Comments for Angels of security http://angelsofsecurity.com/blog Musings of an infosec renegade Tue, 20 Oct 2009 16:18:46 +0000 hourly 1 http://wordpress.org/?v=3.0 Comment on Nigerian scammers go up a notch by chaim http://angelsofsecurity.com/blog/2009/10/20/nigerian-scammers-go-up-a-notch/comment-page-1/#comment-10603 chaim Tue, 20 Oct 2009 16:18:46 +0000 http://angelsofsecurity.com/blog/?p=526#comment-10603 wow, that's just sick. in other news, it amazes me that I can still catch 99% of what the spam filter misses without even opening the email. Yahoo's spam filter doesn't even catch spoofs purporting to be from Yahoo account services! ...we've got a long way to go to the singularity... wow, that’s just sick.

in other news, it amazes me that I can still catch 99% of what the spam filter misses without even opening the email. Yahoo’s spam filter doesn’t even catch spoofs purporting to be from Yahoo account services! …we’ve got a long way to go to the singularity…

]]> Comment on Blackberry surveillance by Nym http://angelsofsecurity.com/blog/2009/07/16/blackberry-surveillance/comment-page-1/#comment-10485 Nym Thu, 16 Jul 2009 21:22:32 +0000 http://angelsofsecurity.com/blog/2009/07/16/blackberry-surveillance/#comment-10485 http://www.veracode.com/blog/2009/07/blackberry-spyware-dissected/ has the gory details on the "patch." Thank you Weld Pond! http://www.veracode.com/blog/2009/07/blackberry-spyware-dissected/ has the gory details on the “patch.” Thank you Weld Pond!

]]> Comment on Drug smuggling codes by Sara http://angelsofsecurity.com/blog/2009/06/23/drug-smuggling-codes/comment-page-1/#comment-10390 Sara Wed, 24 Jun 2009 05:36:03 +0000 http://angelsofsecurity.com/blog/2009/06/23/drug-smuggling-codes/#comment-10390 Pretty nice post. I just stumbled upon your site and wanted to say that I've really liked reading your blog posts. In any case I'll be subscribing to your blog and I hope you post again soon! Pretty nice post. I just stumbled upon your site and wanted to say
that I’ve really liked reading your blog posts. In any case
I’ll be subscribing to your blog and I hope you post again soon!

]]> Comment on Fannie Mae logic bomb by Trio (band) » Computer surveillance http://angelsofsecurity.com/blog/2009/02/04/fannie-mae-logic-bomb/comment-page-1/#comment-8139 Trio (band) » Computer surveillance Mon, 04 May 2009 23:23:55 +0000 http://angelsofsecurity.com/blog/2009/02/04/fannie-mae-logic-bomb/#comment-8139 [...] Angels of security » Blog Archive » Fannie Mae logic bomb [...] [...] Angels of security » Blog Archive » Fannie Mae logic bomb [...]

]]> Comment on 7 habits of highly effective infosec profesionals by SXSW: The Perils of Being Internet Famous [Voices] | Hobby Cash: Make Cash Blogging About the Things You Love http://angelsofsecurity.com/blog/2009/03/09/7/comment-page-1/#comment-7352 SXSW: The Perils of Being Internet Famous [Voices] | Hobby Cash: Make Cash Blogging About the Things You Love Tue, 17 Mar 2009 23:00:06 +0000 http://angelsofsecurity.com/blog/2009/03/09/7/#comment-7352 [...] Angels of security » Blog Archive » 7 habits of highly effective … [...] [...] Angels of security » Blog Archive » 7 habits of highly effective … [...]

]]> Comment on vulnerability disclosure response time by Matt http://angelsofsecurity.com/blog/2009/03/05/vulnerability-disclosure-response-time/comment-page-1/#comment-7160 Matt Fri, 06 Mar 2009 17:36:40 +0000 http://angelsofsecurity.com/blog/2009/03/05/vulnerability-disclosure-response-time/#comment-7160 I think that if you publish it, it motivates folks to get the fix out. I think that if you publish it, it motivates folks to get the fix out.

]]> Comment on Fannie Mae logic bomb by What Should You GoSee? » Blog Archive » For Those Who Forget, How We Got Into This Mortgage Mess http://angelsofsecurity.com/blog/2009/02/04/fannie-mae-logic-bomb/comment-page-1/#comment-6829 What Should You GoSee? » Blog Archive » For Those Who Forget, How We Got Into This Mortgage Mess Wed, 04 Feb 2009 22:02:35 +0000 http://angelsofsecurity.com/blog/2009/02/04/fannie-mae-logic-bomb/#comment-6829 [...] Angels of security » Blog Archive » Fannie Mae logic bomb [...] [...] Angels of security » Blog Archive » Fannie Mae logic bomb [...]

]]> Comment on I was right by Ty S. http://angelsofsecurity.com/blog/2008/09/18/i-was-right/comment-page-1/#comment-1307 Ty S. Fri, 17 Oct 2008 18:29:15 +0000 http://angelsofsecurity.com/blog/2008/09/18/i-was-right/#comment-1307 Matt's right you are pretty smart... Matt’s right you are pretty smart…

]]> Comment on Race to zero by kurt wismer http://angelsofsecurity.com/blog/2008/08/12/race-to-zero/comment-page-1/#comment-1131 kurt wismer Tue, 23 Sep 2008 19:57:54 +0000 http://angelsofsecurity.com/blog/2008/08/12/480/#comment-1131 sorry for responding a month later - the system i was using to track comment threads flaked out silently... about your 2 points: 1) you may not be satisfied with whitelists that don't include all program types but that's not an implementation defect... it's theoretically impossible for it to include all program types from a computer science standpoint... there are an infinite number of them because all data has the potential to be interpreted as code... 2) there are similar limitations for everything else you are suggesting, be it API calls, network traffic, etc... there will always be ways to accomplish these things that a filter won't recognize... this isn't a matter of implementation, it's a matter of computation complexity and computability... sorry for responding a month later – the system i was using to track comment threads flaked out silently…

about your 2 points:
1) you may not be satisfied with whitelists that don’t include all program types but that’s not an implementation defect… it’s theoretically impossible for it to include all program types from a computer science standpoint… there are an infinite number of them because all data has the potential to be interpreted as code…
2) there are similar limitations for everything else you are suggesting, be it API calls, network traffic, etc… there will always be ways to accomplish these things that a filter won’t recognize… this isn’t a matter of implementation, it’s a matter of computation complexity and computability…

]]> Comment on I was right by Matt W http://angelsofsecurity.com/blog/2008/09/18/i-was-right/comment-page-1/#comment-1130 Matt W Tue, 23 Sep 2008 19:16:15 +0000 http://angelsofsecurity.com/blog/2008/09/18/i-was-right/#comment-1130 ::sarcasm:: Well you are just SOOOO smart now aren't you Ari? ::sarcasm:: ::sarcasm:: Well you are just SOOOO smart now aren’t you Ari? ::sarcasm::

]]>