Tasty » Adam Sampson's security bookmarks

Perspectives : Improving SSH-style Host Authentication with Multi-path Network Probing

A neat approach to SSL certificate (etc.) validation: have multiple public databases mapping hostnames to certificates, which can be checked automatically. It's a bit of a pity that their plugins include binary libraries...

to certificates firefox security software ssh ssl ... on 26 August 2008

Security Engineering - A Guide to Building Dependable Distributed Systems

Ross Anderson's book.

to cryptography ebooks security ... on 01 September 2006

Designing an Authentication System: a Dialogue in Four Scenes

Explaining Kerberos as a dialogue. A nice bit of writing.

to amusements kerberos programming security writing ... on 13 August 2006

AppArmor - OpenSUSE

A sane replacement for SELinux -- looks like this'd be useful for wrapping things like Firefox.

to kernel linux security software ... on 19 January 2006

Sysmask

A system call filter for Linux.

to linux security software ... on 19 August 2005

Plash: the Principle of Least Authority shell

to security software ... on 22 May 2005

Iang - SSL Considered Harmful

Rants on the subject of PKI.

to pki security ssl ... on 05 February 2005

Matt Blaze's cryptography resource on the web - crypto.com

to security ... on 17 January 2005

timhunkin/illegal engineering

Stuff about the history of safe engineering, from the guy who did "The Secret Life Of Machines".

to amusements safe security ... on 17 January 2005

GCC extension for protecting applications from stack-smashing attacks

I ought to look into adding this to GARstow's GCC at some point.

to security software ... on 15 January 2005