sherritheberry - Slashdot User

Submission + - SSL renegotiation attack becomes reality (theregister.co.uk)

Submitted by rastos1 on Monday November 16, 2009 @09:47AM

rastos1 writes: A Turkish grad student has devised a serious, real-world attack on Twitter that targeted a recently discovered vulnerability in the SSL protocol. The exploit by Anil Kurmus is significant because it successfully targeted the so-called SSL renegotiation bug to steal Twitter login credentials that passed through encrypted data streams. All in all, a man in the middle is able to steal the credentials of a user authenticating himself through HTTPS to a trusted website.

The attack description is available on securegoose.org

Submission + - Pirates and Ninjas: Emacs or Vi? (philosecurity.org) 1

Submitted by

Sherri Davidoff

on Tuesday March 24, 2009 @09:13AM

Sherri Davidoff writes: "In the great debates of Pirates vs. Ninjas and Emacs vs. Vi, there is one overarching question: Do Pirates and Ninjas use Emacs or Vi? Philosecurity has conducted countless hours of research, interviewed real ninjas and pirates in their natural environs, and launched intensive laboratory studies involving monkeys in order to bring you, our readers, the scientifically proven answers you demand. After thousands of hours and monkey brains, our scientists have reached the following conclusions:

Pirates use Emacs
Ninjas Use Vi

Laboratory results showed that 92% of ninjas preferred vi, while fully 96% of pirates used emacs. In the wild, these numbers were even higher (94% and 97.5%, respectively)."

Comment Message from Philosecurity (Score 1) 453

by sherritheberry on Tuesday January 13, 2009 @10:58PM (#26443765) Attached to: Interview With an Adware Author

Guys, Matt is a wonderful teacher, a great coder and a good friend of mine. It was pretty awesome that he did this interview and gave us the inside scoop on how a noted adware company operated, both technically and from a business perspective. Sometimes people find themselves in positions they don't intend, and he certainly recognized that and moved on. Nowadays he uses his skills to educate and create software for doctors. He's offered us some valuable insight in this interview, and I for one very much appreciate it.

--Sherri (author of philosecurity.org)

Slashdot Top Deals