Advertisements
Category Archives: Technology
System Development Lifecycle > Security Development Lifecycle
I was asked to list things I consider when creating/designing a world-class application. Whew. That’s a complex question, and worthy of a PhD thesis, book, etc. Still, several things jumped out at me. And I thought it would be worth … Continue reading
Posted in Security, System Administration, System Engineering, Technology
Tagged cybersecurity, development, doxygen, frameworks, fuzzers, javadoc, lifecycle, Microsoft, Perl, python, scapy, SDL, Security, sulley
Leave a comment
The Top Eleven Reasons why Security Experts get no Respect
Let’s face it – being a security expert is difficult. While security technology is very difficult, dealing with people, especially with people who don’t work in the security field, is far more difficult. Why is that, you say? I have … Continue reading
The need for Public Password Policies
After reading the Dashlane report on “The Illusion of Personal Data Security in E-Commerce”, I kept thinking about how developers replicate common security mistakes and that real progress in security rarely occurs. The industry’s current password policies are a disaster. … Continue reading
Posted in Security, Technology
Tagged Dashlane, KeePass, LastPass, Passwords, Policy, Public Password Policy, RDF, Resource Description Framework, SADL, Security, Security Policy, Semantic Web, Web
2 Comments
The problem with SQRL
I just listened to Steve Gibson’s SQRL (Secure QR Login) authentication scheme. I’m not a cryptographer, but I see some minor issues. I’d appreciate people correcting me and educating me. Here are a few issues I have with the authentication … Continue reading
Security News May 2011
Advanced Persistent Tweets: Zero-Day in 140 Characters http://krebsonsecurity.com/2011/05/advanced-persistent-tweets-zero-day-in-140-characters/ Interesting report on “a Chinese hacker” bragging about zero-day attacks. Sony Online loses 12,700 credit card account numbers, 24.6 million accounts compromised [update] http://www.joystiq.com/2011/05/02/sony-hit-with-second-attack-loses-12-700-credit-card-nu/ A second hack has occurred. Bruce Schneier’s TED … Continue reading
Posted in Hacking, Politics, Security, Technology
Leave a comment
Complete list of Alchemy for iPhone
Looking for the solution to Alchemy? Here’s the complete list of 226 (now 230) recipes for the iPhone’s version of Alchemy. 1Up = Mushroom + Life AI = computer + life Acid = fire + sulfur Acid rain = acid … Continue reading
