| Andrew Cooke | Contents | Latest | RSS | Twitter | Previous | Next

C[omp]ute

Welcome to my blog, which was once a mailing list of the same name and is still generated by mail. Please reply via the "comment" links.

Always interested in offers/projects/new ideas. Eclectic experience in fields like: numerical computing; Python web; Java enterprise; functional languages; GPGPU; SQL databases; etc. Based in Santiago, Chile; telecommute worldwide. CV; email.

Personal Projects

Lepl parser for Python.

Colorless Green.

Photography around Santiago.

SVG experiment.

Professional Portfolio

Calibration of seismometers.

Data access via web services.

Cache rewrite.

Extending OpenSSH.

Last 100 entries

Re: Python's sad, unimaginative Enum; Some explanation; Printing binary trees sideways; About "Python's sad, unimaginative Enum"; Atoms in python; Some good feedback here; Frustration Understood; I agree with you #nt; What would be imaginative?; Re: Enum; this is fucking useless; Enum; Python's sad, unimaginative Enum; Possible Fix; Work, Exhaustion, Vacation; VirtualBox with Centos 6.3 to 6.4, client; Matasano - Programming Lessons Learned; PDF to HTML; Alternate Substitution; Why RSA Works; Trigger; Dreaming of Death; Example: Tracing; Using Coroutines In Protocol Simulations; Python 3.3 Only; Pure Python SHA1 and MD4 Implementations; Ubuntu on VirtualBox; Starting TOR as a service on OpenSuse 12.3; 1001 Albums; Using fail2ban on OpenSuse 12.3; PPPoE on OpenSuse 12.3; Good Article on Unified Physics; It's Police (Carabineros); Linux Software for Listening to and Exploring Music; Android is Pretty Bad; Lucky Number; 3D Printing for Casting; Cover Art for MPDroid; Who'd a thought the French were so bigoted?; PS Input Signal; Small Problem with Roksan K2 Amp; Roksan K2 Amp + ATC SCM7 Speakers; Do What Makes Sense; Re: Arguing About Tests, Still; Arguing About Tests, Still; Images; Good Article on NY Drummers; Related Bug Report; Getting Python 3.3 and Virtualenv Working in OpenSuse 12.3; How I Am; Awesome video about digital audio; The Difference Between Dimensional and Normalized Databases; The rise of the new Chinese bogeyman; Updated Syntax; Very First Steps to C-ORM; The Ideal User Interface For Music Exploration; Can The Republicans Be Saved?; Rate Limiting Calls to EchoNest; Mods to Cache; Comparing UYKFG and UYKFD/E/F; Someone Else is Concerned; EchoNest-based Playlist Generator for MPD; Example Voting Results; A Heavyweight Python Cache; Identifying Artists with EchoNest; Notes on Pregalex / Pregabalina / Lyrica; The Neil Cowley Trio; Drake - Make for Data; A Reliable Python Web Service; Useful Python Date/Time Library?; Need to Sleep, But this is Good; Command Line Set Difference; Little Details...; Linux Command Line Tricks; AutoTools Tutorial; Hangman Tactics; A Tor Proxy Embedded In A Web Page; Tree (Nested Dicts) in Python; Sleeping at Parties; I Know Someone Who Hurts Other People; Light and Tea; Description of the LCS35 Time Capsule Crypto-Puzzle; Re: I can relate to that ...; I can relate to that ...; Re: It's 2012 Why Does My IDE Suck?; My Own Alternative Medicine; Nice explanation of SVM; Why and How Writing Crypto is Hard; Re: It's 2012 Why Does My IDE Suck?; Incremental Regular Expressions; BBC Map Confused at Pole; Social Media: Ground Zero in the Culture War; My Visit to the Psycho Doc; Learning Modern 3D Graphics Programming; Hope you got some crackers to go with the cheese; Re: But how easy would it be ...; But how easy would it be ...; Powerline Freq Fingerprinting of Audio; The Folly of Scientism; Cheese - Because You're Going to Die Anyway; Another GPU Success - PyCUDA, Cross-Correlations

© 2006-2013 Andrew Cooke (site) / post authors (content).

Details on the RSA Attack

From: andrew cooke <andrew@...>

Date: Sat, 2 Apr 2011 08:49:07 -0300 

On 17 March 2011 RSA dissclosed that it had detected an APT (Advanced
Persistent Threat - http://en.wikipedia.org/wiki/Advanced_Persistent_Threat)
to it's SecureID tokens - http://www.rsa.com/node.aspx?id=3872

SecureID tokens are small devices that display "random" numbers that you use
to connect to secure networks (the kind of thing that many banks here in Chile
use to secure online banking).  These are used by securityand political
agencies, amongst others, and an "APT" typically means "some foreign
government", so this could be a big deal.

More information on the attack has now been released -
http://blogs.rsa.com/rivner/anatomy-of-an-attack/ .  It seems that it was
started by using a zero-day attack agains Flash embedded in a mail attachment
sent to several workers.  Once the attackers could enter the system they used
privilege escalation attacks to gain access to secure servers and then
transferred data out.

No details, that I can see, on who was responsible.

Andrew

RSA Attackers Got (and Used) SecureID Data

From: andrew cooke <andrew@...>

Date: Sat, 28 May 2011 09:45:34 -0400 

http://www.reuters.com/article/2011/05/27/us-usa-defense-hackers-idUSTRE74Q6VY20110527

Andrew

Secure ID Hack Confirmed

From: andrew cooke <andrew@...>

Date: Mon, 6 Jun 2011 23:19:26 -0400 

http://online.wsj.com/article/SB10001424052702304906004576369990616694366.html

"The Lockheed attack showed that it was technologically feasible to hack a
third-party using data taken from RSA, and the defense contractor may not be
the last example."

Andrew

The RSA Email

From: andrew cooke <andrew@...>

Date: Fri, 26 Aug 2011 08:12:52 -0300 

http://www.f-secure.com/weblog/archives/00002226.html

Andrew

Over 760 RSA Attack Victims

From: andrew cooke <andrew@...>

Date: Fri, 28 Oct 2011 08:45:44 -0300 

https://krebsonsecurity.com/2011/10/who-else-was-hit-by-the-rsa-attackers/

"a list of companies whose networks were shown to have been phoning home to
some of the same control infrastructure that was used in the attack on RSA"

Andrew

Comment on this post