Collaborate Disseminate
Context: There are many reasons for wanting a very trustworthy timestamp on a document, as discussed in many other questions here such as this one I wrote in 2010. E.g., in an election auditing context, one thing we’re interested in is a c… Continue reading How hard to hack are S3 Last-Modified timestamps?
The presentation slides by Bishop Fox at RFID Hacking – Live Free or RFID Hard – 01 Aug 2013 – Black Hat USA 2013 – Las Vegas, NV briefly describes a number of RFID hacking approaches, and ends with a picture and statement ab… Continue reading Privacy and security risks of Green Card scanning with or without offical RFID protection envelope
I’m having a hard time figuring out what “Runtime Application Self-Protection” (RASP) really is, though I see it mentioned in the press. The best description I’ve seen of the possible benefits, along with some limitations, i… Continue reading Examples of "Runtime application self-protection" (RASP) in action?
It is often helpful to be able to obtain a good cryptographic checksum of a file, e.g. the SHA-256 hash. This can be used to verify file integrity, so long as you have a reliable source for the hash.
Support for both SHA-256 and MD5 from… Continue reading Convenient cross-platform help on checking secure hashes like SHA-256
As storage technologies change over time, using different encodings and remappings to deal with sector errors, the best way to permanently erase/wipe/shred data changes also.
Methods for flash drives and other solid-state drives are cover… Continue reading How can I reliably erase all information on a hard drive?
In A Comparison of Market Approaches to Software Vulnerability Disclosure (2006), Rainer Böhme describes the profound role of economic "market failure" in the industry dynamics that hinder software security. He also describes 4… Continue reading Progress in market approaches to software vulnerability disclosure?
A wide range of products claim to offer “two-factor authentication” (c.v. Two-factor authentication – Wikipedia). Most are deployed as “something you have” to be used in addition to a normal password (“something you know”). … Continue reading How is "something you have" typically defined for "two-factor" authentication?
What sorts of jobs are there, in which organizations, with what sorts of day-to-day responsibilities?
What areas are good for folks coming out of school, vs what are good 2nd careers for experienced folks coming from various disciplines?
… Continue reading What are the career paths in the computer security field?