I Am Security

Tag: analysis

  • How [not to] scam security people

    —

    by

    iamit
    in

    An analysis of a rogue security tool that tries to steal passwords and scam people out of their paypal money and accounts.

  • Identity crisis

    —

    by

    iamit
    in ,

    Here’s a common question I get asked a lot: “What technology should I use to secure my server/network/[some technology]?” The question is usually presented by someone who’s in charge of “Security” in an organization. Now, I wouldn’t have had a problem with this if this was a technician, or a pen-tester of sorts, but I…

  • Cyber[FUD]Fare – repost from fudsec.com

    —

    by

    iamit
    in ,

    As promised – here is the “official” cross-post from my guest appearance on fudsec.com. Enjoy! I’ve been intravenously fed with FUD for as long as I’ve been in the business. The main strategy for understanding that you are facing FUD is to realize that there is a financial motivation behind the FUD-spreading entity. This has…

  • AHA! A blast from the past…

    —

    by

    iamit
    in ,

    I just ran across this great blog post from Lori MacVittie at Web2.0 Journal. Can’t say exactly why it sparked my interest, but after reading it I realized this may be Freudian… The proposed Anonymous Human Authentication (AHA – great acronym Lori!) proposed in it closely resembles a technology we worked on back in the days…

  • Clouds, and the winds that blows them away…

    —

    by

    iamit
    in ,

    You must have seen this coming – I was holding off from discussing cloud security for quite some time for a few good reasons, but now it’s time to take a look at where are we (or more correctly – are we there yet?). First things first – the main reason for abstaining from the…