The Shaming →

August 20, 2014 by Marc Handelman in All is Information, Application Security, Blatant Stupidity, Cruft, Data Security, Information Security, SSL / TLS, Web Security

Evidently, Public Shaming, a la 16th Century European public pillorying and taunt, is the vogue, when targeting mindless, and therefore vulnerable, web deployments. The latest body incarnate example of this manouevre, is HTTP Shaming, a Tumblr blog dedicated to exposing the less-than-well-planned-sites floating around our interweb.

Android Cryptography Woes

July 01, 2014 by Marc Handelman in Cryptography, Information Security, Messaging Security, Research, Cruft, Web Security

Once more unto the breach, dear friends, once more.* Apparently all the makings [crypto flaws] of an extraordinary breach of sensitive data, this time contained within an enormous number of Android devices, has been discovered. Astonishingly, upwards of eighty-six percentile of all Android devices may be vulnerable.

*[Cry God for Harry, England, and Saint George!' speech of Shakespeare's Henry V, Act III, 1598., evidently all the more relevant today...]