Patchou's Cabana

The home page and blog of Cyril Paciullo

Archive for the Tech Talk

Transfer from GoDaddy

Following the recent stand from GoDaddy on the trash that is SOPA, I have decided, like many others, to transfer all my domain names to a registrar that won’t work against my interests. If you currently have domain names with GoDaddy and are against censorshop on the internet, I recommend you do the same.

If you don’t know what SOPA is and you don’t feel like spending more than 3 minutes on the subject, watch this video.

Is Google Chrome the new IE6?

Here’s an interesting article I found on Neowin today:

Chrome can do things that no other browser can do, and Google now targets Chrome exclusively, meaning some Google sites only function fully when viewed in Chrome. Even today, you can read on the Google blog about some new Angry Birds levels that only work in Chrome. This is disturbing, when you consider that Google has made a lot of hay about the openness of the Web.

To read more: http://www.pcmag.com/article2/0,2817,2397158,00.asp

Wi-Fi wisdom

While searching for technical information regarding 802.11n networks, I found this good piece of advice.

The Three Rules of Wireless Networking (source):

  1. It never goes as fast as they say it does
  2. It never goes as far as they say it does
  3. It never sets up as easily as they say it does

Something new is coming

Hungry anybody?…

Coming soon :)

The Smart Card Detective – Thesis

This week, I’ve read some very interesting posts about Omar S. Choudary’s thesis on credit card’s PIN security (or lack of it). Although it’s based on previously known information, this thesis is probably the first public document to go so deep in every detail that matters. A highly interesting read for the holidays and for those who don’t want to read all of it, here’s a quick summary: it only takes 150$ of easy to find material to build a card capable of charging any “chip protected” credit card with any amount your account allows, without prior knowledge of the PIN.

“Then we have used the SCD to perform the No PIN attack at the local cafeteria and
even in some random shops in Cambridge. We have successfully bought books and DVDs
worth over $50 at one of the shops using the journalist’s card but typing PIN 0000. Even
more, we have performed the tests without warning and nobody has noticed the hidden
device or fake card (the card interface connected to the SCD). After the transaction we
have disclosed the attack to the shop manager who said that such attacks occur very often.
The manager mentioned that during busy periods like Christmas credit card frauds occur
at least once a week. Because shops cannot longer check the cards (as the current policy
is to let the customer handle the card insertion and removal) the criminals can use fake
cards and devices similar to the SCD to perform fraud.”

The entire thesis can be read here.

  • Archive

  • Categories

  • Blogroll