Kompromitace webu

I got an email...

It said the following,

Dear support portal user,

as you may have noticed, our portal has been unavailable. We identified an unknown party's attempt to breach the Flowmon's support portal yesterday. As a part of the internal security process, we took the portal offline.

Whil...

1st Feb 2019

Filing a Tax Return Online

It's not exactly comfortable, but it works!

Circumstances forced my hand — I have to file my own tax return for last year. Because I have a Data Box, I must do it electronically. Filing a tax return isn't particularly complicated: add up a few numbers, put them in the right boxes, done.

What...

29th Jan 2019

Data Box Password

Not like this…

The data box system got a new look. And with that they also dropped the CAPTCHA verification on login. My primary goal was to send my tax return, but I had an expired password. So: log in, change it, send. Except... I generated a password in my password manager, entered it in th...

28th Jan 2019
Collection #1

Collection #1

The biggest leak yet... of usernames and credentials.

I was curious what's actually in the largest collection of leaked data so far — Collection #1. I downloaded just under 40 GB of data. After extraction it came to just under 100 GB. I fired up Splunk and started indexing. It took almost the enti...

17th Jan 2019

Simulator with Oculus Rift

Simulator and VR

It's a different world. Situational awareness, overall perception — I could go on forever. If I had to pick a few things that made the biggest difference, it's definitely the feeling on landing. I felt like I was sitting in a fighter jet, sensing every movement of the aircraft...

9th Dec 2018

Passwords, passwords... passwords

So what's the deal with passwords

I came across an article from CSIRT-MU saying that passwords are like toothbrushes — change them and don't share them. The headline is catchy enough to draw readers in. However, I came away somewhat disappointed by the article. In the section on creating passw...

8th Dec 2018