We designed this “Off The Grid” system to provide Internet users a uniquely and provably secure alternative to simply hoping that malicious software hasn’t, or won’t, infiltrate their personal password keeper, online password storage system, on-the-fly password generator, computer-hosted password storage vault, or whatever convenience technology is being employed to generate and/or store the passwords used to authenticate the user’s identity to remote Internet websites.

“Off The Grid” converts any website’s name into a secure password that you never need to write down, store, or remember because you can easily re-create the same secure password from the same website name the next time, and every time, you need it.

Ich denke darüber nach meine Passwörter mit diesem System zu erstellen und in 1Password zu speichern. Sollte 1Password eines Tages mal nicht mehr verfügbar sein könnte ich noch immer alle Passwörter wiederherstellen oder wenn ich nicht an einer eigenen Maschine sitze…

Possibly related posts (automatically generated)

• Digital Security for Activists
• Password Strength Checker
• Erfolgreicher Angriff auf Quantenkryptographie
• Die 10 beliebtesten Passwörter
• Password Manager

Die Forscher Juliano Rizzo und Thai Duong wollen kommenden Freitag auf der Sicherheitskonferenz ekoparty in Buenos Aires ein Tool namens BEAST (Browser Exploit Against SSL/TLS) vorstellen, mit dem ein Angreifer im gleichen Netz via SSL übertragene Browsercookies abgreifen und entschlüsseln können soll. (…) Gegenüber The Register gab Rizzo an, dass er dadurch ein verschlüsselt übertragenes PayPal-Cookie in unter zehn Minuten knacken könne.

Possibly related posts (automatically generated)

• SSL-Zertifikat-Sicherheit
• Zweifel an Abhörsicherheit von SSL
• Off The Grid Password Generator
• Respawning Cookies
• NSA: Security Configuration Guides

Es gibt unter anderem: Hardening Tips for MAC OS X 10.6 Snow Leopard und Security Highlights of Windows 7

Possibly related posts (automatically generated)

• daily links
• Mac OS X vulnerability
• Sandboxed Safari
• Disable ssh access for password-guessing bots
• Find Personal Data

When verbally passing a message you usually need to know your contact persons to know if you can trust them, but you also have to know your technology a little to know if you can trust it. Technologies can leak or distort your message just as humans can. Technologies are invested in types of trust relations: some devices are safer than others, some can be modified, and some are better avoided.

This book tries to address these different layers by giving hands-on explanations on how to make your digital communication and data more secure and by providing the reader with a basic understanding of the concepts of digital communication and data security. It derives from the following principles:

1. No method is entirely secure;
2. You need to have a basic understanding on how and why technology works to make it work for you;
3. You need technology for safer communication: either some basic tools, or more sophisticated equipment, depending on where you’re at and where you go.

Possibly related posts (automatically generated)

• Off The Grid Password Generator
• Browser Exploit Against SSL/TLS
• NSA: Security Configuration Guides
• Website Security
• Gesprächs-Rekonstruktion aus verschlüsselten VoIP Paketen

Today we’ll show you some examples of how a web application can be exploited so you can learn from them; for this we’ll use Gruyere, an intentionally vulnerable application we use for security training internally, too. Do not probe others’ websites for vulnerabilities without permission as it may be perceived as hacking; but you’re welcome—nay, encouraged—to run tests on Gruyere.

Possibly related posts (automatically generated)

• Website Security Basics
• Web Application Exploits and Defenses
• WebScarab, Paros Tutorial
• XSS
• XSS Rays

Heute weist mich jemand auf eine (…) Sache hin, nämlich dass man aus dem Beobachten von verschlüsselten VoIP-Paketen das gesprochene Wort rekonstruieren kann. Die Idee dabei ist, dass Voip-Sprachcodecs mit variabler Bitrate kodieren, je nach Komplexität des Signals. Wenn man also ein gutes Modell der Sprache hat, kann man mit einer gewissen Wahrscheinlichkeit Sätze rekonstruieren.

However, we show that when the audio is encoded using variable bit rate codecs, the lengths of encrypted VoIP packets can be used to identify the phrases spoken within a call. Our results indicate that a passive observer can identify phrases from a standard speech corpus within encrypted calls with an average accuracy of 50%, and with accuracy greater than 90% for some phrases.

(…) Die offensichtliche Paranoia-Lektion ist, dass man aus lärmenden Umgebungen heraus telefoniert, und untypische Formulierungen verwendet.

Possibly related posts (automatically generated)

• Das Überwachungsnetz des FBI
• Voip Hacking with sipcrack
• Off The Grid Password Generator
• Browser Exploit Against SSL/TLS
• NSA: Security Configuration Guides

1. Go to your Twitter settings page.
2. Tick the Always use HTTPS checkbox.
3. Click Save and re-enter your password when prompted.

Possibly related posts (automatically generated)

• Off The Grid Password Generator
• Browser Exploit Against SSL/TLS
• NSA: Security Configuration Guides
• Basic Internet Security
• Website Security

The researchers found that as much 67 percent of data stored in a file remained even after it was deleted from an SSD using the secure erase feature offered by Apple’s Mac OS X. Other overwrite operations – which securely delete files by repeatedly rewriting the data stored in a particular disk location – failed by similarly large margins when used to erase a single file on an SSD. Pseudorandom Data operations, for instance, allowed as much as 75 percent of data to remain, while the British HMG IS5 technique allowed as much as 58 percent.

Eine (naheligende) Lösung:

The researchers found the most effective way to sanitize data on SSDs was to use devices that encrypted their contents. Wiping happens by deleting the encryption keys from what’s known as the key store, effectively ensuring that the data will remain encrypted forever.

Possibly related posts (automatically generated)

• Off The Grid Password Generator
• Browser Exploit Against SSL/TLS
• NSA: Security Configuration Guides
• Basic Internet Security
• Website Security

Diese Webseite wurde gegruendet, um Sicherheitsluecken auf Social Network Portalen aufzuzeigen.
Der Autor hat in der Vergangenheit vergeblich versucht die entsprechenden Social Networking Betreiber zu kontaktieren, wurde dabei jedoch oftmals mit unzureichender Security Awareness seitens der “Ticketbearbeiter” enttaeuscht. (…) Diese Webseite soll entsprechend die Augen der Verbraucher oeffnen und durch das Aufdecken von Sicherheitsluecken auf Social-Network Seiten dazu beitragen, dass die Betreiber aktiv reagieren und die entsprechenden Sicherheitsluecken zeitnah schliessen. Die Praxis zeigt das medialer Druck auf die Betreiber einiges bewirken kann….

Possibly related posts (automatically generated)

• Off The Grid Password Generator
• Browser Exploit Against SSL/TLS
• AnonPlus
• NSA: Security Configuration Guides
• Basic Internet Security

Durch einen Bug in der php funktion eregi (nullbyte injection) kann durch eine Attacke das Administrator Passwort
auf ein beliebiges Passwort gesetzt werden und somit Zugriff auf den Shop erlangt werden.

Einen Patch kann man hier herunterladen.

Possibly related posts (automatically generated)

• Off The Grid Password Generator
• Browser Exploit Against SSL/TLS
• NSA: Security Configuration Guides
• Basic Internet Security
• Website Security