| Andrew Cooke | Contents | Latest | RSS | Twitter | Previous | Next


Welcome to my blog, which was once a mailing list of the same name and is still generated by mail. Please reply via the "comment" links.

Always interested in offers/projects/new ideas. Eclectic experience in fields like: numerical computing; Python web; Java enterprise; functional languages; GPGPU; SQL databases; etc. Based in Santiago, Chile; telecommute worldwide. CV; email.

Personal Projects

Lepl parser for Python.

Colorless Green.

Photography around Santiago.

SVG experiment.

Professional Portfolio

Calibration of seismometers.

Data access via web services.

Cache rewrite.

Extending OpenSSH.

C-ORM: docs, API.

Last 100 entries

Small Success With Go!; Re: Quick message - This link is broken; Adding Reverb To The Echo Chamber; Sox Audio Tools; Would This Have Been OK?; Honesty only important economically before institutions develop; Stegangraphy via PS4; OpenCL Mess; More Book Recommendations; Good Explanation of Difference Between Majority + Minority; Musical Chairs - Who's The Privileged White Guy; I can see straight men watching this conversation and laffing; When it's Actually a Source of Indignation and Disgust; Meta Thread Defending POC Causes POC To Close Account; Indigenous People Of Chile; Curry Recipe; Interesting Link On Marginality; A Nuclear Launch Ordered, 1962; More Book Recs (Better Person); It's Nuanced, And I Tried, So Back Off; Marx; The Negative Of Positive; Jenny Holzer Rocks; Huge Article on Cultural Evolution and More; "Ignoring language theory"; Negative Finger Counting; Week 12; Communication Via Telecomm Bids; Finding Suspects Via Relatives' DNA From Non-Crime Databases; Statistics and Information Theory; Ice OK in USA; On The Other Hand; (Current Understanding Of) Chilean Taxes / Contributions; M John Harrison; Playing Games on a Cloud GPU; China Gamifies Real Life; Can't Help Thinking It's Thoughtcrime; Mefi Quotes; Spray Painting Bike Frame; Weeks 10 + 11; Change: No Longer Possible To Merge Metadata; Books on Old Age; Health Tree Maps; MRA - Men's Rights Activists; Writing Good C++14; Risk Assessment - Fukushima; The Future of Advertising and Surveillance; Travelling With Betaferon; I think I know what I dislike so much about Metafilter; Weeks 8 + 9; More; Pastamore - Bad Italian in Vitacura; History Books; Iraq + The (UK) Governing Elite; Answering Some Hard Questions; Pinochet: The Dictator's Shadow; An Outsider's Guide To Julia Packages; Nobody gives a shit; Lepton Decay Irregularity; An Easier Way; Julia's BinDeps (aka How To Install Cairo); Good Example Of Good Police Work (And Anonymity Being Hard); Best Santiago Burgers; Also; Michael Emmerich (Vibrator Translator) Interview (Japanese Books); Clarice Lispector (Brazillian Writer); Books On Evolution; Looks like Ara (Modular Phone) is dead; Index - Translations From Chile; More Emotion in Chilean Wines; Week 7; Aeon Magazine (Science-ish); QM, Deutsch, Constructor Theory; Interesting Talk Transcripts; Interesting Suggestion Of Election Fraud; "Hard" Books; Articles or Papers on depolarizing the US; Textbook for "QM as complex probabilities"; SFO Get Libor Trader (14 years); Why Are There Still So Many Jobs?; Navier Stokes Incomplete; More on Benford; FBI Claimed Vandalism; Architectural Tessellation; Also: Go, Blake's 7; Delusions of Gender (book); Crypto AG DID work with NSA / GCHQ; UNUMS (Universal Number Format); MOOCs (Massive Open Online Courses); Interesting Looking Game; Euler's Theorem for Polynomials; Weeks 3-6; Reddit Comment; Differential Cryptanalysis For Dummies; Japanese Graphic Design; Books To Be Re-Read; And Today I Learned Bugs Need Clear Examples; Factoring a 67 bit prime in your head; Islamic Geometric Art; Useful Julia Backtraces from Tasks; Nothing, however, is lost with less discomfort than that which, when lost, cannot be missed

© 2006-2015 Andrew Cooke (site) / post authors (content).

Details on the RSA Attack

From: andrew cooke <andrew@...>

Date: Sat, 2 Apr 2011 08:49:07 -0300

On 17 March 2011 RSA dissclosed that it had detected an APT (Advanced
Persistent Threat - http://en.wikipedia.org/wiki/Advanced_Persistent_Threat)
to it's SecureID tokens - http://www.rsa.com/node.aspx?id=3872

SecureID tokens are small devices that display "random" numbers that you use
to connect to secure networks (the kind of thing that many banks here in Chile
use to secure online banking).  These are used by securityand political
agencies, amongst others, and an "APT" typically means "some foreign
government", so this could be a big deal.

More information on the attack has now been released -
http://blogs.rsa.com/rivner/anatomy-of-an-attack/ .  It seems that it was
started by using a zero-day attack agains Flash embedded in a mail attachment
sent to several workers.  Once the attackers could enter the system they used
privilege escalation attacks to gain access to secure servers and then
transferred data out.

No details, that I can see, on who was responsible.


RSA Attackers Got (and Used) SecureID Data

From: andrew cooke <andrew@...>

Date: Sat, 28 May 2011 09:45:34 -0400



Secure ID Hack Confirmed

From: andrew cooke <andrew@...>

Date: Mon, 6 Jun 2011 23:19:26 -0400


"The Lockheed attack showed that it was technologically feasible to hack a
third-party using data taken from RSA, and the defense contractor may not be
the last example."


The RSA Email

From: andrew cooke <andrew@...>

Date: Fri, 26 Aug 2011 08:12:52 -0300



Over 760 RSA Attack Victims

From: andrew cooke <andrew@...>

Date: Fri, 28 Oct 2011 08:45:44 -0300


"a list of companies whose networks were shown to have been phoning home to
some of the same control infrastructure that was used in the attack on RSA"


Comment on this post