Teach your students to cheat
In one of his latest posts Bruce Schneier refers to an interesting article authored by two Marylend University professors. They carried out interesting examination for their information security course. The idea was to provoke their students creative and out of the box thinking to break the american education system stereotypes. In order to pass the…
An Introduction To Keyloggers, RATS And Malware – book review
Yesterday I stumbled across yet another “hacking” site. My curiosity motivated me to mirror the site content and go through all the files. Most of them were books and tutorials. After I finished reviewing some of them I realised that I hadn’t include any book reviews in this blog so far and that may be…
Udacity – nice online computer science courses
A post outside the security field … A friend of mine sent me a link to the http://www.udacity.com/ (Thanks, Momcho!) and after I took a look and spent some time with the platform decided that it is a good idea to blog about it. Udacity is yet another site with online computer science courses and yet different…
Kaspersky Lab source code analysis of Duqu
Kaspersky Lab has been analysing the infamous duqu worm code for several months. In one of the latest writeups, Igor Soumenkov describes part of Duqu code – for which there is an open debate around what language was used for its development. The discussion is quite interesting so I compiled a list of the relevant…
SWFInvestigator – a new tool for testing SWF files
Three days ago Adobe Labs surprised me with a beta version of their opensource Air application for SWF analysis called SWFInvestigator. It is available for download from the Adobe Labs website and the source code form the corresponding sourceforgeproject page. SWFInvestigator is a collection of small tools under common GUI umbrella. The utility is useful…
Colossus gallery fundraising initiative
British national museum of computing started conversation work of the Colossus hall. Colossus is one of the first programmable computers designed to solve cryptographic problems in 1943 by Tommy Flowers. Colossus second version was used by UK intelligence at the end of WWII to decrypt german messages encoded with Lorenz SZ40/42. Colossus use vacuum tubes…
Zero day exploits officially on sail
The 0-day exploits market was there for some time, but it was always a underground black hats territory. I’m sure that the government agencies have been buying offensive security tools but I have never seen open advertisement from a big company selling those type of things. Apparently the time is changing. VUPEN (if the name…
Hacking Lab – how and why
In one of the recent Ethical Hacking Network articles, Thomas Whilhelm, the founder of hackingdojo.com, discusses questions regarding setting up a hacking lab. The article is not a guide, but rather explanation why such thing is needed. It’s quite motivational 🙂 Enjoy!
BITS issues Software Assurance Framework
BITS is The Financial Services Roundtable technology division. At the end of January 2012 BITS issued a document containing detailed framework regarding the integration of the basic security principles in the software development life cycle.It is called “BITS Software Assurance Framework” The document is developed with the support of the Microsoft SDL group. If you…
India launches Cyber army program
India became the next county to admit its plans to create cyber army. Indian strategy is to gather ethical hackers and experienced developers in so called “National security database” (NSD). All the candidates are subject not only to technical security testing but to psychological testing as well. Sounds like in the army … huh 😉…
