IT Security

Anything from viruses to firewalls to passwords, etc.
Oct 19 05:17

Pseudo-Shakespearean poem: "End of the Mainframes, Dawn of the Worms"

 Hark! What fetid flow emitteth from yon poxy boxen?

What foul wormlike connivance walketh from node to node, taking liberties unspeakable?

Aug 12 19:43

Redacting Accidental Passwords in Your .bash_history File

When I accidentally type a password in bash, I used to immediately exit so that the current commands in my "history" would get appended to the $HISTFILE. Then I'd vi (edit) that file (usually .bash_history) and remove the password. But this is pretty lame and I used to forget to do it sometimes.
Mar 09 00:01

Passwords

Your passwords probably suck and you probably have trouble remembering them.

Start With a Set-Phrase

One of my favorite ways of creating memorable passwords is to start with a so-called set phrase. Wikipedia has a nice description of what a set phrase is: http://en.wikipedia.org/wiki/Set_phrase. Basically it is any two word pair that means something unique and commonly known. The thing or concept it means is often one that can not easily be described in a single word.

Examples:

  • beer can
Mar 08 23:41

Cryptanalysis & Ciphers

Cryptanalysis is not just for mathematicians. It can be very fun for regular folks. My favorite hand cipher is the Playfair cipher. It was used by the British in WW I. The Germans modified it a bit and used it in WW II. The British cracked it by hand (no computers) and read much of the secret communications of the Nazis. You can read about it in this awesome book.
Mar 08 22:55

Better Information Security Through the Elimination of General Purpose Operating Systems

Please forgive the formal sounding language here. I wrote this back in August 2007, and it must have been for something kind of formal, but I don’t remember what or why. Enjoy. Purpose-built, Internet-facing servers (e.g., front-end web servers) have no need for n% of the functionality in their OSs and bundled applications. Yet these latter two groups of code are often the basis of the amplification and propagation of exploits.