Fout in de jaren 70

En ineens valt je oog op De Vrouw voor de Camera, een boek uit de reeks ‘De wereld van de fotografie’ (Lekturama, 1973). Zo’n boekomslag zakt natuurlijk grandioos voor het #MeToo-examen. Erotisch werk onder het mom van artisticiteit. Seksuele objectivering van de vrouw. En vergelijk het boek eens met een andere titel uit dezelfde reeks, Mens en Kind voor de Camera. Zie je nou wel?

Gezakt voor het #MeToo-examen: de museumwereld (Trouw)
Gedicht op muur Berlijnse school moet weg: te seksistisch (NOS)
#Metoo bereikt nu ook de kunstwereld (NOS)

Instagram door de bocht (2)

Alanisko: My photo has been taken down by #ig because someone marked it as #nude. C'mon kids, it's a statue. Here it is again #censored so hope it stays alive longer.

The Smart Card Detective (SCD)

Van de site van Omar Choudary, PhD-opleiding in Computer Science, Universiteit van Cambridge:

--

The Smart Card Detective (SCD)

The SCD is a card-size device that can intercept, monitor and modify the data of an EMV transaction (EMV is the protocol used in Europe for smartcard payments). This device and the associated software are the result of my MPhil project. The main goal of the SCD was to offer a trusted display for anyone using credit cards, to avoid scams such as tampered terminals which show an amount on their screen but debit the card another (usually larger) amount.

However, the final result is a more general and open EMV framework that can basically do anything a card or a terminal might do. That is, the SCD can act as both a card or a terminal (or even a CAP device), and it can relay, monitor and modify a transaction between a card and a terminal.

We have successfully tested the SCD with many CAP readers and terminals. Among the applications implemented I mention: confirmation of requested amount before authorising a transaction, log of transaction data, PIN modification. We have been able to test also the No PIN vulnerability using the SCD. There is also a French reportage on this.

The hardware consists of an ATMEL AT90USB1287 microcontroller, with several features: 3 power supplies (USB, DC, battery), ISP, USB and JTAG connectors, 2 ISO-7816 (smartcard) interfaces. Most of the software (targetted for the AVR architecture) is written in C with some small parts in assembler.

All the details about the SCD can be found on my MPhil thesis.

---

Reden van deze post: UK Bankers Try Gag of Student's Research.

De link naar het pdf-bestand hierboven verwijst naar een gemirrorde locatie. Andere mirror hier. Het motto: alles waar je aandacht aan besteedt, wordt groter.

Tweet

Ingezonden brief

Uit 2600: The Hacker Quarterly

Dear 2600:
I'm seeking help in cracking a fascist government website known as myanmar.com and tharkinwe.com. These are the propaganda sites of the most vile government on the planet and they should not be representing the people of Burma. Kindly, please guide me in finding assistance in cracking these websites.
misterht01

First off, we strongly suspect the second site is part of the opposition, not the government. This illustrates one risk of blindly lashing out at websites that supposedly represent your enemies: sometimes you get it wrong and wind up hurting those you're trying to help. But the real reason why simply shutting down or attacking these sites is ultimately pointless is that it keeps the real issues from being addressed. Rather than silence those views you find to be repellent, let the world see exactly what they're saying and use another forum to tear it to pieces. Shutting down dissenting views is a tactic used by oppressive governments worldwide. Resorting to these methods yourself doesn't convince anyone of how wrong they are and likely will even win them some support. We find that often the best way to win a fight is to simply let the other side speak.