era's Feed

Password Composer - generate unique passwords for web sites

era — Mon, 19 Jun 2006 01:25:00 -0400

Firefox extension incorporating Nick Wolff's Password Generator bookmarklet Tagged by era under 03a, browser, extension, firefox, security, usability, 20060619-0123,

WarDriving.com

era — Mon, 19 Jun 2006 01:25:00 -0400

Tagged by era under 00tbd, network, security, wlan, 20060619-0123,

VoteTrustUSA - Florida: The Harri Hursti Hack and its Importance to our Nation

era — Mon, 19 Jun 2006 01:25:00 -0400

What everybody knew already: Diebold voting machines are easily hacked Tagged by era under computing, security, society, 20060619-0123,

Mark's Sysinternals Blog: Sony: You don’t reeeeaaaally want to uninstall, do you?

era — Mon, 19 Jun 2006 01:25:00 -0400

Mark Russinovich exposes the pesky XCP rootkit DRM used by Sony What I find the most amusing is that the vendor who created this rootkit malware apparently included the GNU Lame mp3 library in violation of its LGPL license. Tagged by era under advocacy, audio, blog, critical, erablog, media, security, virus, 20060619-0123,

/~colmmacc/ Â» Blog Archive Â» Getting rid of errant HTTP requests

era — Mon, 19 Jun 2006 01:25:00 -0400

More on HTTP teergrubing, including a nasty Location: loop I experimentally set up a CGI which feeds stuff from /dev/random at a glacial pace, and ScriptAlias a number of frequently requested security holes to that. Lessee what I have in the trap tomorrow ... obPeeve: The guy could learn how to spell "teergrubing". (The German word "grube" has a long "oo" sound in the middle and a short "uh" sound at the end.) See also http://de.lirio.us/rubric/entry/51442 Tagged by era under blog, erablog, peeve, security, server, web, 20060619-0123,

Jesse Ruderman Â» Banks and https

era — Mon, 19 Jun 2006 01:25:00 -0400

On the web pages of some large US banks, what happens when you change the URL from "http" to "https" or vice versa Summary: they suck Tagged by era under advocacy, phishing, security, standard, web, 20060619-0123,

Hospital employees fired for revealing email password and leaking patient info (Salt Lake Tribune, Utah)

era — Mon, 19 Jun 2006 01:25:00 -0400

Sheesh, people just DO NOT GET password security '"Our policy is that employees safeguard their passwords and access codes so we can ensure privacy and confidentiality for our patients. A violation of that policy can result in termination." Nelson said she knew the policy but says that workers sharing log-ins isn't uncommon.' The woman still wants to appeal her termination. Tagged by era under article, blog, computing, erablog, peeve, privacy, security, zeitgeist, 20060619-0123,

Linux Firewall-related /proc Entries

era — Mon, 19 Jun 2006 01:25:00 -0400

Tagged by era under 00tbd, linux, network, security, 20060619-0123,

Sys Admin Magazine>v14, i05: Avoiding SQL Injection Attacks

era — Mon, 19 Jun 2006 01:25:00 -0400

"this wasn't a matter of hacking into her phone at all, [instead, they used] a well-known security flaw on T-Mobile's Web site, with which the phone is synchronized" (Sic, the link is to a ".htm" file. The "print friendly" link seems to be broken, otherwise I'd have linked to that as usual.) Tagged by era under article, blog, erablog, security, server, www, 20060619-0123,

The Six Dumbest Ideas in Computer Security