COFEE vs DECAF

It cannot get any more hilarious than this:


Two developers have created "Detect and Eliminate Computer Assisted Forensics" (DECAF). The tool tries to stop Microsoft's Computer Online Forensic Evidence Extractor (COFEE), which helps law enforcement officials grab data from password protected or encrypted sources.

Orignal Source: arstechnica

Which Antivirus To Use?

This is one question, that all security professionals get asked a lot. Goes without saying, any one person’s opinion may not be the statistically correct answer. To make matters even worse, (un)fortunately, there are a number of reports out there which probably, only Einstein and Bill Gates can read, decipher and really understand.

Here is one simple, to the point, straight forward report that I think answers this question bang on: Battle of the anti-virus

Hotmail Compromised

I hope everyone out there is aware of this hack. I would recommend everyone to change their passwords asap.

ISC's Post

Cracking Encryption Keys

We all know we need to protect sensitive, confidential or customer related data, with strong encryption algorithms and lengthy keys.

But where does the buck stop? How much security is too much security, for something with absolutely no financial value - like for example a calculator’s Operating System?

Texas Instruments Signing Keys Broken

History of Hacking

An interesting time-line, for casual reading: History of Hacking

Using Twitter as a Botnet Command Channel

Just when you thought you knew everything there is to know about Twitter, here comes another surprise..!!

Brazilian ID thieves are using Twitter streams to send commands to their botnets. The bots are programmed to monitor RSS feeds from these Twitter accounts.

Sounds pretty innovative, right?

Analyzing Tr.im's Sad Demise

www.Tr.im, a popular URL shortening service, is shutting down its business. Hence, in a few months from now, all the tr.im links over the internet may die.

So, this makes me wonder:

1. What is going to happen in case more and more of these types of services go out of business? Ever wondered how that could adversely affect our "World Wide Web"? How frustrating it would be to not be able click and navigate to the useful links we find, in gazillions of blogs, whitepapers, news articles, etc. over the net?
2. What if a spammer or a hacker buys the domain name after tr.im (or another similar service) ends its ownership? Instead of killing all the tr.im URLs on the internet, he may decide to point them to any malicious website of his choice!

This just goes on to prove that our internet still needs some more time to mature and be a smarter and safer place to hangout.