Monthly Archives: June 2007

The Privacy Risks of Social Networking Sites

Interesting article on popular topic at IEEE Security & Privacy: What Anyone Can Know: The Privacy Risks of Social Networking Sites. Conclusion is: The most frequently identified risk of morphing our social lives and personal communications into the digital era (in … Continue reading

Share
Posted in Privacy, Security | 1 Comment

Gap between Rich and Poor Can Generate Security Problems

For the many years the gap between the richest American’s and the rest of the work force continued to grow. US I.R.S numbers for 2003 show that only Americans in the top 1% of the income bracket, or those who … Continue reading

Share
Posted in General, Security | Leave a comment

Harry Potter 0day

Someone claims to have hacked the Bloomsbury Publishing network, and has posted what he says is the ending to the last Harry Potter book: The attack strategy was the easiest one. The usual milw0rm downloaded exploit delivered by email/click-on-the-link/open-browser/click-on-this-animated-icon/back-connect to … Continue reading

Share
Posted in Fun, Threats, Vulnerabilities, Attacks | Leave a comment

We’re All a Little Nervous in a Post-1748 World

Many things are almost the same after ~260 years. See: Schneier on Security: We’re All a Little Nervous in a Post-1748 World

Share
Posted in General, Security | Leave a comment

Book: UNIX Architecture

This is a new Operating systems course textbook. More details here. I contributed a little bit. Note: Book is in Serbian language. Original title is UNIX arhitektura.

Share
Posted in Books, Magazines and Journals | Leave a comment

Tourism Sites Suffer ‘Italian Job’ Web Attacks

Thousands of Italian tourism Websites have been hit by a virus that infects the computers of visitors, then slithers through them in search of confidential information. The attack, known as The Italian Job, has hit over 4,500 websites on travel … Continue reading

Share
Posted in Internet Security, Malicious Software | 1 Comment

WordPress AndyBlue Theme URL Cross-Site Scripting

There is new challenge for us who use WordPress as blogging tool. According Secunia, a new vulnerability in the AndyBlue theme for WordPress has been discovered. It can be exploited by malicious people to conduct cross-site scripting attacks. Input passed … Continue reading

Share
Posted in Internet Security, Threats, Vulnerabilities, Attacks | Leave a comment

SDL Crypto Code Review Macro

Michael Howard’s talks about SDL Crypto Code Review at his blog. He says: When I review code for security bugs I basically do the following: 1) Run static analysis tools and compile with /W4 to see which source code files … Continue reading

Share
Posted in Cryptography, Secure Programming, Tools and Utilities | Leave a comment

Schneier on ID Theft

At the kickoff reception for the IT Security Summit in Johannesburg, there was a bit of industrial theater about identity theft. Someone tried to pretend he was Bruce Schneier; it was pretty funny, really. Also, someone captured discussion after on … Continue reading

Share
Posted in Conferences, Events, Security | Leave a comment

Should We Teach Students How To Write Viruses?

Over two years ago, George Ledin wrote an essay in Communications of the ACM, where he advocated teaching worms and viruses to computer science majors. He stated in that essay: Computer science students should learn to recognize, analyze, disable, and … Continue reading

Share
Posted in Education and Training, Malicious Software | 1 Comment