SecurityRatty: tag: clock

An improved clock-skew measurement technique for revealing hidden services

2008-06-26 05:12:21 by Steven J. Murdoch in Light Blue Touchpaper

...clock skew. I showed that by inducing load on a Tor hidden service, an attacker could cause measurable changes in clock skew and so allow the computer hosting the service to be re-identified. However, it takes a very long time (hours to days) to obtain a sufficiently accurate clock-skew estimate, even taking a sample every few seconds. If...

Tags: clock-skew measurement technique, clock, clock-skew, clock transition, clock source, clock skew, magnitude lower noise, tcp, tcp timestamps

Say When - Trusting Log Timestamps

2008-03-23 04:05:00 by Dr Anton Chuvakin in Anton Chuvakin Blog -

...clock is reset or not set correctly. This timestamp clearly should NOT be trusted Second, we can say that its always 5PM somewhere: in other words, what time zone are your logs in? EST? PDT? GMT? UTC? Or any of more than 24 other possibilities. If you have no idea, you should not trust the timestamp Third, are you in drift ? Is your system...

Tags: logs, windows event logs, syslog files, syslog, define logs, syslog-ng, system logs, syslog daemon, time

Covert channel vulnerabilities in anonymity systems

2007-12-10 10:39:42 by Steven J. Murdoch in Light Blue Touchpaper

...clock skew. Experiments show this to be an effective attack against Tor. This side channel may also be usable for geolocation and, as a covert channel, can cross supposedly infallible air-gap security boundaries This thesis demonstrates how theoretical models and generic methodologies relating to covert channels may be applied to find...

Tags: covert, covert channel vulnerabilities, vulnerabilities, network covert channels, covert channels, channels, covert channel, anonymity systems, systems

Polyphasic Sleep

2007-03-20 21:04:00 by Eric Marvets in The Security Samurai

...clock to reinforce their traditional sleeping patterns So I am going to try it. I just woke up from a 90 minute nap and Im feeling refreshed. Ill have one caffeine drink now and will sleep for another 90 minutes when I tire. Hopefully this will help me feel more rested. Ill report back in a few weeks to let you know how it goes, after a...

Tags: polyphasic, develop polyphasic behaviors, naps, polyphasic sleepers, minute naps, nature exhibit polyphasic, monophasic world, monophasic, caffeine

SaveXP.com

2008-02-08 07:46:06 by HASH0x8b3453c in StillSecure, After All These Years

...clock they have prepared a petition that almost 80,000 people have already signed. When it reaches 100k signatures they will present it to Microsoft The site is organized as a blog with links to different categories of stories on the subject from InfoWorld and other sources. Many of the stories are geared towards why people don't like Vista....

Tags: beyong june 30th, vista, reaches 100k signatures, infoworld, microsoft, current deadline, countdown clock, savexp, popular opinion

Giants-Pats? You wouldn't understand, its a NY-Boston thing

2008-02-03 22:33:37 by HASH0x8bb3900 in StillSecure, After All These Years

...clock, kept the Pats offense off the field and set up the Giants to pull it out in the end. The Giants defense did something that no team has done this year, that is stop the Pats when they had to be stopped. The Giants offense did something that no one has done on the Pats all year either. That was scoring when they had to score....

Tags: boston, giants, ny-boston, pats, boston fans, giants offense, giants franchise, pats offense, time game

Prospects Brightening for a Common Event Standard

2008-02-25 08:38:57 by Burton Group in Security and Risk Management Strategies Blog

...clock drift, and maintaining dynamic event handling policies Fortunately, the Mitre and Open Group efforts are gaining traction. Mitre has put up a CEE web site and one can ask to subscribe to the CEE mailing list. Mitre has described its scope as covering standard event taxonomy/terminology, log syntax, log transport and recommendations on...

Tags: common event standard, standard, event standards space, space, standards, common event standards, standards deliberation, cee, cee web site