| |
|
Demanding the source code for the Intoxilyzer 5000EN |
|
|
|---|
| Topic: Miscellaneous |
1:58 pm EDT, Aug 10, 2007 |
A Minnesota man accused of drunk driving has sued to see the source code of the Intoxilyzer 5000EN machine that busted him, and the state Supreme Court is allowing the request to go forward. His attorney told the paper, "The problem is, the manufacturer of the thing thinks they can hold it back and not tell anybody how it works. For all we know, it's a random number generator." If they’re going to be accused based on what some machine says, then they ought to be allowed to challenge the accuracy of the machine. And they can't do that unless they’re allowed to know how the machine works.
Who is doing the QA work for these state certification programs? What if the machine was off by a 100th of a BAC measurement? I applaud this effort, even if it is just a slick way to get out of a DUI. Demanding the source code for the Intoxilyzer 5000EN |
|
One Bag: Checking Bags: Lost Locks |
|
|
|---|
| Topic: Business |
1:50 pm EDT, Aug 10, 2007 |
The photograph on the above right shows 244 locks collected from under an airport baggage handling conveyor belt (where two belts come together), over a one-month period at a single New York airport. Depending on the bag design, the strategic use of duct/gaffer's tape (to prevent locks from dangling) can reduce the likelihood of this sort of mishap.
One Bag: Checking Bags: Lost Locks |
|
Welcome to America | www.guardian.co.uk |
|
|
|---|
| Topic: Miscellaneous |
8:06 pm EDT, Aug 8, 2007 |
When writer Elena Lappin flew to LA, she dreamed of a sunkissed, laid-back city. But that was before airport officials decided to detain her as a threat to security ...
...
As it turned out, I was to spend 26 hours in detention. My crime: I had flown in earlier that day to research an innocuous freelance assignment for the Guardian, but did not have a journalist's visa.
Welcome to America | www.guardian.co.uk |
|
Schneier on Security: JavaScript Hijacking |
|
|
|---|
| Topic: Technology |
2:08 pm EDT, May 22, 2007 |
JSON Hijacking
It appears that there is quite a bit of misinformation out there regarding JSON (JavaScript) Hijacking. This site contains the orignial white paper that was put together by Fortify Software.
It seems that the main problems are servers willing to send JSON data to a session authenticated user via HTTP GET method.
Even though it requires that the JSON data objects are sent back in Arrays ([]), this may be a true concern for people that are storing sensative information in their JSON data. Schneier on Security: JavaScript Hijacking |
|
