security – blog.world3.net

Category Archives: security

Avoiding British surveillance with alternative DNS?

03/04/2009 – 11:02

In the UK ISPs are required to keep logs of the domain name of every site you visit (e.g. “bbc.co.uk” if you visit any page on the BBC web site). This might suggest that the logging is done by DNS servers. If that is the case, the simply changing to use alternative DNS server (e.g. [...]

By mojo | Also posted in networking, privacy | Comments (0)

Protecting yourself from UK surveillance

05/01/2009 – 21:11

Recent moves by the police to step up hacking people’s PCs (/. article, original Times Online article) and a recent forum thread got me thinking about ways to defend myself against the snooping that the UK seems to love so much. A quick overview of what we are up against. In the UK the following [...]

By mojo | Also posted in law, networking, privacy | Comments (0)

Windows XP CD SHA1/MD5 sums

29/12/2008 – 20:54

So you can check your copy is not damaged or trojaned, here are some XP CD ISO SHA1/MD5 hashes I found: Windows XP Professional with Service Pack 3 (x86) Retail CD (English) Filename: en_windows_xp_professional_with_service_pack_3_x86_cd_x14-80428.iso Size: 589.14 MB MD5: F424A52153E6E5ED4C0D44235CF545D5 SHA1: 1c735b38931bf57fb14ebd9a9ba253ceb443d459 Windows XP Professional with Service Pack 3 (x86) VL CD (English) Filename: en_windows_xp_professional_with_service_pack_3_x86_cd_vl_x14-73974.iso Size: [...]

By mojo | Also posted in software, windows | Comments (1)

Attacking data in RAM

14/05/2008 – 11:52

Today’s Hack a Day post linked to this article on recovering encryption keys from RAM, so I thought I’d look into defences against this kind of attack. There are simple ways to defeat this, and although not 100% reliable they are pretty effective. You have to consider what sort of situation this attack is likely [...]

By mojo | Also posted in hardware, law, privacy, software, windows | Comments (0)

BT and Phorm secretly tracked 18,000 customers in 2006

01/04/2008 – 13:28

This article posted on The Register is quite alarming – apparently BT secretly trailed the Phorm tracking system in 2006 with 18,000 of it’s customers. Apart from the fact that the trial was probably illegal, it shows just how little BT care about their customers privacy. The second page of the article has an amazing [...]

By mojo | Also posted in idiots, networking, privacy | Comments (2)

Bruce Schneier – a man everyone should listen too

21/03/2008 – 14:14

Reading Bruce Schneier’s latest blog post, I can’t help but think that this is a man everyone should listen to. Especially anyone thinking of implementing a national ID card scheme. If this quote doesn’t get you to read it, I don’t know what will: “SmartWater is a liquid with a unique identifier linked to a [...]

By mojo | Also posted in genius, privacy | Comments (0)

Precrime and branding innocent children criminals

17/03/2008 – 14:17

From The Guardian: “Primary school children should be eligible for the DNA database if they exhibit behaviour indicating they may become criminals in later life, according to Britain’s most senior police forensics expert.” Gary Pugh is a spokesperson for ACPO, the Association of Chief Police Officers. Essentially, this is branding children as criminals before they [...]

By mojo | Also posted in idiots, politics, privacy | Comments (0)

AV company email submission addresses

11/03/2008 – 15:58

I have been trying to compile a list of email addresses to submit samples of unknown viruses to all AV companies in one go. Unfortunately not all have an email address; many rely on web forms. Anyway, here is my list so far: Lavasoft (AdAware): research@lavasoft.com Comodo: malwaresubmit@comodo.com Command: virus@commandcom.com CA: virus@ca.com NOD32: sample@nod32.com F-Secure: [...]

By mojo | Comments (0)

Phorm: the smoking gun

11/03/2008 – 13:22

Re-posted with permission from http://www.badphorm.co.uk/e107_plugins/forum/forum_viewtopic.php?632. Needs as much publicity as possible. Many thanks to The Other Steve at the regester message board http://www.theregister.co.uk/2008/03/10/isps_phorm_comment_target_market/comments/ Hey I said they wer lying to us all the time. OK PHORM PR GET OUT OF THIS you have been spreading lies over the internet, yet your patent says otherwise. Posted [...]

By mojo | Also posted in Uncategorized, networking, privacy | Comments (0)

Avira Labs fail to identify malware, even when the analysis is done for them

10/03/2008 – 18:16

As a follow-up to to my blog post about g-archiver, I submitted g-archiver to Avira Labs (makers of Anti-Vir) for analysis so it can be added to their database. Their web form didn’t have anywhere to add additional information, so I submitted by email instead with a link to the dissection of the code. Despite [...]

By mojo | Also posted in idiots, privacy, software | Comments (0)

たとえ溺れても梦はゆめでしかない

blog.world3.net