Hey everyone,

If you have not started Lab 2 already you are going to be in a world of pain, so get started. Apart from that, Dan recommended a paper for us (us as in grad students, not you) to read. I am actually enjoying what I am reading, and I think it is pertinent to what we discussed in class today. If you have time and you are interested in current web security research, take a look at this paper

D. Akhawe, A. Barth, P. E. Lam, J. C. Mitchell, and D. Song. “Towards a Formal Foundation of Web Security.” In Proc. of the 23th IEEE Computer Security Foundations Symposium (CSF 2010).

Also, the streaming links for ShmooCon are posted. If you are interested, the conference is happening over the weekend, and you can watch from the comfort of your own home.

If you have any questions, feel free to email the TAs. Have a good weekend.

~dso

Homework 1 is posted.  Due 1/25/2011.

If you have free time, you should listen to Dan Bernstein Talk about securing the Internet:  27C3 Talk by Dan Bernstein: High-speed high-security cryptography: encrypting and authenticating the whole Internet. The talk was very interesting.  He talks about DNSSEC, why it is broken, how to break it, and why its is not feasible.  He then goes on to introduce his research and explains how encrypting almost all communication between a server and a client is feasible.  I enjoyed the talk.  Also, ShmooCon is happening next weekend (Jan 28- 30), and they have talks streaming live.  There was someone in class who asked  who got payed to break stuff.  This is a good opportunity to find out who, why, and how.  The Shmoo Group has not posted the live video details, but I imagine they will show up here when they are made public: ShmooNews.

Cheers.

I accidentally had the file where the output from the survey form goes marked as read-only. Unsurprisingly, I have no information on any of you. Please fill out the form one more time. Thanks.

Just fill out this convenient form. Once we have this, we’ll set up your accounts on the blog and the campus Subversion server, which we’ll use for you to submit your work.

Attention Comp327 students: make sure you subscribe to this blog.  This is where you’ll find class announcements, assignments, and everything else.