Tag: security
-
Breaking https' AES-GCM (or a part of it)
The coolest talk of this year's Blackhat must have been the one of Sean Devlin and Hanno Böck. The talk summarized this early year's paper, in a very cool way: Sean walked on stage and announced that he didn't have his slides. He then said that it didn't matter because he had a good idea …
-
Anatomy of Cookie XSS
Using a real-life vulnerability he discovered on the University of Oxford's IT Services website as an example, Dan reminds you of the importance of sanitising even cookie data to prevent XSS vulnerabilities.
-
Payment Redirection Fraud
Here is an example scenario You receive an email requesting a payment. It could be for rent, it could be fees for a course or any other legitimate reason. Typically, the payment is a significant sum. The email contains the banking details you need to make the payment. Then shortly after the 1st email arrives…
… -
Raspberry Pi VPN Hotspot (or How To Infuriate Theresa May For Under £40)
For a small sum of money and a little time, you too can have a little box that encrypts everything on your WiFi network until it leaves the UK.
-
Squiz CMS Easter Eggs (or: why do I keep seeing Greg's name in my CAPTCHA?)
When using the Squiz CMS, Dan noticed that his CAPTCHA kept containing the same patterns of letters. These turned out to be the names of early developers on the system, which in turn lead Dan to uncover Easter Eggs in the software that have been deliberately concealed by their authors.
-
Social Engineering of the Day
Dan goes to deliver a lecture on security and, before he's even identified himself, manages to find out from the receptionist the best way to circumvent their door locks.
-
Something like HTTPS Everywhere for new Opera?
I'm looking for an extension that will automatically redirect-to-HTTPS for particular domains, e.g. to ensure that I'm using the secure version of Wikipedia, etc., whenever I go there. The HTTPS Everywhere plugin from the EFF does this for Firefox and Chrome; what can I do to make this work in Opera?
-
Phone Security == Computer Security
Dan gets paranoid and despairs about the ease with which mobile devices can be stolen, the wealth of personal information stored on them, and the under-use of readily-available encryption tools.
-
Rave Reviews for Your Password Sucks
After running a breakout session entitled "Your password: how bad guys will steal your identity" at the 2012 UAS Conference, Dan gets rave reviews. Nice.
-
KeePass for Opera
Dan develops a browser plugin for Opera to allow the KeePass Password Safe to work with Opera 12+, after the Opera team remove the feature upon which many KeePass users depended.
-
Cardless Cashpoints
RBS Group banks now offer the ability to withdraw cash from ATMs without using a bank card, by making the withdrawal request from their mobile app. Dan gives it a go, and shares his thoughts on the process.
-
Internetland
In Internetland, everybody has prosopagnosia. That's why it's so important that the people who live there treat their passwords with care. Dan tells a story about Alice, Bob, Eve, and an antiques store.
-
Instead Of Blogging...
In a declaration of 'blog bankruptcy', Dan lists all of the topics that he'd hoped to have blogged about during the last (very busy!) month, and gets on with writing about other things. He's been busy!
-
Deliciously Silly Password Restrictions
After being reminded that social bookmarking service del.icio.us exists, Dan logs in and gives it a go. His first experience with its new version... isn't terribly promising.
-
Bank Security
Dan tries to tell a bank that their website is insecure. You'd think it'd be easier than this.