Observation just now from Radu Sion during the FC rump session: in the cloud, it costs about $5 million to brute-force 64 bits of symmetric key.

I'm not quite smart enough to do real malware analysis like foxgrrl does, but ever since the days of the "I Love You" virus, I've been tremendously amused by the social-engineering tricks that malware authors use to trick victims into opening their payloads. Tonight I received one that struck me as especially clever: a fake "Notice of Underreported Income ( Read more... )

Prompted by a discussion with bunnykitteh, who's good at prompting these kinds of things ( Read more... )

This one's a first for me: an eBay phishing email in Spanish, purporting to be from service@escrow-ebay.es, with accompanying fake Spanish website. (For the love of God, if you click on that link, do not attempt to sign in with actual eBay credentials. You probably shouldn't click on it anyway, though it doesn't appear to attempt to do anything ( Read more... )

Looks like there's a Great Hatsby variant scraping the feed of recent LJ posts and looking for people with visible AIM screen names, then randomly initiating a connexion between two users (though, unlike Great Hatsby, it doesn't appear that the two users are sent the same initial message).

If you receive an IM from the user devourablesalmon, there ( Read more... )