Questions tagged [historical]

For questions about the history of the IT security domain. For user's history managed by software such as browsers, use the [logging] tag instead.

Filter by
Sorted by
Tagged with
0
votes
1answer
133 views

I installed internet certificates on my android to connect to uni wifi, can they see what I'm doing at home?

I wouldn't have thought that certificates could be used to track my history, I thought they were essentially login credentials, but I installed some to use my Uni wifi and now my google pixel 3 has a ...
1
vote
1answer
186 views

What happened to S.A.T.A.N. (a.k.a. S.A.N.T.A.)

Years ago computer security analysts Dan Farmer and Wietse Venema wrote the security program S.A.T.A.N. Does anyone know what happened to it (or if it just went out of style) and what people replaced ...
0
votes
0answers
110 views

Historical examples of breached TOTP secrets?

While reading about password breaches, it occurred to me; where are the TOTP shared secret breaches? Because TOTP relies on a shared secret (unlike say U2F) the server has a copy of the shared secret, ...
0
votes
1answer
259 views

Did The Wire invent the "Jump 5" cipher?

N.B. Asking this here instead of Movies.SE because I'm wanting to know about the cipher itself and any history, which this site is more suitable for. In S01E05 of The Wire, at around 45:00, it's ...
0
votes
1answer
158 views

Did a virus like this really ever exist? [closed]

I know that this world is very evil, and that the most unfathomable things go on around the clock, inside and outside of the "computer world". However, I sometimes really wonder if certain ...
3
votes
0answers
148 views

First Known Client/Server Architecture Malware

What malware was the first to use a client-server architecture to relay commands? The earliest that I could find appears to be NetBus which was written in early 1998. The next closest would be Back ...
5
votes
1answer
779 views

Why is the BCrypt text "OrpheanBeholderScryDoubt"

I'm looking for a reference about the weird initial BCrypt text "OrpheanBeholderScryDoubt" Why was this string used? Would using 192 zeros or ones not have worked well in practice for some reason? ...
1
vote
1answer
209 views

What exactly was "'dotty' and 'dashy'" Morse code?

During early World War I (1914–1916), Germany briefly experimented with 'dotty' and 'dashy' Morse, in essence adding a dot or a dash at the end of each Morse symbol. Each one was quickly broken by ...
36
votes
1answer
17k views

Was Goggle.com actually crazy malware in 2006?

This video shows how somebody accidentally opens Goggle.com instead of Google.com. He gets flooded with pop-ups, SpySheriff or SpywareSTOP get installed automatically, and the computer user has no ...
6
votes
1answer
197 views

Why was the Same-origin policy originally introduced (before XMLHttpRequest)?

As I understand it, the Same-origin policy (SOP) basically prevents a script in a web page from obtaining or sending information from/to a different domain. I understand that this is important to ...
0
votes
1answer
210 views

Why is the Web so complicated? [closed]

Hope it does not sound as a surprise to anyone that modern Web and its security, with the many layers and technologies, is pretty confusing and difficult to learn well. For someone with a good ...
0
votes
1answer
2k views

Origins of the "man-in-the-middle" analysis

Who first formulated communication security in terms of the "man in the middle" attacks? I am writing a book on the history of computing and communications. The earliest source I have so far is: ...
0
votes
1answer
295 views

Can a company see your old Google Searches

I am signed into my personal Gmail account through Safari on my phone. If I simply sign into my personal Gmail account on my work computer, can they see any old searches made on my phone or personal ...
1
vote
1answer
258 views

Database of all known hacking methods

As the internet is growing bigger and bigger, different kinds and methods of attack have been invented And there’s (anonymous) hackers who are willing to share these methods. I am wondering if there’s ...
0
votes
1answer
324 views

Does CCleaner permanently delete temp files? [closed]

Can temp files/ history be recovered after being deleted by CCleaner. I used the standard click and delete, I didn’t overwrite the files. If after sometime, will the files overwrite themselves or be ...
1
vote
2answers
282 views

Why are email clients prevented from seeing the envelope?

Being able to compare the envelope values against the header field values is potentially useful for detecting fraudulent (e.g. spoofed) mail. However, email servers, when receiving mail over SMTP, ...
0
votes
1answer
176 views

Where are historical data for the CIS Alert Level?

The CIS Alert Level is a representation of the current state of cyber(in)security, globally. There used to be a history of the levels, with an explanation for the changes (especially the rises). I ...
2
votes
1answer
363 views

Why was pseudo-authentication using OAuth more successful than actual authentication using OpenID?

A few years ago, OpenID was nearly everywhere, with support from what are currently the major OAuth providers -- Google, Facebook, and even Yahoo all provided OpenID authentication. Since then though,...
5
votes
1answer
564 views

What was state of the art knowledge on security of speculative evaluation when it was introduced to Intel CPUs?

Many sources claim that almost all Intel x86 CPUs back to Pentium Pro are vulnerable to the Meltdown attack. Pentium Pro was introduced to the market in 1995. What was the state of the art knowledge ...
0
votes
1answer
2k views

i have a school laptop can the school see my history if i use a vpn? [duplicate]

i have a vpn, can the school still see what i search? and when in turn it on i can go on sites that been blocked. i haven tried inappropriate sites but game sites work and social media sites which the ...
4
votes
1answer
274 views

Why don't browsers trust the US Treasury?

(inspired by How do you tell a website they have expired security certificates? ) Why don't major browsers trust the US Treasury PKI certificate authority by default? I know that the government isn'...
64
votes
2answers
8k views

Why has the NSA had a hand in deciding on encryption standards?

The NSA has had a large hand in the design of at least two significant encryption standards: the Digital Encryption Standard, and its successor, the Advanced Encryption Standard. Because of their ...
1
vote
1answer
194 views

Has the paradox 4.5 database file encryption ever been broken?

As the encryption of the paradox 4.5 database files is from around the late eighties or early nineties, I would have thought it would have been broken by now, but I've only seen tools to brute force (...
1
vote
1answer
157 views

Is there an example of a 'first' human error security breach?

I'm writing something on the biggest threats to cyber security (of either a nation state, company or individual) in the world today, and I've unsurprisingly settled on human error as the biggest. For ...
3
votes
2answers
126 views

Did any VT100 derivatives rely on client-side security?

VT100 terminals are "dumb terminals" - they just display data from the server, and send key strokes, with no local processing. In this setup, there can be server-side application flaws, and the ...
8
votes
2answers
2k views

When did development on various TLS versions begin? [closed]

What I'm looking for I'm looking for an approximation of the date that the development on each TLS or SSL version started (so the development start date). So I do not want to know the date when the ...
12
votes
2answers
287 views

Who was in the first set of CAs

I am currently digging into the history of SSL/TLS. I found that netscape introduced SSL around 1994/1995. They obviously decided to go with a X.509 PKI to mitigate MitM attacks. I, however, could not ...
1
vote
2answers
150 views

Do modern cryptographers / cryptoanalytics need the knowledge of historical cryptography

It makes a lot of sense for people to know the history of their profession from various points of view and I suppose especially in cryptography because people can still use old ciphers and no one ...
6
votes
1answer
377 views

When Shellshock was introduced, how bad was it **then**?

The shellshock bug, and the underlying feature allowing Function Import from the Environment (I'm calling it FIE), have been in bash since at least 1993, before the rise of CGI. At that time, the ...
3
votes
2answers
518 views
12
votes
1answer
16k views

Password length limits in history of operating systems and popular web sites

I heard that many years ago for example passwords on linux systems were limited to 8 characters. Or rather, you could type in more than 8 characters, but only the first 8 characters mattered. ...
0
votes
3answers
1k views

What is the technical rationale behind intermediary email servers?

EFF's Survelliance Self-Defense (SSD) project has an illustration of how email over SMTP goes through intermediate mail exchange servers: AFAIK each intermediate servers is expected to add its own ...
0
votes
1answer
252 views

Which is considered the first Cyber Security incident? [closed]

No matter we are talking about Information Security, or cyber security or IT security... I always hear first about "the moth" being the first security threat. But I don't believe it is when talking ...
78
votes
5answers
12k views

What was so dangerous about PGP that its creator was charged in court for it?

I was reading up on the history of the PGP encryption software when I realised its creator was under criminal charges for munitions export without a license for releasing the source code of PGP. ...
0
votes
2answers
148 views

Company Laptop and iTunes/iPhone

With their permission, I am selling a company laptop that I used, but I had been using iTunes and syncing my iPhone on that PC. Is it possible for a forensic tech to retrieve any of the browsing ...
7
votes
3answers
4k views

Where did common "minimum password length" guidelines originate?

Not long ago, the common wisdom was that passwords should be at least 8 characters long. These days, the most common minimum is 12. Where did these common values originate? Interestingly, 8 is ...
15
votes
4answers
8k views

What was SSL 1.0?

What was SSL 1.0? SSL 2.0 and 3.0 are well-known and well-documented. But what did the SSL 1.0 protocol look like? Wikipedia says there was a SSL 1.0 but doesn't say anything about how it worked. ...
4
votes
1answer
3k views

Notable XSS attacks in 2011 [closed]

I am wondering what notable events in XSS attacks we saw in 2011. What big events hit the infosec community in regards of XSS? I am thinking of specific events like for example the Samy worm in 2007 ...
7
votes
2answers
696 views

NSA crypto Suite B - historical

I'm looking for information on what NSA suggested for use in commercial systems in past times. 90's and early 2000's. I'm mainly interested in PKI and symmetric cyphers for SSL and file/disk ...