Slashdot Mirror
Domain: ivancover.com
Stories and comments across the archive that link to ivancover.com.
Stories · 2
-
OAuth, OpenID Password Crack Could Affect Millions
CWmike writes "Researchers Nate Lawson and Taylor Nelson say they've discovered a basic security flaw that affects dozens of open-source software libraries — including those used by software that implements the OAuth and OpenID standards — that are used to check passwords and user names when people log into websites such as Twitter and Digg. By trying to log in again and again, cycling through characters and measuring the time it takes for the computer to respond, hackers can ultimately figure out the correct passwords. This may all sound very theoretical, but timing attacks can actually succeed in the real world. Three years ago, one was used to hack Microsoft's Xbox 360 gaming system, and people who build smart cards have added timing attack protection for years. The researchers plan to discuss their attacks at the Black Hat conference later this month in Las Vegas." -
Hacking Asus EEE
An anonymous reader writes "Torsten Lyngaas has published a set of instructions with photographs on his personal wiki that describe the steps he took to install $450 worth of extra hardware, including a GPS receiver, an FM transmitter, Bluetooth, extra USB ports, 802.11n, and an extra 4GB flash storage drive."