Questions tagged [historical]

For questions about the history of the IT security domain. For user's history managed by software such as browsers, use the [logging] tag instead.

Filter by
Sorted by
Tagged with
0 votes
1 answer

Could the Brain virus technically prevent software piracy?

The Brain virus is an early virus targeting the IBM PC / MS DOS platform. Sometimes, it is claimed that one of the virus' purpose was to prevent the copying of some software that the virus was ...
FlorianZiegler's user avatar
0 votes
1 answer

I installed internet certificates on my android to connect to uni wifi, can they see what I'm doing at home?

I wouldn't have thought that certificates could be used to track my history, I thought they were essentially login credentials, but I installed some to use my Uni wifi and now my google pixel 3 has a ...
Tom's user avatar
  • 3
0 votes
0 answers

Historical examples of breached TOTP secrets?

While reading about password breaches, it occurred to me; where are the TOTP shared secret breaches? Because TOTP relies on a shared secret (unlike say U2F) the server has a copy of the shared secret, ...
user8187's user avatar
  • 141
0 votes
1 answer

Did The Wire invent the "Jump 5" cipher?

N.B. Asking this here instead of Movies.SE because I'm wanting to know about the cipher itself and any history, which this site is more suitable for. In S01E05 of The Wire, at around 45:00, it's ...
Hashim Aziz's user avatar
0 votes
1 answer

Did a virus like this really ever exist? [closed]

I know that this world is very evil, and that the most unfathomable things go on around the clock, inside and outside of the "computer world". However, I sometimes really wonder if certain ...
H Bebee's user avatar
3 votes
0 answers

First Known Client/Server Architecture Malware

What malware was the first to use a client-server architecture to relay commands? The earliest that I could find appears to be NetBus which was written in early 1998. The next closest would be Back ...
Saustin's user avatar
  • 311
13 votes
2 answers

Why is the BCrypt text "OrpheanBeholderScryDoubt"

I'm looking for a reference about the weird initial BCrypt text "OrpheanBeholderScryDoubt" Why was this string used? Would using 192 zeros or ones not have worked well in practice for some reason? ...
wim's user avatar
  • 673
0 votes
1 answer

What exactly was "'dotty' and 'dashy'" Morse code?

During early World War I (1914–1916), Germany briefly experimented with 'dotty' and 'dashy' Morse, in essence adding a dot or a dash at the end of each Morse symbol. Each one was quickly broken by ...
Deric's user avatar
  • 11
6 votes
1 answer

Why was the Same-origin policy originally introduced (before XMLHttpRequest)?

As I understand it, the Same-origin policy (SOP) basically prevents a script in a web page from obtaining or sending information from/to a different domain. I understand that this is important to ...
sleske's user avatar
  • 1,634
0 votes
1 answer

Why is the Web so complicated? [closed]

Hope it does not sound as a surprise to anyone that modern Web and its security, with the many layers and technologies, is pretty confusing and difficult to learn well. For someone with a good ...
postoronnim's user avatar
0 votes
1 answer

Can a company see your old Google Searches

I am signed into my personal Gmail account through Safari on my phone. If I simply sign into my personal Gmail account on my work computer, can they see any old searches made on my phone or personal ...
Gordy's user avatar
  • 1
1 vote
1 answer

Database of all known hacking methods

As the internet is growing bigger and bigger, different kinds and methods of attack have been invented And there’s (anonymous) hackers who are willing to share these methods. I am wondering if there’s ...
Andrew.Wolphoe's user avatar
0 votes
1 answer

Does CCleaner permanently delete temp files? [closed]

Can temp files/ history be recovered after being deleted by CCleaner. I used the standard click and delete, I didn’t overwrite the files. If after sometime, will the files overwrite themselves or be ...
Cj25's user avatar
  • 1
1 vote
2 answers

Why are email clients prevented from seeing the envelope?

Being able to compare the envelope values against the header field values is potentially useful for detecting fraudulent (e.g. spoofed) mail. However, email servers, when receiving mail over SMTP, ...
sampablokuper's user avatar
0 votes
1 answer

Where are historical data for the CIS Alert Level?

The CIS Alert Level is a representation of the current state of cyber(in)security, globally. There used to be a history of the levels, with an explanation for the changes (especially the rises). I ...
WoJ's user avatar
  • 9,038
35 votes
1 answer

Was actually crazy malware in 2006?

This video shows how somebody accidentally opens instead of He gets flooded with pop-ups, SpySheriff or SpywareSTOP get installed automatically, and the computer user has no ...
neverMind9's user avatar
2 votes
1 answer

Why was pseudo-authentication using OAuth more successful than actual authentication using OpenID?

A few years ago, OpenID was nearly everywhere, with support from what are currently the major OAuth providers -- Google, Facebook, and even Yahoo all provided OpenID authentication. Since then though,...
Jules's user avatar
  • 1,260
5 votes
1 answer

What was state of the art knowledge on security of speculative evaluation when it was introduced to Intel CPUs?

Many sources claim that almost all Intel x86 CPUs back to Pentium Pro are vulnerable to the Meltdown attack. Pentium Pro was introduced to the market in 1995. What was the state of the art knowledge ...
liori's user avatar
  • 171
0 votes
1 answer

i have a school laptop can the school see my history if i use a vpn? [duplicate]

i have a vpn, can the school still see what i search? and when in turn it on i can go on sites that been blocked. i haven tried inappropriate sites but game sites work and social media sites which the ...
laloyes 115's user avatar
4 votes
1 answer

Why don't browsers trust the US Treasury?

(inspired by How do you tell a website they have expired security certificates? ) Why don't major browsers trust the US Treasury PKI certificate authority by default? I know that the government isn'...
Please stop being evil's user avatar
1 vote
1 answer

Has the paradox 4.5 database file encryption ever been broken?

As the encryption of the paradox 4.5 database files is from around the late eighties or early nineties, I would have thought it would have been broken by now, but I've only seen tools to brute force (...
Bent's user avatar
  • 174
1 vote
1 answer

Is there an example of a 'first' human error security breach?

I'm writing something on the biggest threats to cyber security (of either a nation state, company or individual) in the world today, and I've unsurprisingly settled on human error as the biggest. For ...
08915bfe02's user avatar
3 votes
2 answers

Did any VT100 derivatives rely on client-side security?

VT100 terminals are "dumb terminals" - they just display data from the server, and send key strokes, with no local processing. In this setup, there can be server-side application flaws, and the ...
paj28's user avatar
  • 33.4k
12 votes
2 answers

Who was in the first set of CAs

I am currently digging into the history of SSL/TLS. I found that netscape introduced SSL around 1994/1995. They obviously decided to go with a X.509 PKI to mitigate MitM attacks. I, however, could not ...
Jay's user avatar
  • 121
64 votes
2 answers

Why has the NSA had a hand in deciding on encryption standards?

The NSA has had a large hand in the design of at least two significant encryption standards: the Digital Encryption Standard, and its successor, the Advanced Encryption Standard. Because of their ...
IQAndreas's user avatar
  • 6,845
1 vote
2 answers

Do modern cryptographers / cryptoanalytics need the knowledge of historical cryptography

It makes a lot of sense for people to know the history of their profession from various points of view and I suppose especially in cryptography because people can still use old ciphers and no one ...
Ilya Chernomordik's user avatar
8 votes
2 answers

When did development on various TLS versions begin? [closed]

What I'm looking for I'm looking for an approximation of the date that the development on each TLS or SSL version started (so the development start date). So I do not want to know the date when the ...
user23127's user avatar
  • 203
0 votes
1 answer

Origins of the "man-in-the-middle" analysis

Who first formulated communication security in terms of the "man in the middle" attacks? I am writing a book on the history of computing and communications. The earliest source I have so far is: ...
denten's user avatar
  • 109
6 votes
1 answer

When Shellshock was introduced, how bad was it **then**?

The shellshock bug, and the underlying feature allowing Function Import from the Environment (I'm calling it FIE), have been in bash since at least 1993, before the rise of CGI. At that time, the ...
Ben's user avatar
  • 3,737
3 votes
2 answers

Why is the *-property in BPL security model named "star"?

I am just looking for the meaning of "star" in this property
user55767's user avatar
1 vote
1 answer

What happened to S.A.T.A.N. (a.k.a. S.A.N.T.A.)

Years ago computer security analysts Dan Farmer and Wietse Venema wrote the security program S.A.T.A.N. Does anyone know what happened to it (or if it just went out of style) and what people replaced ...
Jeff Clayton's user avatar
0 votes
3 answers

What is the technical rationale behind intermediary email servers?

EFF's Survelliance Self-Defense (SSD) project has an illustration of how email over SMTP goes through intermediate mail exchange servers: AFAIK each intermediate servers is expected to add its own ...
n611x007's user avatar
  • 2,285
0 votes
1 answer

Which is considered the first Cyber Security incident? [closed]

No matter we are talking about Information Security, or cyber security or IT security... I always hear first about "the moth" being the first security threat. But I don't believe it is when talking ...
kiBytes's user avatar
  • 3,470
80 votes
5 answers

What was so dangerous about PGP that its creator was charged in court for it?

I was reading up on the history of the PGP encryption software when I realised its creator was under criminal charges for munitions export without a license for releasing the source code of PGP. ...
Computernerd's user avatar
  • 2,431
0 votes
2 answers

Company Laptop and iTunes/iPhone

With their permission, I am selling a company laptop that I used, but I had been using iTunes and syncing my iPhone on that PC. Is it possible for a forensic tech to retrieve any of the browsing ...
user36531's user avatar
7 votes
3 answers

Where did common "minimum password length" guidelines originate?

Not long ago, the common wisdom was that passwords should be at least 8 characters long. These days, the most common minimum is 12. Where did these common values originate? Interestingly, 8 is ...
Iszi's user avatar
  • 27.1k
15 votes
4 answers

What was SSL 1.0?

What was SSL 1.0? SSL 2.0 and 3.0 are well-known and well-documented. But what did the SSL 1.0 protocol look like? Wikipedia says there was a SSL 1.0 but doesn't say anything about how it worked. ...
D.W.'s user avatar
  • 99.6k
13 votes
1 answer

Password length limits in history of operating systems and popular web sites

I heard that many years ago for example passwords on linux systems were limited to 8 characters. Or rather, you could type in more than 8 characters, but only the first 8 characters mattered. ...
student's user avatar
  • 1,473
4 votes
1 answer

Notable XSS attacks in 2011 [closed]

I am wondering what notable events in XSS attacks we saw in 2011. What big events hit the infosec community in regards of XSS? I am thinking of specific events like for example the Samy worm in 2007 ...
Chris Dale's user avatar
  • 16.2k
7 votes
2 answers

NSA crypto Suite B - historical

I'm looking for information on what NSA suggested for use in commercial systems in past times. 90's and early 2000's. I'm mainly interested in PKI and symmetric cyphers for SSL and file/disk ...
Hubert Kario's user avatar
  • 3,808