Forensics Mode:
(Page 34 of 84)  < Prev  29 30 31 32 33 34 35 36 37 38 39  Next >
Words of wisdom on recent SHA collisions 2005-02-17
Gary Palmer (palmerg mitre org)
Hi,
Just received this from Doug White (NIST) who is attending RSA. He and
his colleagues has some thoughtful statements about the state of SHA
both theoretically and in practice.
ciao,
Gary
********************

Gary,

[...] If you wish to forward this, you may.

Let me first say I am not in the

[ more ]  [ reply ]
Re: SHA1 showing it's age 2005-02-17
H Carvey (keydet89 yahoo com)
In-Reply-To: <20050217021655.GB2420 (at) sentinelchicken (dot) org [email concealed]>

Tim,

>> Luckily this (similar to the MD5 issue from last year) has very little
>> impact on our work in the short term. Proving a collision in a
>
>I am not entirely convinced. This type of issue, while not a
>catastrophic failure of SHA1

[ more ]  [ reply ]
Re: SHA1 showing it's age 2005-02-17
H Carvey (keydet89 yahoo com)
In-Reply-To: <83eea6c0aec0bd663f49f7600faeed6d (at) mac (dot) com [email concealed]>

Matt,

>For our field it's a strategic concern, not a tactical one.

Very well said, indeed!

In our field, too often, very smart people will come running into the room with their hair on fire, screaming that SHA-1 or MD-5 are broken. Yet,

[ more ]  [ reply ]
Bruce Schneier reports SHA-1 Broken 2005-02-16
David Baker (bakerd mitre org) (1 replies)
This is a follow up on the issue with hashing, which was brought up before with
SHA-0 and MD4/5. The paper describing the problem has apparently not been
released yet, but Bruce posted some info here:

http://www.schneier.com/blog/archives/2005/02/sha1_broken.html

I see nothing there that poses

[ more ]  [ reply ]
Re: Bruce Schneier reports SHA-1 Broken 2005-02-16
Valdis Kletnieks vt edu
SHA1 showing it's age 2005-02-16
Tim (tim-forensics sentinelchicken org) (1 replies)
in case you hadn't heard yet:
http://www.schneier.com/blog/archives/2005/02/sha1_broken.html

tim

-----------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management
an

[ more ]  [ reply ]
Re: SHA1 showing it's age 2005-02-16
Matthew Pepe (mtpepe mac com) (1 replies)
Re: SHA1 showing it's age 2005-02-17
Tim (tim-forensics sentinelchicken org)
DFRWS 2005 CFP 2005-02-15
Gary Palmer (palmerg mitre org)
**** DFRWS announces the Preliminary Call for Papers. Please have a look
at http://www.dfrws.org ****
The DFRWS has undergone some administrative changes since last years
event. Last October government budget tightening threatened support for
the workshop. In fact, I was convinced there wouldn't

[ more ]  [ reply ]
Digital Investigation, 4th Issue 2005-02-13
Eoghan Casey (eco digital-evidence net)
Colleagues,

I am very pleased to announce the publication of a fourth issue of
Digital Investigation - The International Journal of Digital Forensics
and Incident Response. This issue contains the following articles and
research papers:

Articles:

Domain name forensics: a systematic approach to

[ more ]  [ reply ]
RE: Software or tips on how to rescue/investigate an erased "reiserfs" disk 2005-02-09
Hofmeyr, Michael (ZA - Johannesburg) (mhofmeyr deloitte co za)
I have had similar issues in the distant past (touch wood!) as I reacall
I recovered with the following:

image the drive!
mount drive
run reiserfsck --rebuild-tree
mount drive
run reiserfsck -S
debugreiserfs
mount drive and hopefully all is well

Rgds

Michael Hofmeyr
Deloitte.
Direct: +27 11 209

[ more ]  [ reply ]
Software or tips on how to rescue/investigate an erased "reiserfs" disk 2005-02-08
Rikard Johnels (rikjoh norweb se) (3 replies)
Hello all!
This is probably more rescue then forensics;

I have a client that seems to have lost two 30 gig disks with a huge number of
files he uses in a project.
By some reason (so far unknown) the disk is suddenly empty.
They are created under Linux and uses ReiserFS, so he thought them to be
"

[ more ]  [ reply ]
Re: Software or tips on how to rescue/investigate an erased "reiserfs" disk 2005-02-11
Alvin Oga (alvin sec Virtual Linux-Sec net)
Re: Corporate Investigatons 2005-02-05
Jack Seward (JackSeward msn com)
Back on 1/17 my request for comments and experiences on either EnCase
Enterprise Edition or ProDiscovery by Technology Pathways was made.

Several professionals have asked me to share those reply's; but hardly any
have been received to date. So here are some specific questions and please
share with

[ more ]  [ reply ]
USB devices and the Windows Registry, part deux 2005-02-02
H Carvey (keydet89 yahoo com) (1 replies)


First off, I wanted to thank everyone for their responses...I received many, but unfortunately, it seems that no one has the specific information I'm looking for.

To that end, I thought I'd narrow my question down a bit...a lot, actually.

USB devices have a descriptor (on Windows, a USB_DEVICE

[ more ]  [ reply ]
Re: USB devices and the Windows Registry, part deux 2005-02-03
Kevin Conaway (kevin conaway gmail com)
FW: USB devices and the Windows Registry 2005-02-01
MR_EPOD . (mr_epod hotmail com)
Hey,

I seen your post and thought this util might be handy for your USB research

-------
Extract from sf.net site
# This is a tool that log the usb data exchange between hardware and device
driver!
URL: http://sourceforge.net/projects/usbsnoop/
-------

Regards
MR_EPOD

>-----Original Message----

[ more ]  [ reply ]
USB devices and the Windows Registry 2005-02-01
H Carvey (keydet89 yahoo com) (1 replies)


All,

Cory Altheide and I are conducting some research into USB devices and the Windows Registry. In doing so, I've been trying to get in contact with folks at Microsoft to answer some questions with regards to the creation of certain Registry keys...most of the contacts have been several layers

[ more ]  [ reply ]
Re: USB devices and the Windows Registry 2005-02-01
Bob Jones (jonesb svcc edu) (1 replies)
Re: USB devices and the Windows Registry 2005-02-01
Harlan Carvey (keydet89 yahoo com)
RE: USB devices and the Windows Registry 2005-02-01
Keifer, Trey (Trey Keifer fishnetsecurity com)
Go download the USB 2.0 Specification http://www.usb.org/developers/docs and look at section 9.6.1.

The USB descriptor contains a iSerialNumber field that can store a unique identifier. Microsoft uses
this in the following manner...

"A USB device has two choices for storing serial numbers in the i

[ more ]  [ reply ]
Re: mactimes - a network question 2005-01-27
K Pugh (kpughmisc pughkilleen com) (2 replies)
In-Reply-To: <043401c50467$f6c38b00$6701010a@JASEVO>

The computer on which the files were placed was runnning Windows 98. Per your recommendation to test my theory, I dug out an old copy of Windows 98 and created a destination computer. When I put files on there from a Windows 2000 computer (the

[ more ]  [ reply ]
Re: mactimes - a network question 2005-01-27
Rogan Dawes (discard dawes za net)
RE: mactimes - a network question 2005-01-27
Jerry Shenk (jshenk decommunications com)
(Page 34 of 84)  < Prev  29 30 31 32 33 34 35 36 37 38 39  Next >


 

Privacy Statement
Copyright 2010, SecurityFocus