Schneier on Security: New Phishing Trick
New Phishing Trick

Although I think I’ve seen the trick before:

Phishing schemes are all about deception, and recently some clever phishers have added a new layer of subterfuge called the secure phish. It uses the padlock icon indicating that your browser has established a secure connection to a Web site to [...]

Schneier on Security: Cybercrime Pays
Cybercrime Pays

This sentence jumped out at me in an otherwise pedestrian article on criminal fraud:

“Fraud is fundamentally fuelling the growth of organised crime in the UK, earning more from fraud than they do from drugs,” Chris Hill, head of fraud at the Norwich Union, told BBC News.

I’ll bet that most of [...]

Schneier on Security: SHA-1 Broken
SHA-1 Broken

SHA-1 has been broken. Not a reduced-round version. Not a simplified version. The real thing.

The research team of Xiaoyun Wang, Yiqun Lisa Yin, and Hongbo Yu (mostly from Shandong University in China) have been quietly circulating a paper describing their results:

collisions in the the full SHA-1 [...]

From The Blackfriars Blog: Sony DRM infects Macintoshes as well as Windows PCs

A reader on Macintouch notes that content-protected Sony CDs not only have Windows-infecting rootkits, but also Macintosh-aware End User License Agreements and digital rights management kernel extensions:

“I recently purchased Imogen Heap’s new CD (Speak for Yourself), an [...]

From Unsanity.org
Aladdin and Kexts

I have recently came across just-released StuffIt Deluxe 8. Among other cosmetic enhancements, it includes a “new” (or rather, “new for OSX”, since the feature existed back in mac os Classic versions of StuffIt) feature called “Archive Via Rename” that allows you to compress or expand files or folders quickly just by [...]