruce Schneier were blogging about this workshop, where a lot of interesting people attended, for example James Randi.
Here is a list of all attendees and their [...]

The Six Dumbest Ideas In Computer Security

Date June 20, 2008

Old, but good: Marcus Ranum’s “The Six Dumbest Ideas in Computer Security”.

Hacking A Coffee Maker

Date June 20, 2008

Someone hacked a Jura F90 Coffee maker.

How To Open An Electronic Lock?

Date June 18, 2008

Just take a magnetic ring. You can find additional information here.
We had (!) such a lock at the office, but it was removed and replaced by a much more secure device
These are the kind of attacks/hacks I really appreciate, because they make us more secure. This demo shows us how easy it is [...]

Cracking 1024-bit RSA Key?

Date June 13, 2008

Kaspersky Lab is launching an international distributed effort to crack a 1024-bit RSA key used by the Gpcode Virus.
From their website:
We estimate it would take around 15 million modern computers, running for about a year, to crack such a key.
First, I don’t think they can crack a 1024-bit RSA key and second, what if the [...]

Attacks On Infrastructure

Date June 13, 2008

This article in Technology Review (German) describes the emerging problems of infrastructural assets like power plants when they are connected to the internet for economic reasons. When SCADA systems are controlable from remote we will experience serious attacks in future.
But not only attacks are dangerous. The more connected computers and software are the more they [...]