IT Risk Space - Software category

Open-Source project jeopardizes banking with mobile devices

Fri, 25 Sep 2009 15:06:00 GMT

In August 2009 Karsten Nohl introduced his GSM Open-Source project @ HAR 2009 (Hacking at Random http://har2009.org) in the Netherlands. In his speech “Subverting the security base of GSM” he and Sascha Krissler explained the weaknesses of the standard encryption method A5/1 used globally around the world within the GSM networks. More details can be found within the full story.

Enjoy
-Andreas

Read full article

iPhone security

Mon, 06 Jul 2009 12:28:00 GMT

During the last couple of hours I received more and more information about issues around the actual iPhone security. On the remote exploit blog of Max you can find a very actual description about an approach to misuse one of the iPhone features. Max calls it “Usability kills security” and you may want to read all the details at:

http://remote-exploit.blogspot.com/2009/07/iusability-pwned.html

Some days ago George Hotz, a longtime Apple hacker, has released for the general public a tool that enables Windows users to jailbreak the iPhone 3GS, and older models running the 3.0 software update. The tool does not perform a carrier unlock. You may also want to have a look at that at:

http://www.pcworld.com/article/167846/iphone_3gs_gets_jailbroken_hack_available_online.html

From undisclosed sources I also heard that there is something out their for bluetooth-tethered jailbreaks. I wasn’t able to find quickly more details about that but if you know, please let me know and I will make it available to all of us.

Cheers
-Andreas

Read full article

IT Risk and Compliance Tool Requirements vs. WCK-L

Fri, 29 May 2009 16:46:13 GMT

Dear reader

In the previous requirements match article I've showed how well WCK-L meets the requirements on:

Usability
Maturity
Question base
Inventory
Workflows

As last part of the IT Risk Management Tool series I will outline the remaining requirements:

Reporting
Interfaces

I will also provide some information on the risk calculation engine which is very useful in providing an objective risk picture.

Newsflash:
Please find Andreas' views on a hot topic, reputational risks deriving from social media, which was published on securityvibes.com.

Hope you enjoy the read.

Sincerely

Igor

Read full article