One year on from the Heartbleed episode, we see more and more reports of passwords being stolen. Every time it happens some commentator or vendors will come forward and say biometrics are the answer.
They are not…
Continue reading “Biometrics do not solve password problems”
Rather than bring you the 12 Days of Christmas, we’ve done the 12 themes of 2014 instead! A look back at what has been making the headlines in the world of Information Security (and beyond) this year. Take a moment to relive the year…… Continue reading “The 12 Themes of 2014”
In a previous blog series, I described my fun, games and gripes at changing 40+ passwords. Soon after the blog was posted, it struck me – there are yet more to change…
While changing all my passwords, I decided to change my Virgin Media Super Hub password. Wish I hadn’t…
Continue reading “Virgin Media’s Super Hub breaks if you use a long password”
I last blogged about Talk*InfoSec which happened on May 29th.
Continue reading “Security and Convenience: Natural Enemies or Strange Bedfellows?”
Previously in this blog series, I looked at the process of changing and remembering 40+ passwords and recounted a few of the annoyances. In this final part, I document a big concern – in some cases changing my password was pointless (well, not quite but almost…)
In the first part of this blog series, I looked at the process of changing and remembering 40+ passwords. In this part, I recount a few of the annoyances I uncovered…
Continue reading “Changing 40+ Passwords: Annoyances”
Following the Heartbleed revelations, the security advice from the great and good was to change all passwords. To support World Password Day, I changed over 40 other them – quite an interesting exercise. Alarmingly, it appears I am still vulnerable.
Continue reading “Changing 40+ Passwords: Thanks Heartbleed”
It has been shown that Heartbleed can be used to leak SSL private keys (if the attackers are lucky). So now many experts are recommending that you revoke and re-issue SSL certificates for your web server. Can the certificate revocation mechanism cope?
Continue reading “Heartbleed – Can CRLs cope?”
Following on from Heartbleed, there have been poorly judged calls from many to change all your passwords.
Continue reading “Heartbleed: Biometrics are not the answer”
Once Upon a Camayoc 