Website seems to be offline at the moment, please report this issue. [Report]

This listing is not rated yet.   Rate it!  |  Report it! Perimeter Grid http://perimetergrid.com Perimeter Grid is a weblog about information security, and maintaining security and privacy in a world that is increasingly connected. Category: Blog Directory » Computer Blogs » Security Date added: 2008-01-29 04:01:39 Alexa traffic rank: 5,700,188

---

Perimeter Grid Latest Posts

Two-Factor Auth for World of Warcraft
Blizzard Entertainment, makers of the phenomenally-successful multiplayer game World of Warcraft, have introduced two-factor authentication for logging into the game.  For $6.50, they’ll sell you a dynamic password keychain token called the Blizzard Authenticator, which looks much like the... Read more...
Published 5 days ago

Ubuntu/Debian CRNG Cracked - SSH Vulnerable
I don’t usually post about newly-discovered vulnerabilities, simply because there are so many of them — a dozen come out every day, especially in web applications.  However, this one has further-reaching consequences.  Security researcher HD Moore (of Metasploit fame) has discovered... Read more...
Published 2 months ago

The Black Hat Tax
Auren Hoffman at Summation has an interesting post on the “black hat tax.”  Essentially, how much do hackers and other online criminals actually cost us?  He estimates it at 25% of time and resources, after taking into account not just hackers but also scammers, phishers, and... Read more...
Published 2 months ago

Charter Communications Using Ad Replacer
A story in the New York Times tells us that Charter Communications (the United States’s fourth-largest cable company) is going to start tracking user behavior and using it to sell ads.  They spin this as a potential problem because of privacy implications — it means that the cable... Read more...
Published 2 months ago

Data Hiding at the Airport
According to the EFF blog, customs has taken to randomly searching electronic devices for suspicious data.  It is somewhat mysterious what they are searching them for — given only a few minutes and a technically unskilled border guard doing the searching, it’s hard to imagine them... Read more...
Published 2 months ago

Ad Replacers Let Dan Kaminsky RickRoll the Entire Web
I’ve talked before about ad replacers, where ISPs dynamically edit the contents of web traffic for their customers, replacing ads on web sites with ads of their own. This is a threat to the business model of the internet, as if done on a wide scale it would render small,... Read more...
Published 2 months ago

Surveillance and Ubiquity
HexView has an article about tracking vehicles with RFID tire pressure monitors. The devices are found in tires and transmit tire pressure to the engine control module, which sounds innocuous enough, but to prevent modules from reading neighboring cars’ tires by accident, they also... Read more...
Published 3 months ago

Blacklists and Cross-Site Scripting
Microsoft gets a lot of criticism over Internet Explorer not being “standards-compliant.” However, it’s actually not so simple, for a variety of reasons. One of them is that the web itself is not very standards-compliant — while IE8 has a standards-compliant-browser... Read more...
Published 3 months ago

Mom lets 9-year-old take subway home alone!
The Today Show has a cover story today entitled “Mom lets 9-year-old take subway home alone.” The controversy over this — that is, the fact that there is any — is a wonderful example of how poorly people assess risk in modern society. What this woman, Lenore Skenazy, has... Read more...
Published 3 months ago

Ad Replacers and the Future of the Internet
A company named Phorm (formerly 121Media) has introduced a new product for ISPs.  The idea is that the ISP installs this product (basically a transparent proxy) on their network, and as their customers surf the web, the OIX  proxy replaces advertisements on web pages with advertisements on the... Read more...
Published 4 months ago

Whole-Disk Encryption Cracked
Early this week, some researchers at Princeton University’s Center for Information Technology Policy released a fascinating video of whole-disk encryption being cracked quite quickly and easily. Whole-disk encryption products — such as PGP Whole Disk Encryption, TrueCrypt System... Read more...
Published 4 months ago

Deterring the Internal Attacker
On January 21st, 2008, the major French bank Société Générale lost $7.09 billion attempting to unwind unauthorized trading positions taken by Jérôme Kerviel, a futures trader with the bank. Kerviel had taken positions worth $73.3 billion, far above not only his trading limits but the... Read more...
Published 5 months ago