Category Archives: Security

Check if a site is phishing site.

Here is the updated bookmarklet: Phishy? (tested on firefox 2.0 only!)
1. Drag this link to your bookmark. This checks if the site you are currently on is a phishing site.
2. Drag this link to your bookmark. This prompts for a URL and checks if it is a phising site.
Uses phishtank’s check URL API.
If this [...]

Against all Enemies

Against All Enemies: Inside America’s War on Terror is a fascinating account of events that happened inside the White House before and after 9/11 and how the focus shifted from fighting the terrorists to war with Iraq. I got to know about this book after watching Clinton’s interview with Fox News. where he repeatedly [...]

More about Phishtank API

Here is what will be good-to-have from phishtank.com API:

Good documentation about each interface e.g. how is callback_url used by auth.frob.request API ?
Description of all possible fields in return response (all possible XML elements and their possible values)
Some test URL’s and emails which will return known responses (i.e. phishy URL, good URL, not in the database [...]

Phish Tank

http://www.phishtank.com is a new service which aims to help weed out phishing URLs and email addresses using wisdom of the crowds. Users can submit emails/URLs which they suspect of fraud and others can vote if they really are fraudulent or not. I think it is a great concept. There is a REST API using which [...]

Using GPG from behind proxies.

I have struggled a lot to get the GPG working inside corporate firewalls. It is so cumbersome to set the tools to automatically request keys from keyserver for signature validations. Finally found the magic options for doing this from behind HTTP proxy. Just keeping this command here for reference.
gpg –keyserver x-hkp://pgp.mit.edu –keyserver-options honor-http-proxy –recv-key [...]

Anonymity on Internet

On the internet nobody knows you are a dog
Unfortunately it’s only true in cartoons! Basically you are leaving a surprisingly easy trail of the websites you visit. Visit Test anonymity if you want to find what web servers can know about you. A determined person can find out about the websites you browsed, what [...]

Hackers vs Mobile Phones

I have decided to blog about mobile security and security in general here.
San Diego Telecom Council had arranged a talk by Greg Rose of Qualcomm today with the topic “Hackers and Mobile Phones: who will win ?”. Greg Rose is an Australlian cryptographer who had “accidentally” cracked the weaknesses in CDMA on air ciphering. I [...]

IPSEC VPN using OpenBSD as a gateway.

VPN using IPSEC between OpenBSD and linux and windows.
OpenBSD