geschonneck.com

If you are good at math, you wont have problems signing in at the Ruđer Bošković Institute

You know them from a security incident follow up meeting, a security audit exit meeting or a vendor prensentation: excuses for not caring about security the right way. You can now choose your excuse from

Lance Mueller published a good article about bypassing a Windows login password with forensic tools . You can use his instructions if you plan to boot an Windows image within a virtual machine and like to login.

Cool stuff from Princeton researchers. They published a paper “Cold Boot Attacks on Encryption Keys” and showed that whole disk encryption can be defeated by relatively simple methods.  They demonstrated their methods by using them to defeat three disk encryption products: BitLocker, 

CERT and the United States Sectret Service published an insider threat research that focuses on both technical and behavioral aspects of actual compromises. The key findings are

Current and former employees carried out insider activities in nearly equal numbers.
Sixty-three percent of the insiders held technical positions within the targeted organizations.

The Certified Wireless Analysis Professional Official Study Guide is now free available for download.  Very useful if you have to analyse  wireless captures. Please take a look at the content:

A couple of weeks ago I read an british article about the fact, that thousands of illegal migrants may have been working for private security companies in the last three years in the UK. Badly enough, that  up to 5,000 people without a proper background check and

The swiss based company Dreamlab Technologies has shown that it is possible to capture and decrypt keystrokes, meaning that user names, passwords, bank details or confidential correspondence can be very easily eavesdropped.  According to [...]