Archives

Copyright in cryptocurrency is a complex topic, many crypto currencies are created by a corporate entity others by individuals. In some depending in some cases when the currency was created the associated logo was releasesd under a commercial licence requiring permission to use it, despite the fact the use of the logo may be “free marketing” for the copyright holder. I’m going to collect together a list of logos and evidence of what licence they are released under in this post, hope it is of use to someone. ...

Disclaimer: The medical and health information is provided in this post is for general informational and to document my experience only. It is not a substitute for professional advice. Accordingly, before taking any actions based upon such information, we encourage you to consult with the appropriate professionals. I do not provide any kind of medical or health advice. Since it became clear that I could not recover from Long-Covid on my own, I have been working with two Osteopaths to help support my recovery. There is quite a lot of experimentation involved in treatment. Unfortunately, there is limited evidence of treatments that work for all patients. ...

Photo of a blue-green hummingbird drinking from an Orange Flower by James Wainscoat on Unsplash If you are here because your Google Colab notebook that uses the Super-SloMo model is failing. Specifically, with a RuntimeError or you see the following in the output: ``_pickle.UnpicklingError: invalid load key, '<'. Then this is because the code that is used in the vast majority of notebooks to fetch this file has stopped working. We discovered that instead of downloading a 150Mb PyTorch checkpoint, it downloads a small HTML error page. ...

I had an unusual experience when using an Integral Crypto FIPS 197 device on a new laptop. This particular device uses TotalLock.exe on a read-only CDFS partition to enter the decryption key (password) to mount a hidden partition. When I went to access the device, i.e. run TotalLock.exe from the D: drive, the message: Failed to initialize secure device After investing the system event logs with minimal information, and checking the executable wasn’t blocked from explorer, I considered how Windows Defender might be affecting the device. ...

Photo by Austin Distel on Unsplash Hiding Malware in Share Buttons Some creative individuals have found a way of hiding card skimming malware in the sharing buttons used on various websites. A timely reminder to know what 3rd parties you us and what they might be vulnerable to. Novel Online Shopping Malware Hides in Social-Media Buttons Google, Adobe, Valve and Microsoft Patches Both Google and Microsoft emitted a slew of updates in the last week including fixes for undisclosed vulnerabilities in Chrome, Windows and Microsoft Teams. ...

Photo by Daniel Stub on Unsplash Disclosure: This page contains Amazon Affiliate links; as an Amazon Associate I earn from qualifying purchases. Further information can be found in my disclaimer and privacy policy. Mouse I bought a Razer Basilisk V2 when it was on Cyber Weekend deals on Amazon; pretty good for fairly decent mouse, I see plenty of people using Zowie Mice which either means they are sponsored by BenQ/Zowie or they are really the best mice for CS:GO — I’ll leave it to you to decide. ...

Photo by seth schulte on Unsplash Threat Hunting with JARM SANS comes through with an article on using JARM to hunt threats; this is an area I have started getting interested in given the increased threat landscape we find ourselves in. InfoSec Handlers Diary Blog If you know code is vulnerable, would you ship it? Dark Reading goes into some detail on the critical factors why vulnerable code is shipped in the first place. ...

Photo by Marcin Kempa] on Unsplash Proactive Security and Threat Modeling Manifestos have become a mainstay of information technology with everyone publishing a manifesto articulating the what a group of people subscribe to; generally of the form “we prefer this, over that”. __ InfoSec is no different and this week we had a Threat Modeling Manifesto — this is key as threat modeling is the cornerstone of proactive information security management so well worth a read. ...

Photo by Efe Kurnaz on Unsplash I’ll just sneak this into your in-tray Crafty sellers on the dark web have found a way to sneak e-mails into your inbox without sending them across the internet. This renders tools like Mimecast ineffective against this kind of attack; all is not lost however as the user would need to be phished before this could work. Tool sneakily implants malicious emails into inboxes, but it can be thwarted Innovation has been rife this year within the cybercrime community, The Register called this out in their article on Monday Morning: ...

Photo by Andrey Trusov on Unsplash Victim Blaming in Information Security Starting off this week on a low note, in my opinion, is the disturbing revelation that in 2020 we still think shaming people is an effective strategy to defend against phishing attacks. A paper published on the 29th October seems to suggest that after doing a study of 142 employees in New Zealand that a name and shame approach would work. ...