Monthly Archives: January 2007

Two Rivals – Both Cracked by Same Person!?

There is news that the copy protection technology used by Blu-ray discs has been cracked by the same hacker who broke the DRM technology of rival HD DVD discs last month. The coder known as muslix64 used much the same … Continue reading

Share
Posted in Hardware Security, Security | Leave a comment

Once Again About Vista Security

In couple of posts on this blog, I’ve written about dilemmas, different views, challenges and positions related to security of new Microsoft’s operating system Vista. Once again, new article in IEEE Security & Privacy Magazine (January/February 2007 (Vol. 5, No. … Continue reading

Share
Posted in Operating Systems and Application Security | Leave a comment

Security Features vs. Convenience

Very interesting post on Jim Allchin’s blog about some of the design issues Vista team went through and tradeoffs they made in Windows Vista around DEP, UAC, IE and so on. It’s a long, but worthwhile read. It says: One … Continue reading

Share
Posted in Operating Systems and Application Security | Leave a comment

Finsoft PCI-C Device

In previous post I wrote about Finsoft PCI-C appliance for compliance with payment card industry data security standard (PCI DSS). Finsoft made available White Paper about this concept and appliance on company’s web site. It gives more details about: applying … Continue reading

Share
Posted in Internet Security, Privacy, Security | Leave a comment

Chinese Professor Cracks SHA-1, Her 5th Encryption Scheme in Ten Years

Article in the Epoch Times (a Chinese newspaper) writes about a brilliant Chinese professor who has cracked her fifth encryption scheme in ten years. There is also post on Slashdot about this. [Thanks to colleague Maksa for bringing this to … Continue reading

Share
Posted in Cryptography | 1 Comment

Finsoft PCI-C Appliance for Compliance with Payment Card Industry Data Security Standard (PCI DSS)

The Payment Card Industry (PCI) Data Security Standard is a world-wide benchmark mandated by the card schemes (VISA, Mastercard, Amex, Diners, JCB) for the protection of cardholder identity and transaction information. It requires users of card data to: Build and … Continue reading

Share
Posted in Internet Security, Privacy, Security | 3 Comments

Challenge: Remote Arbitrary Code Execution Vulnerabilities in Microsoft Vista & IE 7.0

If you are a passionate security researcher or hacker and want to earn money by challenge this is chance for you. iDefense Labs announced its quarterly vulnerability challenge with focus on: Remote Arbitrary Code Execution Vulnerabilities in Vista & IE … Continue reading

Share
Posted in Operating Systems and Application Security | Leave a comment

Survey: What Are Usual Passwords Used

Again about weak and strong passwords: In post “Is your password strong enough“, I wrote about password policies and how to create strong passwords. It seems that majority of people use weak passwords. In recent article on his blog and … Continue reading

Share
Posted in Security | 1 Comment

The Vulnerability Disclosure Game

In earlier post on this Web site, I wrote about dilemma to disclose or not to disclose security flaws publicly. This disclosure game is becoming hotter and hotter at present time. Recently I’ve read four interesting articles at CSO online. … Continue reading

Share
Posted in General, Security | 2 Comments

Security Code Reviews

Recently I read again interesting article in IEEE Security & Privacy magazine by Michael Howard, “A Process for Performing Security Code Reviews,” IEEE Security & Privacy, vol. 4, no. 4, July/August 2006, pp. 74-79. That very good article starts with: No one … Continue reading

Share
Posted in Books, Magazines and Journals, Secure Programming | Leave a comment