Protecting your Data from being slurped up!

How to protect your data from what the The Guardian calls as ‘ US border agents are doing ‘digital strip searches’? The only way I think this is possible in a fool-proof way in the near future is that every has to absolutely implement a two-factor-DDA-authentication. There is not better #security today - period! There ain’t no stinking #AI, #RNN, #DNN, or Boltzmann machine in the world, or #Quantum computer worth its #quibits which can crack this - at least not in the near future....

April 3, 2017 · 1 min · Amit Bahree

Advice from NSA on how to protect your data from NSA

No, there is no typo in the Subject, this advice is from NSA and should be good if you want to secure your data from NSA. The Register had this excellent write up on Guardian could have protected Snowden. I also like what The Register say: Use an old-fashioned air gap. Be paranoid You also could  Steganography , using something like  SteganPEG , but that is more obscurity, rather than security....

August 23, 2013 · 3 min · Amit Bahree

How not to handle exceptions!

Was trying to pay my Electricity bill online via a site called Bangalore One , which is the Governments, premier one-stop shop for Electronic Delivery of Citizen Services. I could not pay because it seems like some backend services they need for credit card payment is down. How do I know this? Because the site is revealing too much detail! See the exception details pasted below. This is a great example of what not to do!...

July 19, 2013 · 2 min · Amit Bahree

Facebook and Security again

Facebook and my views of it in the context of Privacy and Security are well known. This conversation with one of their (anonymous) employees detailing a few internal processes and tools is actually quite scary. Now, I don’t know if this is true and how much of this is true; but if I was working for Facebook then all of this is quite logical and makes sense....

February 17, 2010 · 1 min · Amit Bahree

Is it time to relook at Facebook again?

I still don’t get Facebook – despite being on it. If I want to talk to someone I will call them, email them, text them, meet them, have dinner with them - get the picture? I am quite worried about the security and privacy elements of it – or rather the lack of it. Those who know me well (anyone?) :-) know I was not always this paranoid but after attending a few Security courses – I cannot bury my head in the sand anymore....

January 6, 2010 · 3 min · Amit Bahree

Cloud computing Risk Assessment

ENISA (European Network & Information Security Agency) – phew that is a mouthful have gotten together with a number of industry leaders and released a Risk assessment for Cloud computing . I have not finished reading this and only eyeballed this, but looks good.

November 27, 2009 · 1 min · Amit Bahree

Implementing malware with VMs - Subvirt

Microsoft Research (MSR) along with University of Michigan have an interesting paper that showcases a new type of malware specifically for Virtual Machines and hosts running the VM’s (Hper-V, VMWare Server, etc). This malware installs a monitor underneath the host of the VMs as a Virtual Machine Monitor (VMM). All VMM’s run in Ring 0 (kernel mode). Essentially this is similar to a rootkit and they call this a VM based rootkit (VMBR)....

November 27, 2009 · 1 min · Amit Bahree

On Security

Security is a Social Construction - Andrew Martin

November 12, 2008 · 1 min · Amit Bahree

New Worm (BlackAngel.B) spreading via MSN Messenger

Interesting new worm based on the likes of the movies such as the ring or feardotcom spreading via MSN. It is quite dangerous as it disables many security and antivirus software running such as antivirus, firewalls and even Windows programs like the Task Manager and RegEdit. It is easy to recognize, as you will get the following instant message - which downloads a avi (only that is an exe), when you run that your system is infected and all your contacts on MSN will be send the same instant message....

June 16, 2006 · 1 min · Amit Bahree

Amex Trojan - Beware

If you use American Express, then beware there is a Trojan going around that asks for secure information when when logged into Amex’s secure site. Amex has provided a screen shot of what it looks like, check it out so you know in case you see it. You can read more on this at eweek here .

May 22, 2006 · 1 min · Amit Bahree