Remove Authentication Remove Exercises Remove Linux Remove Security
article thumbnail

Optimizing PCI compliance in financial institutions

CIO Business Intelligence

In the fast-evolving world of finance, data security is of paramount importance. The Payment Card Industry Data Security Standard (PCI DSS) is a crucial framework to which financial institutions must adhere. The Payment Card Industry Data Security Standard (PCI DSS) is a crucial framework to which financial institutions must adhere.

Financial 105
article thumbnail

The Hacker Mind: Hacking IoT

ForAllSecure

It seems everything smart is hackable, with IoT startups sometimes repeating security mistakes first made decades ago. How then does one start securing it? In 2013, researcher Nitesh Dhanjani found that a popular brand used simple MD5 hashes of the device's MAC addresses for authentication.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

The Hacker Mind: Hacking IoT

ForAllSecure

It seems everything smart is hackable, with IoT startups sometimes repeating security mistakes first made decades ago. How then does one start securing it? In 2013, researcher Nitesh Dhanjani found that a popular brand used simple MD5 hashes of the device's MAC addresses for authentication.

article thumbnail

Firmware Fuzzing 101

ForAllSecure

Very few of these devices have security in mind when they were built. This is a good target to look at because while it is a Linux firmware binary, it presents all of the challenges listed above. Is a MIPS Linux firmware. Let's add overrides for the rest of the acosNvramConfig_* family (left as an exercise to the reader).

article thumbnail

Firmware Fuzzing 101

ForAllSecure

Very few of these devices have security in mind when they were built. This is a good target to look at because while it is a Linux firmware binary, it presents all of the challenges listed above. Is a MIPS Linux firmware. Let's add overrides for the rest of the acosNvramConfig_* family (left as an exercise to the reader).

article thumbnail

The Hacker Mind Podcast: Hunting The Next Heartbleed

ForAllSecure

In this episode I talk about how Heartbleed (CVE 2014-0160) was found and also interview Rauli Kaksonen, someone who was at Codenomicon at the time of its discovery and is now a senior security specialist at the University of Oulu in Finland, about how new security tools are still needed to find the next big zero day. Apple Podcasts.

article thumbnail

The Hacker Mind Podcast: Hunting The Next Heartbleed

ForAllSecure

In this episode I talk about how Heartbleed (CVE 2014-0160) was found and also interview Rauli Kaksonen, someone who was at Codenomicon at the time of its discovery and is now a senior security specialist at the University of Oulu in Finland, about how new security tools are still needed to find the next big zero day. Apple Podcasts.