This little device has apparently been used to pull of one of the greatest bank heist in history. You attach this device to the keyboard cable at the back of the pc and it´s able to record 130000 keystrokes. The bank robbers installed this device inside the bank and got access to Sumitomo Bank’s wire transfer capability. With all the information at their hand they proceeded to transfer more than 400 million $ to various foreign accounts.

The article at zdnet that I´am using as a source is called Super Glue, guess what the banks officials decided to do after they found out ? Right, they decided to glue the keyboard cables to the computer, making it impossible to connect a device in between.

continue reading "Hardware Keylogger"

I don´t know a single large bank that does not offer its customers a way to use a website to do their transactions. There is unfortunatly no single standard set for bank websites and many companies tend to misjudge the importance of a secure website. The Secure Web Bank website did take a look at websites from US, Canadian and European institutes and check wether those provided a SSL Login page and Two Factor Auth for their customers.

If you take a look at this list you see that all European and Canadian banks but one are offering (most require) SSL login pages and that about 50% of the US banks offer ssl only optional. This is in fact a great risk and could be reduced by simply deactivating normal http access to the login pages (or the complete website).

continue reading "How secure is my banks website ?"

You might know that I´am using True Crypt for some months now to encrypt and decrypt my entire removable hard disk that has 300 Gb capacity. All happens in realtime and I can´t see and witness any slowdowns so far. I´am able to download content to the drive with 14.2 Mbps and its working like every other hard disk. Yesterday a new True Crypt version was released and it has some amazing new features, let us take a look at some of them:

# TrueCrypt volumes can now be created under Linux.
# Ability to create a ‘dynamic’ container whose physical size (actual disk space used) grows as new data is added to it.
# It is now possible to mount a single TrueCrypt volume from multiple operating systems at once

continue reading "True Crypt 4.2 released"

Ok this seems to be serious. If you open a webpage that contains a certain html code your windows will crash. The html is looking like this, its basically just one line of code that displays an image with the width=”9999999″ and heigth=”9999999″.

So, only a few lines of code and it crashes your system, the image does not have to be that large btw. Only working with IE it seems,Opera does not have problems with it, some firefox versions seem to slow down. Thanks to groupsrv.com forum for the information. Another reason for switching to Opera or Firefox.

continue reading "HTML Page Crashes Windows"

Cirt.net provides an easy and fast way to search many sites that post security vulnerabilites. The search engine uses the databases of the following sites: Bugtraq, CVE, ISS, OSVDB, Secunia, Snort, Nessus, Packetstorm, Security Tracker, Bugtraq Mailing List and Full-Disclosure Mailing List. The latest security vulnerabilites are reported to those sites and you are able to check them all with this search engine.

This is great for everyone who works with more than one of those sites, get ready to save some time. It´s also a great way for website owners to stay up to date and secure their websites by knowing and fixing the latest publically known vulnerabilities.

continue reading "Scurn - Security Vulnerability Search Engine"