January, 2012

FreeBSD 9 release

FreeBSD has released production version 9, http://www.freebsd.org/releases/9.0R/announce.html Some of the highlights;

• High performance SSH
• PowerPC Playstation 3 support
• ZFS version 28

This made my day

http://blog.acrossecurity.com/2012/01/is-your-online-bank-vulnerable-to.html Very simple concept, and it does not surprise me that people are using this and banks are seeing a loss on it.  If you work for...

By-passing Linux based screen locks

This gives the warm and fuzy's. http://seclists.org/oss-sec/2012/q1/200 The chain is pretty good, the point where the bug was introduced is identified.  From what I can tell this was an optional feature added in the past and recently...

How private is the private mode?

My next project is going to be comparing a set of five to six different browsers that provide a privacy mode and to see what kind of forensic residue is left behind by each.  Also, don't worry about the challenge that we were working on last month I will get back to it, I just have been...

Should you be forced to decrypt your device?

That's a huge question.  I am not a legal expert, and law is not a science either. What I mean by that is you can ask ten courts the same question and get nine same answers but there is always the chance of that one that interprets it differently.

Statistical analysis of elections

And the cool thing of the day award goes to, http://arxiv.org/pdf/1201.3087v1.pdf Not really IT related, and more then a little out of my element.

Hash Identifier

This is handy for any CTF games you may find your self in. https://code.google.com/p/hash-identifier/ It might cut out a bunch of work for you.

Password analysis

Just stumbled on this, http://thepasswordproject.com/rockyou_passpal_0.3_dump Interesting, I have found many times that these dumps will dump vary extremely by what site it's taken from the context.

News news news

Found a few things going on that got me fired up. Megaupload head cheese has been denied bail, they assert that he is a flight risk. http://www.bbc.co.uk/news/world-asia-16711416 I am totally on the fence on this one, I have seen...

Tor Write Up, Kinda

What starts out as a Tor guide quickly goes technical with a wiff a tin foil. http://cryptome.org/0005/tor-opsec.htm ( Not that I am discounting anything they are saying, none of it is...