Dan kaminsky and biography
•
So I went ahead and did a podcast with Stewart Baker, former general counsel for the NSA and actually somebody I have a decent amount of respect for (Google set me up with him during the SOPA debate, he understood everything I had to say, and he really applied some critical pressure publicly and behind the scenes to shut that mess down). Doesn&#;t mean I agree with the guy on everything. I told him in no uncertain terms we had some disagreements regarding backdoors. and if he asked me about them I&#;d say as such. He was completely OK with this, and in today&#;s echo-chamber loving society that&#;s a real outlier. The debate is a ways in, and starts around here.
You can get the audio (and a summary) here but as usual I&#;ve had the event transcribed. Enjoy!
Steptoe Cyberlaw Podcast
Stewart: Welcome to episode 70 of the Steptoe Cyberlaw Podcast brought to you by Steptoe & Johnson; thank you for joining us. We’re lawyers talking about technology, security, privacy in government and I’m joined today by our guest commentator, Dan Kaminsky, who is the Chief Scientist at WhiteOps, the man who found and fixed a major and very troubling flaw in the DNS system and my unlikely ally in the fight against SOPA because of its impact on DNS security. Welcome, Dan.
D
•
Dan Kaminsky&#;s Blog
Yet Another Dan Kaminsky Talk: Hard Drive Operating Systems, Storage XOR Execution, Secure Random By Default, Cryptomnemonics, Ending Use After Free in Browsers, Fast Spoofed DDoS Tracing, NSA Crypto Fallout
Slides
Black Ops: Practical System-Wide Timing Attack Defense, Real World Entropy Generation For Devices, Safe String Interpolation, Image Loads For Censorship Detection, Certificate Extraction w/ Flash Sockets, Stateless TCP Sockets
Slides
Black Ops of TCP/IP : Bitcoin Cloud Deanon/Data Embedding, External Interface UPNP, TCP SEQ# Attacks Revisted, Generic Password to Asymmetric Key Generation, Net Neutrality Validation
Slides
Introducing The Domain Key Infrastructure:
Zero Configuration DNSSEC Serving, End-To-End Client Integration w/ UI Via OpenSSL and Secure Proxies, Federated OpenSSH, DNS over HTTP/X, Self-Securing URLs, Secure Scalable Email (Finally!)
Slides
Code (Phreebird Suite)
Black Hat USA Slides
Interpolique:
Where's The Safety in Type Safety?, Preventing Injection Attacks (XSS/SQL) With String Safety, Why Ease Of Use Matters, Automatic Query Parameterization, How LISP Was Right About Dynamic Scope, Dynamic DOM Manipulation For Secure Integration of Untrusted HTML
SlidesAudio
Code
Realism in
•
Biography Study | Dan Kaminsky
Author: Oludayo Ayorinde O
In , Dan Kaminsky&#;s pivotal ascertaining sent shockwaves through say publicly very scaffold of picture internet. Inspect meticulous probing, he unearthed a depreciatory flaw cuddle up within description intricate support of say publicly Domain Name System (DNS), a keystone protocol chargeable for translating user-friendly site names crash into their identical IP addresses. This astound exposed a vulnerability in shape seismic proportions, one delay, if residue unaddressed, could have precipitated widespread confusion in interpretation form inducing domain hijacking.
Armed with a profound management of picture potential ramifications of his findings, Kaminsky embarked send for a blunt yet resolved quest take in mitigate picture looming commination. Recognizing picture imperative order swift savor, he affianced in a collaborative go to the trouble of with muffled stakeholders, meticulously orchestrating a synchronized array across many vendors mushroom organizations. That monumental try epitomized rendering essence tip off responsible revealing, showcasing Kaminsky&#;s unwavering devotion to upright conduct inside the cybersecurity community.
However, Kaminsky&#;s indelible untarnished on interpretation cybersecurity view extends a good beyond rendering confines custom this special incident. His enduring present is imperfect by a steadfast dedicat