Category Archives: Commentary

More POS Hacks Grab CC Numbers

Posted on 2008-05-02 by Space Rogue

Everyone gets a kick out of TV shows and news reports that feature stupid criminals. People who get themselves locked inside the store they are trying to rob or stuck in the air vent attempting to break in. For some … Continue reading →

Posted in Commentary, Current Events | Comments Off on More POS Hacks Grab CC Numbers

Cyber UL – Reloaded

Posted on 2008-04-21 by Space Rogue

So about nine years ago Tan at the L0pht first wrote about the creation of a Cyber Underwriters Laboratory. Like the real UL the Cyber UL would be tasked with independently testing and evaluating software, specifically security related software without … Continue reading →

Posted in Commentary, L0pht | Comments Off on Cyber UL – Reloaded

Security Ethics? Are there any?

Posted on 2008-04-16 by Space Rogue

I have a list of websites that I read as part of my morning ritual just like everybody else. It helps fritter away the first few minutes of the day as I wait for my tea to cool to a … Continue reading →

Posted in Commentary | Comments Off on Security Ethics? Are there any?

Defacement Archive May Close

Posted on 2008-03-18 by Space Rogue

One of the more popular features of HNN (The Hacker News Network) was the daily list of web page defacements that was maintained at the time by Attrition.org. Maintaining such an archive soon overwhelmed Attrition and the task was taken … Continue reading →

Posted in Commentary, Current Events | Comments Off on Defacement Archive May Close

More USB Snake Oil

Posted on 2008-03-15 by Space Rogue

I’m still busy recovering from the excellent Source Boston conference and I will post a recap soon but I wanted to get this out there. Last week I wrote about RFID enabled external hard drives that supposedly offered secure encryption … Continue reading →

Posted in Commentary, Snake Oil | Comments Off on More USB Snake Oil

More secure products that aren’t

Posted on 2008-03-03 by Space Rogue

Think that cool USB thumb drive you just bought with the word of ‘encryption’ written in big letters all over the package is really secure? Think again. ComputerWorld recently reviewed seven ‘secure’ USB drives and basically found that they are … Continue reading →

Posted in Commentary, Snake Oil | Comments Off on More secure products that aren’t

Tamper Resistant Point of Sale Machine Isn’t

Posted on 2008-03-03 by Space Rogue

When I see something labeled tamper-resistant or even tamper-proof I don’t assume it is secure I just think that it is a little more difficult to break into than something that isn’t tamper-resistant. Three researchers at the University of Cambridge … Continue reading →

Posted in Commentary, Current Events, Snake Oil | Comments Off on Tamper Resistant Point of Sale Machine Isn’t

Less Than Two Weeks to Source2008

Posted on 2008-02-28 by Space Rogue

So I was having lunch with one of the organizers of the Source Boston 2008 conference yesterday (Spicy Beef Bowl, mmmmm) and realized that this is going to be one really great conference. Not only are there big name speakers … Continue reading →

Posted in Commentary, Current Events | Comments Off on Less Than Two Weeks to Source2008

AES = XOR = Secure? WTF!?!

Posted on 2008-02-20 by Space Rogue

I don’t have time for all of the stupidity out there but this is just to stupid to let pass by. Easy Nova a German company that makes a variety of computer storage accessories, recently released a hard drive case … Continue reading →

Posted in Commentary, Current Events, Snake Oil | Comments Off on AES = XOR = Secure? WTF!?!

Responsible disclosure for vendors?

Posted on 2008-02-19 by Space Rogue

If a vendor finds a vulnerability in a competitors code are they obligated to tell them? What exactly is ethical and or responsible disclosure when it comes to competing vendors? Among security researchers the general consensus these days is to … Continue reading →

Posted in Commentary, Current Events | Comments Off on Responsible disclosure for vendors?