Collaborate Disseminate
Last week, the Scientific Working Group on Digital Evidence published a draft document — "SWGDE Position on the Use of MD5 and SHA1 Hash Algorithms in Digital and Multimedia Forensics" — where it accepts the use of MD5 and SHA-1 in digital forensics applications: While SWGDE promotes the adoption of SHA2 and SHA3 by vendors and practitioners, the MD5 and… Continue reading MD5 and SHA-1 Still Used in 2018
Jim Harper at CATO has a good survey of state ID systems in the US…. Continue reading ID Systems Throughout the 50 States
I would like to share some sensitive information in a PDF document that I created, but I’m afraid that my identity can be traced back.
I installed a trial Microsoft Word on a Windows 7 (guest OS on VirtualBox, without any per… Continue reading Hiding the identitiy of an author
I just got some hashes from a database of websites but I can not identify the type of hash:
15F13378D4E2A66670F908DF1A8DD5B60854A9B285CF358AF8BF29193099386B
F35C04C8F7E1BDFD5D551BE57A49620D0854A9B285CF358AF8BF29193099386B
B97… Continue reading Help me identify the hash types [on hold]
I became aware of Trusona recently (see their demo on this page https://www.trusona.com/ ). They want to ‘end passwords’.
I believe in the idea that ‘reasonable security’ = {something you are + something you know + something… Continue reading Can a scanning id system like trusona really be secure?
Background
I am developing an Android application for work which runs on a Zebra TC51 bar code scanner, which I have been playing around with.. I scanned my NYS drivers license and inspected the output this morning (sanitized output is be… Continue reading Understanding ANSI/AAMVA encoded data (pdf417 data matrix) on back of NYS ID card
In the process of registering to Callcentric, they asked me a scanned copy of my passport.
I already gave them my mobile number, where they could possibly make an interview, and of course they have my IP address, which allow… Continue reading VoIP service requires a scanned copy of my passport
Interesting research: "You are your Metadata: Identification and Obfuscation of Social Media Users using Metadata Information," by Beatrice Perez, Mirco Musolesi, and Gianluca Stringhini. Abstract: Metadata are associated to most of the informa… Continue reading Identifying People by Metadata
Interesting research: "You are your Metadata: Identification and Obfuscation of Social Media Users using Metadata Information," by Beatrice Perez, Mirco Musolesi, and Gianluca Stringhini. Abstract: Metadata are associated to most of the information we produce in our daily interactions and communication in the digital world. Yet, surprisingly, metadata are often still categorized as non-sensitive. Indeed, in the past, researchers and… Continue reading Identifying People by Metadata
The goal here is to prevent identification of the users and their data. Is it a good idea to partition my database into multiple ones, one for each kind of sensitive data, hiding the links between them?
At first it seems tha… Continue reading Partitioning database to enhance security/anonymity?