Impossible Dream

23:23 17th Sep 2010

tags: security links
Links for 2010-09-17
- Akamai: Why our IPv6 upgrade is harder than Google’s: Some very interesting quotes in there. “Address exhaustation is real”

23:23 16th Sep 2010

tags: security links
Links for 2010-09-16
- How Can the Large Hadron Collider Withstand One Petabyte of Data aSecond?: Interesting article from High Scalability on the data management issues of the LHC
- Understanding the HDCP Master Key Leak | Freedom to Tinker: Ed Felten with a clear write-up of the implications of the HDCP key leak

23:23 14th Sep 2010

tags: security links
Links for 2010-09-14
- Claimed HDCP master key leak could be fatal to DRM scheme: Now this is interesting. Is it the real master key? If it is, that’s a really bad leak

23:23 13th Sep 2010

tags: security links
Links for 2010-09-13
- ‘Padding Oracle’ Crypto Attack Affects Millions of ASP.NET Apps | threatpost: A very cool attack against ASP.Net encryption. Note that this is Oracle in the Delphic sense, not the DB vendor sensor
- Schneier on Security: Kenzero: “Kenzero is a Japanese Trojan that collects and publishes users’ porn surfing habits, and then blackmails them to remove the information.” Most amusing.
- Smart, Qualified People Behind the Scenes Keeping America Safe: ‘We Don’t Exist’ | The Onion - America’s Finest News Source: The Onion, on the ball as ever.
- iOS 4 Ported to HTC myTouch 3G Android Device | Gadgets DNA: This is cool
- Above the Law - Russia Uses Microsoft to Suppress Dissent - NYTimes.com

23:23 9th Sep 2010

tags: security links
Links for 2010-09-09
- EC2 and Ubuntu - Alestic.com: Ubuntu and Debian AMIs for Amazon EC2

23:23 8th Sep 2010

tags: security links
Links for 2010-09-08
- hstack’s puppet at master - GitHub: Puppet recipies for hadoop
- Hadoop/HBase automated deployment using Puppet at hstack

23:23 7th Sep 2010

tags: security links
Links for 2010-09-07
- Advertisers get hands stuck inside HTML5 database cookie jar

23:23 26th Aug 2010

tags: security links
Links for 2010-08-26
- Corporate Identity Theft Used to Obtain Code Signing Certificate - F-Secure Weblog : News from the Lab: Interesting. A certificate used to sign malware wasn’t stolen but was generated by the malware authors using a stolen company ID
- Pentagon confirms attack breached classified network: Infected USB stick lauches attack “by foreign power”

23:23 25th Aug 2010

tags: security links
Links for 2010-08-25
- Metasploit: Better, Faster, Stronger: DLLHijackAuditKit v2
- Rustock botnet responsible for 40% of spam - Computerworld: Also of interest that Rustock has stopped sending TLS encrypted email. The gain wasn’t worth it it seems

23:23 24th Aug 2010

tags: security links
Links for 2010-08-24
- How I Learned to Stop Worrying and Love Using a Lot of Disk Space toScale