Skip to main content

The WiKID Blog

Viewing posts by admin

Secure (?) Internet access for DefCon/BlackHat/BsidesLV

Every year at DefCon there is a Wall of Sheep where the usernames and passwords for non-encrypted logins are posted and every year there are usernames and password on it.

iOS 4 struggles

The iOS 4 upgrade for the iPhone breaks the WiKID token.  We're looking into and hope to have something fixed shortly.  

Javelin Strategy on Business Banking

Read this post on "Business Bank Accounts: The missing features that no one is talking about" for a great summary of the missing features that online banking needs to provide a secure solution for their customers, including one-time passwords.  I find this to be a little dis-heartening as I believe that online banking needs for more than the features on this list. We have often gone on about mutual https authentication and transaction authentication, but it turns out banks are a long way from providing these "advanced features".   Perhaps I should be more positive: Think how easy it should be for a bank to increase their security.

Southeast Linux Fest review

The Southeast Linux Fest was a great show.  The organizers did a fantastic job. They were quite adept at hacking some fixes together to cover shortfalls such as writing up schedule signs for each room. 

Online Gaming, Fraud & Stolen Credentials

Symantec has a blog post about a 17GB flat file of stolen game credentials they have analyzed. The file included 44 million sets of stolen usernames and passwords for at least 18 gaming websites.  The entire post is interesting and worth a read, in particular for how an attacker can use a botnet to validate the credentials and thereby increase their value.

Recent Posts

Archive

2024
2022
2021
2019
2018
2017
2016
2015
2014
2013
2012
2011
2010
2009
2008

Categories

Tags

Authors

Feeds

RSS / Atom