Category: Information Security
Everything filed under Information Security.
RIPE 76 Selected Talks
Do not read anything more into the order than the end-number of the "Main URL" since this was auto-generated from a script that processed my Firefox tab…
Enabling Concerned Visitors & Ethical Security Researchers with security.txt Web Security Policies (plus analyze them at-scale with R)
I've blogged a bit about robots.txt --- the rules file that documents a sites "robots exclusion" standard that instructs web crawlers what they can and cannot do (and how frequently they should do things when they are allowed to). This is…
Armchair Quarterbacking Systemic Organization and Industry Failures
insert(post, "{ 'standarddisclaimer' : 'My opinion, not my employer\'s'…
Keeping Users Safe While Collecting Data
I caught a mention of this project by Pete Warden on Four Short Links today. If his name sounds familiar, he's the creator of the DSTK , an O'Reilly author, and now works at Google. A decidedly clever and decent…
Travis-CI Flaw Exposed Some 'Secure' Environment Variable Contents
Tagging this as #rstats -related since many R coders use Travis-CI to automate package builds (and other things). Security researcher Ivan Vyshnevskyi did some ++gd responsible disclosure to the Travis-CI folks letting them know they were…
New viridis & colorbrewer palettes for ipv4-heatmap
It's no seekrit that I :heart: Hilbert curve heatmaps of IPv4 space. Real-world IPv4 maps (i.e. the ones that drop dots on the Earth) have little utility, but with Hilbert curves maps of IPv4 space many different topologies can be…
Clandestine DNS lookups with gdns
Google recently announced their DNS-over-HTTPS API, which "enhances privacy and security between a client and a recursive resolver, and complements DNSSEC to provide end-to-end authenticated DNS lookups". The REST API they provided was…
OS X XQuartz Vulnerability Test Using R
It's usually a good thing when my #rstats and infosec worlds collide. Unfortunately, this time it's a script that R folk running on OS X can use to see if they are using a version of XQuartz that has a nasty vulnerability in the framework…
iptools 0.3.0 ("Violet Packet") Now on CRAN with Windows Support!
What can you do with it? One thing you can do is take a vector of domain names and turn them into IP…
Paths To Discovery: Mapping Your Home Network
Gone are the days when one had a single computer plugged directly into a modem (cable, DSL or good ol' Hayes). Even the days when there were just one or two computers connected via wires or invisible multi-gigahertz waves passing through…