Holy Hash!

Posts by Albert Zenkoff

• Mar 29On the use of LLM (“AI”) in security decisions

• Nov 30AI Software Design Security and Language Choice

• Mar 13CAST workshop on development security

• Jan 19A company with an SQL injection name

• Nov 17Don’t patch it, it’s fine?
• May 26Data breach at LinkedIn
• Feb 9Position yourself on Security Maturity Grid
• Jan 19Worst languages for software security

• Dec 15Backdoors in encryption products
• Sep 21CAST Workshop “Secure Software Development”
• Sep 1Windows 10: catching up to Google?
• Aug 21Continue the TrueCrypt discussion: Windows 10
• Jun 16TrueCrypt
• Apr 22The human factor: philosophy and engineering
• Apr 17GAO report on cybersecurity in Air Traffic Control is outright scary
• Mar 30Passwords and other secrets in source code
• Mar 29Security Forum Hagenberg 2015
• Mar 5House key versus user authentication
• Jan 30Workshop on Agile Development of Secure Software (ASSD’15)
• Jan 8About the so-called “uncertainty principle of new technology”

• Dec 23Sony 2014 network breach, the most interesting question remains unanswered
• Dec 4ENISA published new guidelines on cryptography
• Nov 13Heartbleed? That’s nothing. Here comes Microsoft SChannel!
• Nov 11Visualization of world’s largest data breaches
• Nov 3Crypto Wars 2.0: Let the Trolling Commence (and don’t trust your phone)
• Nov 3Facebook “joins” Tor – good-bye, privacy!
• Oct 16Three roads to product security
• Sep 24Secure the future – have a change of mind!
• Sep 8More on WordPress xmlrpc denial of service attacks
• Sep 1Dark alleys of cybersecurity
• Jul 23Strategy towards more IT security: the road paved with misconceptions
• Jul 14Mitigating Denial of Service attacks to WordPress xmlrpc
• Jun 30Cheap security in real life?
• Jun 18They never learn password security: Domino Pizza
• Jun 2TrueCrypt disappears
• Apr 13Over-engineering
• Feb 13Software Security vs. Food Safety

• Dec 5Fraud Botnet Controls Sales Terminals
• Nov 13Camera and microphone attack on smartphones
• Nov 12Can I interest you in more security, sir?
• Nov 10Guard your secrets
• Nov 9Google bots subversion
• Oct 15Dump anti-virus and move to secure-by-design?
• Oct 2Security Assurance vs. Quality Assurance
• Sep 27Security Breach at Unique Vintage
• Sep 20User Data Manifesto
• Sep 12In the news
• Sep 6Nokia is gone. So is mobile security.
• Jun 18What are NFC cards and how are they protected?
• May 22Password recovery mechanisms – Part 3
• May 21Password recovery mechanisms – Part 2
• May 21Password recovery mechanisms – Part 1
• May 8Coverity reports on Open Source
• Apr 27Cloud security
• Apr 9Getting revenue on security?
• Apr 9Exodus from Java
• Mar 30Apple – is it any different?
• Mar 28Security training – does it help?
• Feb 28Brainwashing in security
• Feb 24Ignoring security is not a good idea…
• Feb 16The art of unexpected
• Feb 14SAMATE Reference Dataset
• Feb 7On the utility of technical security
• Jan 29Security by …
• Jan 9Common passwords blacklist

• Dec 27Hack NFC Door Locks
• Nov 11Quantitative analysis of faults shows that…
• Oct 16Cryptography: just do not!
• Oct 14Supply chain: Huawei and ZTE
• Oct 12The Elderwood Report
• Oct 4SHA-3 is there!
• Sep 27IEEE should be embarrassed
• Sep 13Random or not? That is the question!
• Aug 21Car software security
• Aug 10NFC, ain’t that funny
• Aug 10Google on privacy
• Aug 9Digital life wipeout
• Aug 4More e-mail addresses stolen
• Jul 29Password storage in summary
• Jul 24News: Website and app security tips
• Jul 23Philosophy of door locks
• Jul 22Speaking of passwords…
• Jul 20Biometrics – any good?
• Jul 18Keep it simple – user names
• Jul 17What’s in a name?
• Jul 15Why bother?
• Jul 14Welcome to “Holy Hash!”