email – Jupiter Broadcasting

Some folks feel that biometic data is not covered by US 5th Amendment (the right to non-self-incrimination)
recent Reddit post YSK: Facial scans, iris scans, and your fingerprints are not protected by the fifth amendment and therefore not secure.
Regent University Law Professor James Duane gives viewers startling reasons why they should always exercise their 5th Amendment rights when questioned by government officials – Don’t Talk to the Police

Rsync On Ice | TechSNAP 333

chris — Thu, 24 Aug 2017 16:26:41 +0000

CTD device – A CTD or Sonde is an oceanography instrument used to measure the conductivity, temperature, and pressure of seawater (the D stands for “depth,” which is closely related to pressure). The reason to measure conductivity is that it can be used to determine the salinity.
Had to reinstall software for a winch to get it working
Registered a new website and webmail and created a custom email solution so scientists would remotely access their email

Based on /.well-known/ of RFC5785 and similar in nature to robots.txt
JSON was discussed, but dismissed
CWE (Common Weakness Enumeration) will be used
Versioning of security.txt by third parties
Generation utilities have been created](https://github.com/EdOverflow/security-txt/issues/10)

Deep-insert skimmers
Romanian links to US crime
European data skimmed from cards, then used in US because chip technology is not widely deployed there
‘wands’ inserted deep into the ATM to retrieve data

re Database migrations in Episode 332 jungle boogie writes in to mention Sqitch github by David Wheeler. JB says “This is a program written in perl and looks to have support for many databases”. JB also mentioned [pgBackRest](https://www.pgbackrest.org/] github
Gary Foard writes in about a command line utility called shred. He uses to erase laptops from a live Linux disc. I checked the FreeBSD manual pages to check it’s there also, and it is – although I had to search for gshred instead of shred to find shred which I find weird. – See sysutils/coreutils in the FreeBSD Ports tree. – Dan notes: not recommended for erasing files any more. Not feasible for COW filesystems.
prime62 mentioned on the TechSNAP sub-reddit mentioned some password hashing/salting resources: Salted Password Hashing – Doing it Right and The definitive guide to form-based website authentication
Also seen on Reddit: There is no point [on max password lengths] since the field is hashed.

chris — Tue, 18 Jul 2017 22:47:27 +0000

One of the saddest and most fascinating things about applied cryptography is how 6689264031_4c7516b3e1_zlittle cryptography we actually use. In fact, with a few minor exceptions, the vast majority of the cryptography we use was settled by the early-2000s.*
Identity Based Cryptography – In the mid-1980s, a cryptographer named Adi Shamir proposed a radical new idea. The idea, put simply, was to get rid of public keys.
Attribute Based Encryption – The beautiful thing about this idea is not fuzzy IBE. It’s that once you have a threshold gate and a concept of “attributes”, you can more interesting things. The main observation is that a threshold gate can be used to implement the boolean AND and OR gates