Slashdot Mirror

23rd USENIX Security Symposium - 8/2014 - Full Proceedings

#####

- Main Page:
https://www.usenix.org/confere...

- PDF Download:
https://www.usenix.org/sites/d...

- More format options than PDF including iPad/eReaders/Mobile Devices:
https://www.usenix.org/confere...

-- View on-line, each page as separate image files rather than PDF:
http://view.samurajdata.se/

- Main Page:
https://www.usenix.org/confere...

- PDF Download:
https://www.usenix.org/sites/d...

- More format options than PDF including iPad/eReaders/Mobile Devices:
https://www.usenix.org/confere...

-- View on-line, each page as separate image files rather than PDF:
http://view.samurajdata.se/

Is Your Antivirus Tracking You? You'd Be Surprised At What It Sends

by Chris Hoffman, 28th May, 2014, MakeUseOf.com

#

PLEASE READ THE PDF. THE QUOTE FROM THIS ARTICLE DRAWS REFERENCE TO WEB URLs BUT IN ORDER TO PROPERLY COMPREHEND THE MAGNITUDE OF DATA COLLECTION, YOU NEED TO READ THE PDF. PREPARE TO BE FLOORED.

DOWNLOAD THE PDF. STORE IT. CONVERT IT TO OTHER FORMATS. SHARE IT. MAKE SURE IT IS ALWAYS AVAILABLE SOMEWHERE ON-LINE OTHER THAN THE SOURCE BELOW. DON'T BLINDLY TRUST ARCHIVE.ORG OR SITES LIKE IT TO KEEP IT FOR YOU.

EVERYONE NEEDS TO READ THIS PDF BEFORE CONTINUING TO USE ANTI-VIRUS PROGRAMS.

#

        "Your antivirus software is watching you. A recent study shows that popular antivirus applications like Avast assign your computer a unique identifier and send a list of all web addresses you visit to the manufacturer. If the antivirus finds a suspicious document, it will send the document to the antivirus company. Yes, your antivirus company might have a list of web pages you've visited along with your sensitive personal documents!

        AV-Comparatives' Data Transmission Report

        We're getting this information from AV-Comparative's Data transmission in Internet security products report, released on May 8, 2014. AV-Comparatives is an antivirus testing and comparison organization.

        The study was performed by analyzing antivirus products running in a virtual machine to see what they sent to the antivirus company, reading each antivirus product's end user license agreement (EULA), and sending a detailed questionnaire to each antivirus company so they could explain what their products do........""

#

Rest of article and comments here:
http://www.makeuseof.com/tag/a... .PDF - The Study, dated May 20, 2014:
http://www.av-comparatives.org... .PDF-To-Images Free 0n-Line Viewer:
http://view.samurajdata.se/

"Is Your Antivirus Tracking You? You'd Be Surprised At What It Sends"
by Chris Hoffman, 28th May, 2014, MakeUseOf.com

############

PLEASE READ THE PDF. THE QUOTE FROM THIS ARTICLE DRAWS REFERENCE TO WEB URLs BUT IN ORDER TO PROPERLY COMPREHEND THE MAGNITUDE OF DATA COLLECTION, YOU NEED TO READ THE PDF. PREPARE TO BE FLOORED.

DOWNLOAD THE PDF. STORE IT. CONVERT IT TO OTHER FORMATS. SHARE IT. MAKE SURE IT IS ALWAYS AVAILABLE SOMEWHERE ON-LINE OTHER THAN THE SOURCE BELOW. DON'T BLINDLY TRUST ARCHIVE.ORG OR SITES LIKE IT TO KEEP IT FOR YOU.

EVERYONE NEEDS TO READ THIS PDF BEFORE CONTINUING TO USE ANTI-VIRUS PROGRAMS.

############

        "Your antivirus software is watching you. A recent study shows that popular antivirus applications like Avast assign your computer a unique identifier and send a list of all web addresses you visit to the manufacturer. If the antivirus finds a suspicious document, it will send the document to the antivirus company. Yes, your antivirus company might have a list of web pages you've visited along with your sensitive personal documents!

        AV-Comparatives' Data Transmission Report

        We're getting this information from AV-Comparative's Data transmission in Internet security products report, released on May 8, 2014. AV-Comparatives is an antivirus testing and comparison organization.

        The study was performed by analyzing antivirus products running in a virtual machine to see what they sent to the antivirus company, reading each antivirus product's end user license agreement (EULA), and sending a detailed questionnaire to each antivirus company so they could explain what their products do........""

############

Rest of article and comments here:
http://www.makeuseof.com/tag/a... .PDF - The Study, dated May 20, 2014:
http://www.av-comparatives.org... .PDF-To-Images Free 0n-Line Viewer:
http://view.samurajdata.se/

"Is Your Antivirus Tracking You? You'd Be Surprised At What It Sends"
by Chris Hoffman, 28th May, 2014, MakeUseOf.com

############

PLEASE READ THE PDF. THE QUOTE FROM THIS ARTICLE DRAWS REFERENCE TO WEB URLs BUT IN ORDER TO PROPERLY COMPREHEND THE MAGNITUDE OF DATA COLLECTION, YOU NEED TO READ THE PDF. PREPARE TO BE FLOORED.

DOWNLOAD THE PDF. STORE IT. CONVERT IT TO OTHER FORMATS. SHARE IT. MAKE SURE IT IS ALWAYS AVAILABLE SOMEWHERE ON-LINE OTHER THAN THE SOURCE BELOW. DON'T BLINDLY TRUST ARCHIVE.ORG OR SITES LIKE IT TO KEEP IT FOR YOU.

EVERYONE NEEDS TO READ THIS PDF BEFORE CONTINUING TO USE ANTI-VIRUS PROGRAMS.

############

        "Your antivirus software is watching you. A recent study shows that popular antivirus applications like Avast assign your computer a unique identifier and send a list of all web addresses you visit to the manufacturer. If the antivirus finds a suspicious document, it will send the document to the antivirus company. Yes, your antivirus company might have a list of web pages you've visited along with your sensitive personal documents!

        AV-Comparatives' Data Transmission Report

        We're getting this information from AV-Comparative's Data transmission in Internet security products report, released on May 8, 2014. AV-Comparatives is an antivirus testing and comparison organization.

        The study was performed by analyzing antivirus products running in a virtual machine to see what they sent to the antivirus company, reading each antivirus product's end user license agreement (EULA), and sending a detailed questionnaire to each antivirus company so they could explain what their products do........""

############

Rest of article and comments here:
http://www.makeuseof.com/tag/a... .PDF - The Study, dated May 20, 2014:
http://www.av-comparatives.org... .PDF-To-Images Free 0n-Line Viewer:
http://view.samurajdata.se/

"Is Your Antivirus Tracking You? You'd Be Surprised At What It Sends"

by Chris Hoffman, 28th May, 2014, MakeUseOf.com

############

PLEASE READ THE PDF. THE QUOTE FROM THIS ARTICLE DRAWS REFERENCE TO WEB URLs BUT IN ORDER TO PROPERLY COMPREHEND THE MAGNITUDE OF DATA COLLECTION, YOU NEED TO READ THE PDF. PREPARE TO BE FLOORED.

DOWNLOAD THE PDF. STORE IT. CONVERT IT TO OTHER FORMATS. SHARE IT. MAKE SURE IT IS ALWAYS AVAILABLE SOMEWHERE ON-LINE OTHER THAN THE SOURCE BELOW. DON'T BLINDLY TRUST ARCHIVE.ORG TO KEEP IT FOR YOU.

EVERYONE NEEDS TO READ THIS PDF BEFORE CONTINUING TO USE ANTI-VIRUS PROGRAMS.

############

        "Your antivirus software is watching you. A recent study shows that popular antivirus applications like Avast assign your computer a unique identifier and send a list of all web addresses you visit to the manufacturer. If the antivirus finds a suspicious document, it will send the document to the antivirus company. Yes, your antivirus company might have a list of web pages you've visited along with your sensitive personal documents!

        AV-Comparatives' Data Transmission Report

        We're getting this information from AV-Comparative's Data transmission in Internet security products report, released on May 8, 2014. AV-Comparatives is an antivirus testing and comparison organization.

        The study was performed by analyzing antivirus products running in a virtual machine to see what they sent to the antivirus company, reading each antivirus product's end user license agreement (EULA), and sending a detailed questionnaire to each antivirus company so they could explain what their products do........""

############

Rest of article and comments here:
http://www.makeuseof.com/tag/a...

.PDF - The Study, dated May 20, 2014:
http://www.av-comparatives.org...

.PDF-To-Images Free 0n-Line Viewer:
http://view.samurajdata.se/

ChipWhisperer: An Open-Source Platform for Hardware Embedded Security Research

- Document (PDF): http://cryptome.org/2014/03/ch...
- View PDF online: http://view.samurajdata.se/

Partial quote from 1st page (1/18):

"This paper introduces a complete side channel analysis toolbox inclusive of the analog capture hardware, target device, capture software, and analysis software. The highly modular design allows use of the hardware and software with a variety of existing systems. The hardware uses a synchronous capture method which greatly reduces the required sample rate, while also reducing the data storage requirement and improving synchronization of traces. The synchronous nature of the hardware lends itself to fault injection, and a module to generate glitches of programmable width is also provided. The entire design (hardware and software) is open-source, and maintained in a publicly available repository. Several long example capture traces are provided for researchers looking to evaluate standard cryptographic implementations."

Keywords: side-channel analysis, acquisition, synchronization, FPGA

ChipWhisperer: An Open-Source Platform for Hardware Embedded Security Research

- Document (PDF): http://cryptome.org/2014/03/ch...
- View PDF online: http://view.samurajdata.se/

Partial quote from 1st page (1/18):

"This paper introduces a complete side channel analysis toolbox inclusive of the analog capture hardware, target device, capture software, and analysis software. The highly modular design allows use of the hardware and software with a variety of existing systems. The hardware uses a synchronous capture method which greatly reduces the required sample rate, while also reducing the data storage requirement and improving synchronization of traces. The synchronous nature of the hardware lends itself to fault injection, and a module to generate glitches of programmable width is also provided. The entire design (hardware and software) is open-source, and maintained in a publicly available repository. Several long example capture traces are provided for researchers looking to evaluate standard cryptographic implementations."

Keywords: side-channel analysis, acquisition, synchronization, FPGA

ChipWhisperer: An Open-Source Platform for Hardware Embedded Security Research

- Document (PDF): http://cryptome.org/2014/03/ch...
- View PDF online: http://view.samurajdata.se/

Partial quote from 1st page (1/18):

"This paper introduces a complete side channel analysis toolbox inclusive of the analog capture hardware, target device, capture software, and analysis software. The highly modular design allows use of the hardware and software with a variety of existing systems. The hardware uses a synchronous capture method which greatly reduces the required sample rate, while also reducing the data storage requirement and improving synchronization of traces. The synchronous nature of the hardware lends itself to fault injection, and a module to generate glitches of programmable width is also provided. The entire design (hardware and software) is open-source, and maintained in a publicly available repository. Several long example capture traces are provided for researchers looking to evaluate standard cryptographic implementations."

Keywords: side-channel analysis, acquisition, synchronization, FPGA

ChipWhisperer: An Open-Source Platform for Hardware Embedded Security Research

- Document (PDF): http://cryptome.org/2014/03/ch...
- View PDF online: http://view.samurajdata.se/

Partial quote from 1st page (1/18):

"This paper introduces a complete side channel analysis toolbox inclusive of the analog capture hardware, target device, capture software, and analysis software. The highly modular design allows use of the hardware and software with a variety of existing systems. The hardware uses a synchronous capture method which greatly reduces the required sample rate, while also reducing the data storage requirement and improving synchronization of traces. The synchronous nature of the hardware lends itself to fault injection, and a module to generate glitches of programmable width is also provided. The entire design (hardware and software) is open-source, and maintained in a publicly available repository. Several long example capture traces are provided for researchers looking to evaluate standard cryptographic implementations."

Keywords: side-channel analysis, acquisition, synchronization, FPGA

http://publicintelligence.net/

how about the free PDF to image viewer you don't have to download?

http://view.samurajdata.se/

and how Tor can be used to visit A and view at B with all strict settings enabled and nothing relaxed? (no javascript required for example)

"Foxit is just as bloated as Adobe Reader.
Sumatra PDF is what Foxit was before becoming bloatware."

This is even better and works through Tor:

http://view.samurajdata.se/

No application(s) to install and it's free.

http://view.samurajdata.se/

There's no SSL and it would be better as a Tor Hidden Service, but it's ad-free and works on most on-line (or off-line manual upload) PDF files. Nothing is "safe", but this is "safer" and doesn't require javascript, flash, or other stupid ****.

and view this and other PDFs safely at:

http://view.samurajdata.se/

this news story was submitted with the PDF linked but it was dumped rather than approved - likely because they wanted to give props to an online geek store rather than an AC.

http://www.cl.cam.ac.uk/~mgk25/pet2004-fpd.pdf
http://applied-math.org/acm_optical_tempest.pdf
http://www.cl.cam.ac.uk/techreports/UCAM-CL-TR-577.pdf
===
http://view.samurajdata.se/

Origin of discussion:
http://ubuntuforums.org/showthread.php?&t=1890619

@querent:

"First, I want to use TOR to download .pdf files"

First, how have you setup Tor? (it's not TOR btw, it's Tor)

Have you installed the Tor Browser Bundle? (TBB) It contains a (limited) preconfigured Tor environment (you need to reconfigure the included Noscript properly as by default it is set to allow everything, which is bad) and includes Vidalia, a Tor GUI front-end. If you have, you can right click on most .PDF file download links and select your local destination for the PDF to download to and it runs through Tor without leaping outside of the Tor client. Some PDF file downloads are caught by Tor button for unknown reasons, it thinks you're trying to load it directly and not download it when you're trying to download it. This may be a bug which appears at random. TBB's preconfigued Tor environment does not modify files like wgetrc (more on this later) or other application's files outside of the applications it provides.

My preferred method of handing PDF files when using Tor is to load them remotely via this free web service:
http://view.samurajdata.se/

I don't see that website as having any ads, but I block ads anyway, nor are there any posts begging for money, nor do they push an application to download in order to view the PDFs. It's the most simplistic layout I've seen for loading PDFs remotely and safely so they don't touch your system (your web cache should be disabled and is disabled if you use TBB, your swap and home partitions, if not your whole system should be encrypted). But does the admin track PDFs and IPs? Simple, always use Tor with that site with nothing personal.

It should be noted the moment you begin using your real name and playing about on Facebook with your friends or acquaintances via Tor, you've lost the plot. Do not mingle your personal Internet use with your Tor Internet use. Do not use Tor while at the same time accessing your personal e-mail outside of Tor (you shouldn't load it inside Tor, for that matter, either). Don't boast through Tor to one of your chums that you're using Tor.

The PDF files (at view.samurajdata.se) are transformed into single paged graphics which you may navigate through easily. 99% of the time it works, some PDFs it chooses not to load and spits out an error. It doesn't
require Flash and works without cookies or javascript enabled. I don't know who runs the site or their privacy and data retention habits, but I recommend it above all other sites offering to convert PDFs on-line. I have not tested uploading local PDF files to that service so I cannot suggest others do so, I don't know whether or not there would be any privacy leaks in doing so, so just copy/paste urls into that service.

In using that free PDF converter website, I can preview the document to determine beforehand whether it is worth the time, space, and effort in manually downloading the PDF and storing it for future access. Should you access PDF files on your system, I would recommend burning them to a CD or DVD, a read only medium, and accessing them from a non-networked environment such as a Linux LiveCD with the network cable unplugged, using an open source PDF reader, never use the proprietary PDF reader from Adobe, unless you're reading off-line from read only media, in addition to pulling the network cable prior to booting from a fresh and verified LiveCD and pulling the cable and power plugs from any hard drives (before you turn your system ON), to eliminate any possible contamination. Remember, you're downloading PDF files through Tor, and unless you verify each file through checksum verification (like MD5 or GPG) there's a chance they could've been trojaned by a rogue exit node, or contain phoning home instructions or any other type of malicious "feature". No amount of open or closed source virus/tro

Option 1: Convert it on-line for free

Sites like http://view.samurajdata.se/
will convert most on-line PDFs for free, while Adobe's page
which handles on-line convertion of on-line PDF files often
fails and is mostly useless if you're behind proxies and/or
using Tor with javascript disabled and NoScript loaded.

Option 2: Convert it with local tools

Programs like pdftohtml convert PDF files for free

With the number of PDF exploits rising, it's logical
to employ option 1 rather than download any PDF file
to your local drive.

http://view.samurajdata.se/ I suppose I should use the preview button more often.

Here's the article in the less evil HTML format. (Or here if that link doesn't work.)

This is just a ten second selection, if you take your time you will find hundreds if not thousands of apps capable of handling PDF files. Im fairly sure you will find an application that suits your needs if you just lift a couple of rocks. Start by collecting a bunch of PDF files to test the different apps on.

Online:
http://www.sanface.com/webpdfviewer.html
http://view.samurajdata.se/
Windows:
http://www.hsinlin.com/software/pdf.html
http://www.foxitsoftware.com/
http://www.cadkas.de/downengpdf5.php
http://www.freewarehome.com/Business_and_Productiv ity/Word_Processing/PDF_t.html
http://www.tucows.com/downloads/Windows/DesignTool s/PDFTools/

Actually it is: How I learned to stop worrying and love the web. This is a direct link to the pdf rendered into html.

OK, so this is a PDF file that looks like a Powerpoint presentation and it is about how much he hates Apache. *head explodes*

Here is a html version, I doubt it will stay cached for very long though.

Not to mention the confidentiality issue... I work for a financial services company, and a few years ago, we were looking at ways to quickly re-purpose a bunch of PDF documents to HTML, and one proposed solution was a web service that offered online conversion of such documents for free.

Perhaps you were looking at my Online viewer for PDF, PostScript and Word? ;) - The viewer is GPL, so if privacy is a concern, you still have the ability to install it on your own servers...

Regards

For those of you who don't have Adobe Acrobat Reader installed, here's a handy link to read the pdf online.

My Internet version of the Borgesian Library: Linkfinity - "The infinite monkeys of links"

Cached version of the Knuth document is here.

Cached version of the Knuth document is here.

Here

Read it here

You could view this post script file online here, or you could use the Windows, OS/2 or Linux viewers available here.

Try viewing the postscript file using the online viewer here instead.

Shameless plug: I've got an online viewer for PDF. Saves you from having to install a plugin...

A Swedish translation of the statement can be found at: http://www.samurajdata.se/opensource/tillsammans.h tml.

To get a taste of what Fractint can do, you could try Fractal Map (basically a web frontend to Fractint).

Papers on Open Source are definitely scarce. If it is of any help, I and two others prepared a report on Open Source as a software development method for a course in Project Management at the Univeristy of Karlskrona/Ronneby in Sweden. You can download it here in Word format.

1. Use Linkfinity to compose a link to a DeCSS resource.
   
2. Copy the url in your browsers address field.
   
3. Link to the url you just copied.