<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Tapaninaho &#187; Security</title>
	<atom:link href="http://tapaninaho.com/blog/category/technology/security/feed/" rel="self" type="application/rss+xml" />
	<link>http://tapaninaho.com/blog</link>
	<description>Kristian Tapaninaho’s place to write and share ideas.</description>
	<lastBuildDate>Thu, 15 Jul 2010 17:41:17 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=abc</generator>
		<item>
		<title>Caught on Camera</title>
		<link>http://tapaninaho.com/blog/2009/03/caught-on-camera/</link>
		<comments>http://tapaninaho.com/blog/2009/03/caught-on-camera/#comments</comments>
		<pubDate>Mon, 23 Mar 2009 22:45:04 +0000</pubDate>
		<dc:creator>Kristian</dc:creator>
				<category><![CDATA[Google]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Google Streetview]]></category>
		<category><![CDATA[Privacy]]></category>
		<category><![CDATA[Streetview]]></category>

		<guid isPermaLink="false">http://tapaninaho.com/blog/?p=380</guid>
		<description><![CDATA[&#8220;+100 geek points&#8221; &#8211; Alex Kent. Had no idea they caught me on their wheeling cameras but they did. Pretty cool. I&#8217;m the only person I know on there. It really puts those privacy issues on to another level when it&#8217;s you. It&#8217;s the same with a lot of other things. We know that the [...]]]></description>
			<content:encoded><![CDATA[<div id="attachment_381" class="wp-caption alignleft" style="width: 160px"><a href="http://tapaninaho.com/blog/wp-content/uploads/2009/03/me-on-google-streetview.png"><img src="http://tapaninaho.com/blog/wp-content/uploads/2009/03/me-on-google-streetview-150x150.png" alt="Click to enlarge" title="me-on-google-streetview" width="150" height="150" class="size-thumbnail wp-image-381" /></a><p class="wp-caption-text">Click to enlarge</p></div>
<p>&#8220;+100 geek points&#8221; &#8211; <em><a href="http://twitter.com/alxknt">Alex Kent</a></em>.</p>
<p>Had no idea they caught me on their wheeling cameras but they did. Pretty cool. I&#8217;m the only person I know on there. It really puts those privacy issues on to another level when it&#8217;s you. It&#8217;s the same with a lot of other things. We know that the &#8216;information technology workers&#8217; at your ISP (or your company&#8217;s IT dept) <strong>ARE</strong> reading your email. Or that each of us are recorded some 100 time a day on CCTV. Or that everytime you pay at a parking meter, that coin is DNA analyzed and added to the states records. With your name on it. </p>
<p>But when this information is actually made easily available, to everybody, it becomes a little invasive. Especially 1) if you have something to hide and/or 2) if you&#8217;re bothered. I think Google Streetview still falls into the &#8216;security through obscurity&#8217; category in that if I wasn&#8217;t now shouting of my existence there, nobody would know. And with that photo, nobody from outside my circle of friends would recognize me. I obviously don&#8217;t think Google is invading my privacy &#8211; but I also understand those caught in less favorable situations. What&#8217;s good about it is that it really reminds us that we are constantly being watched and recorded<span style="text-decoration:line-through;">, and if we&#8217;re not happy about it, we better start behaving</span>.</p>
<p><strong>[Important Update]</strong> Just to be clear &#8211; and to make me not look like a Tory ***t &#8211; I am against bio-metric ID cards and governments cataloging our DNA <em>just</em> in case we might do something. There&#8217;s been too many cases of people being wrongly <a href="http://www.guardian.co.uk/technology/2009/jan/08/apple-macworld-dullsville-pipe">accused and arrested</a> for that to make sense in anyway. It&#8217;s preemptive invasion of privacy. CCTV is supposed to prevent crime by making it clear that you&#8217;re on camera and your wrong doings can be proven with it. BTW, those records are public, you have the right to ask for the tapes and watch them. Within the last 6 months, I&#8217;ve reported to two crimes to the police, both of which were committed under CCTV cameras. What did the Police do? Nothing. CCTV didn&#8217;t prevent the crimes, neither did the Police use them to solve the crimes. </p>
<p>So, to sum up, and clarify the last few words in the original post; It&#8217;s not great that we&#8217;re being followed with all the cameras but we haven&#8217;t got that much to worry about either as we&#8217;re still pretty anonymous.</p>
]]></content:encoded>
			<wfw:commentRss>http://tapaninaho.com/blog/2009/03/caught-on-camera/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>ISS Got Infected</title>
		<link>http://tapaninaho.com/blog/2008/08/iss-got-infected/</link>
		<comments>http://tapaninaho.com/blog/2008/08/iss-got-infected/#comments</comments>
		<pubDate>Fri, 29 Aug 2008 13:02:32 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Microsoft]]></category>
		<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://tapaninaho.com/blog/?p=217</guid>
		<description><![CDATA[Just quick note to the people in charge of ISS (International Space Station); go get yourselves some MacBook Airs and stop having to worry about viruses. Seriously, this is almost as bad as those US voting machines needing anti-virus software. To quote xkcd: &#8220;It&#8217;s better that the alternative &#8211; yet someone is clearly doing their [...]]]></description>
			<content:encoded><![CDATA[<p>Just quick note to the people in charge of ISS (International Space Station); go get yourselves some MacBook Airs and stop having to <a href="http://www.guardian.co.uk/technology/2008/aug/28/spacetechnology.spaceexploration">worry about viruses</a>. Seriously, this is almost as bad as those US voting machines needing anti-virus software. To quote <a href="http://xkcd.com/463/">xkcd</a>: &#8220;It&#8217;s better that the alternative &#8211; yet someone is clearly doing their job horribly wrong&#8221;.</p>
<p>&#8211;kristian</p>
]]></content:encoded>
			<wfw:commentRss>http://tapaninaho.com/blog/2008/08/iss-got-infected/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Firefox Security</title>
		<link>http://tapaninaho.com/blog/2007/06/firefox-security/</link>
		<comments>http://tapaninaho.com/blog/2007/06/firefox-security/#comments</comments>
		<pubDate>Tue, 26 Jun 2007 10:54:24 +0000</pubDate>
		<dc:creator>Kristian</dc:creator>
				<category><![CDATA[Firefox]]></category>
		<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://tapaninaho.com/blog/2007/06/firefox-security/</guid>
		<description><![CDATA[This may not be news to all of you but I think many will be pretty chocked. Certainly I was. It was noticed earlier on last year but nothing &#8211; at least on OS X version &#8211; has been done to fix it. It&#8217;s a feature, not a bug. You know when you&#8217;re login on [...]]]></description>
			<content:encoded><![CDATA[<p>This may not be news to all of you but I think many will be pretty chocked.  Certainly I was. It was noticed earlier on last year but nothing &#8211; at least on OS X version &#8211; has been done to fix it. It&#8217;s a feature, not a bug.</p>
<p>You know when you&#8217;re login on to  a website for the first time, your browser asks if you want to save the password? I often choose to save the login credentials on sites that aren&#8217;t in the circle of &#8216;important to keep secure&#8217; sites. After all, my laptop locks up every time it goes to sleep or screensaver comes on so it&#8217;s not THAT easy to get on it.</p>
<p>Firefox obviously does this, too. It&#8217;s convenient to use it. But what I didn&#8217;t know before is how easy it is to get those passwords, in plain text. Go to Firefox Preferences and select the &#8216;Security&#8217; -tab (those were air quotes) there select Show Passwords. Unbelievable. Anyone, who has access to your computer for about 30 seconds without you watching, will be able to LOOK at your passwords and copy them. In the following video, I will demonstrate how this is done, in under 20 seconds:</p>
<p><embed src="http://tapaninaho.com/blog/images/poster.mov" width="450" height="256" autoplay="true" CONTROLLER=false HREF="http://tapaninaho.com/blog/images/firefox_password_steal.mov" TARGET="myself" PLUGINSPAGE=http://www.apple.com/quicktime/"></p>
<p>Of course some websites don&#8217;t let you save the password, banking websites foremost. But the problem is that so many people recycle their password. Using the same password for banking and facebooking is not a good idea.</p>
<p>I haven&#8217;t been using Firefox for a while now but when I did, I used to recommend it to people. I don&#8217;t anymore.</p>
<p>&#8211;kristian</p>
<p>ps. Safari saves passwords, too, but it saves them in Keychain. Keychain database has AES 128 bit  encryption on it making it not far from un-hackable. You can still access them, but you need to be authorized as the admin.</p>
]]></content:encoded>
			<wfw:commentRss>http://tapaninaho.com/blog/2007/06/firefox-security/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
<enclosure url="http://tapaninaho.com/blog/images/firefox_password_steal.mov" length="555840" type="video/quicktime" />
<enclosure url="http://tapaninaho.com/blog/images/firefox_password_steal_poster.mov" length="5574" type="video/quicktime" />
<enclosure url="http://tapaninaho.com/blog/images/poster.mov" length="745835" type="video/quicktime" />
		</item>
	</channel>
</rss>
