Skip navigation.
Home
Promoting security awareness and development.

Web and Web application security

hiding address

Many antispam sites tell you not to provide your email address. This advice, however, doesn't work too well if you need to advertise your address so that people can contact you. This site provides some practical advice on ways to hide your address from robots and spiders, but still make it accessible to people.

Most of these techniques would also work in HTML formatted email, but, as a malware specialist, I can hardly encourage people to use HTML formatted email. For those of a malware research frame of mind, a number of these techniques are also used to hide malicious content.

Facebook privacy demo

This link (actually a bit.ly link, since the actual link requires you to be logged in to Facebook) is a demonstration of how much information *any* Facebook app can get about you.

Hitler cloud sec

You may or may not be aware of the mass of "Hitler rant" videos on YouTube. These take a clip (from the movie "Downfall") and subtitle it with a rant from Hitler about everything from college football to the iPhone to Facebook accounts to ... well, anything at all.

This one is about cloud computing and security, and makes a few cute points about security in general.

Ghostnet

The tracking (and scope) of GhostNet, a significant example of the use of malware and botnets for espionage. Some items of this were given in a story in the New York Times (http://www.nytimes.com/2009/03/29/technology/29spy.html ). There is also related work in a report out of Cambridge (http://www.cl.cam.ac.uk/techreports/UCAM-CL-TR-746.html and full report at http://www.cl.cam.ac.uk/techreports/UCAM-CL-TR-746.pdf )(which, like everything else Ross Anderson has written, is worth reading regardless of your level of interest).

Understanding the Web browser threat

An interesting piece of research and discussion, examining browser vulnerabilities, and the risk to the computing envrionment as a whole, in light of a large number of factors.