Aaron Parecki

#security

• What are malicious USB keys and how to create a realistic one? (www.elie.net)

  

  Wed, Oct 12, 2016 8:07am -07:00 #security #usb
• 

  Wow, way to be proactive on the password security @instagram

  Portland, Oregon, USA

  Tue, Oct 11, 2016 3:49pm -07:00 #password #security
• Samy Kamkar: MagSpoof - credit card/magstripe spoofer (samy.pl)

  

  Sat, Oct 1, 2016 8:42am -07:00 #creditcard #magstripe #security
• RFC 5929 - Channel Bindings for TLS (tools.ietf.org)

  

  Wed, Aug 31, 2016 12:09pm -07:00 #tls #https #security
• Security Guide for Developers (github.com)

  

  Mon, Jul 25, 2016 3:16pm -07:00 #security #guide
• Stop using JWT for sessions - joepie91's Ramblings (cryto.net)

  

  Mon, Jun 13, 2016 1:22pm -07:00 #jwt #security
• 

  This is perhaps the first step in the fall of certificate authorities in favor of p2p root CA trust sharing. https://twitter.com/FiloSottile/status/735940720931012608

  Portland, Oregon, USA

  1 like 1 repost 2 mentions

  Thu, May 26, 2016 3:19pm -07:00 #security #ssl #https #bluecoat
• Untrusting an intermediate CA on OS X (blog.filippo.io)

  

  Thu, May 26, 2016 3:18pm -07:00 #security #bluecoat #osx #ssl
• Amazon.com : D-Link DCS-2630L Full HD 180-Degree Wi-Fi Camera (Black) : Camera & Photo (www.amazon.com)

  Mon, May 9, 2016 5:28pm +02:00 #camera #security
• D-Link DCS-2330L HD Outdoor Wi-Fi Camera (White) : Camera & Photo (www.amazon.com)

  Mon, May 9, 2016 5:27pm +02:00 #camera #security
• D-Link Camera Video Recorder mydlink-Enabled (DNR-202L) : Digital Surveillance Recorders : Camera & Photo (www.amazon.com)

  Mon, May 9, 2016 5:27pm +02:00 #camera #security
• What technical reasons are there to have low maximum password lengths? - Information Security Stack Exchange (security.stackexchange.com)

  Wed, Jan 13, 2016 3:17pm -08:00 #password #security #bananas
• 🌈 http://tantek.com/

  Talking #WoT @W3CAB. I say any #IoT #security “expert” must at a minimum post their home IP adr & list of appliances. (ttk.me t4d71)

  Wed, Sep 9, 2015 11:07am -08:00 (liked on Wed, Sep 9, 2015 12:40pm -07:00) #WoT #IoT #security
• Into the symmetry: Open redirect in rfc6749 aka 'The OAuth 2.0 Authorization Framework' (intothesymmetry.blogspot.ch)

  Sat, Apr 18, 2015 10:44am -07:00 #oauth2 #security
• Critical vulnerabilities in JSON Web Token libraries (auth0.com)

  Wed, Apr 1, 2015 11:13am -05:00 #jwt #security
• Top 5 OAuth 2 Implementation Vulnerabilities (intothesymmetry.blogspot.ch)

  Tue, Jan 6, 2015 1:49pm -08:00 #oauth2 #security
• Into the symmetry: Beware what you click (intothesymmetry.blogspot.ch)

  Tue, Jan 6, 2015 1:49pm -08:00 #oauth2 #security #github
• SpoofedMe Social Login Attack Discovered by IBM X-Force Researchers (securityintelligence.com)

  Sun, Dec 7, 2014 9:36am -08:00 #oauth #security #oauth2
• MySpace Worm Explanation (namb.la)

  Tue, Nov 18, 2014 1:15pm -08:00 #javascript #security #worm
• The Value of a Name (ello.co)

  as of Saturday morning my number had been forwarded to a number I did not recognize. Unreal. So, as far I can tell, the attack actually started with my cell phone provider, which somehow allowed some level of access or social engineering into my Google account, which then allowed the hackers to receive a password reset email from Instagram, giving them control of the account.

  Fri, Oct 31, 2014 6:43pm -07:00 #security #2fa