Google cracked my password!

While reading my many RSS feeds I stumbled across an interesting article about the ubiquitous google.

Google have come under fire in the past for caching too much. Perhaps this article highlights why. For me it also highlights just how easy it is for people who wish to cause harm, to obtain the information that they want.

Knowing that you can just punch in an MD5 hash into google and have a high probability that you will get a positive result is scary.

This also reminded me of a book I read recently, Hacking Exposed, a book well worth reading.

Hashes and how passwords are encrypted into such hashes has been the subject of several Forensics labs and to be honest I am starting to think that passwords, although cheap to implement, are fast becoming obselete, but what is making it obselete? because as far as I know there is no direct replacement technology out there.

So what should replace it? This is an open question as I would like to hear other peoples ideas.

Cryptography

Came across an interesting article today. A judge in the U.S has ruled that it is unlawful to run hash analysis on a suspects computer without an additional warrent. The Drive was imaged using EnCase and hashed from a completely seperate hard drive, leaving the original intact.

The full story can be read at the registry.

It worries me that Judges are making it so difficult for law enforcement agencies to do their jobs, it also worries me that this could happen here, and probably already has.

Insurance Companies

Ok the title of todays post may not appear to relate very much to the purpose of this blog, but it does.

Yesterday (Tuesday 11th Nov) my significant other was involved in a road accident. So as a matter of urgency I have had to travel down to Southampton. Thankfully not as serious as it could have been.

It does mean however that I am here for the rest of the week dealing with the insurance company and providing a shoulder to cry on.

Missing 6 lectures is not ideal so will have to make use of my spare time here. For example At 1pm (the time of my Networking lab) I sat down and followed the lab pack relating to what I would have been doing. Similarly I will read through the slides from Electronics and do any background reading needed.

Organisational (lack of) skills

Uni has been a pretty steep learning curve so far. I don't anticipate the curve levelling out anytime time soon. The last 6 weeks have really been about learning to to organise my self. By that I mean how do I keep track of my assignments, hand outs, what I need to remember just in case or what I must include in something.

It has taken me a few weeks to work this out. The first 3 weeks everything was all over the place. I had no filing system or any way to track anything. I couldn't even workout what week certain work was part of!

What did I do? I began to seperate things into a logical (to me) filing system.

Firstly I purchased 3 folders 1 for each of my logbooks.
Secondly I purchased a divided notepad.

This was a good start, I now have somewhere to put logbook work. and somewhere to easily refer back to notes. This still wasn't enough though. I still couldn't work out what went where and what needed to be included or not.

Back to the drawing board.

I need to know what to do with;

handouts
lab packs
notes
assignments
logbooks

Handouts
I now mark these with the week number and date and file them in a divided folder (one divider for each module).

Lab packs
I do the same as above for these, except for electronics as the packs have to be included in the final log book. Once I have completed a pack I mark it as such.

Notes
I have two note books now one for 4 modules and one for Systems Programming (I write more for some reason). I then type up my notes as I find this helps me to remember it.

Assignments
These wll be kept on my PC. I have a folder with all my Uni work seperated by module. A hard copy will be kept in the same folder with my handouts (maybe).

Logbooks
I noticed that in both Electronics and Systems Programming there was a tendency for the lecturers to leak certain information. For example Systems Programming we are told what will potentially be in the exam and what must categorically be in the logbook. So I got some exercise books and use these to jot these things down.