September 2013
- How to generate and send a timestamp request for Authenticode
When code is signed with a digital certificate the signature can not be relied upon past the validity of the certificate that was used because you don't know when the signature was applied. If you trusted it beyond that…
- How to generate and send an RFC3161 timestamp with OpenSSL and curl
For me the blog is this odd mix of diary and technical notes, this time I guess the post is more of a technical note -- here is a quick guide on how to generate RFC 3161 time-stamps using OpenSSL and curl.
- The weaknesses of fingerprint based authentication
I love security people, were paranoid, were fun, we think outside of the box but we are also human and often times get distracted by dogma and shiny objects. I think this happens a lot when talking about stuff like…
- Thoughts on Apple and fingerprint based biometrics
Yesterday Apple finally confirmed what their acquisition of Authentec was all about, integrating fingerprint based biometrics in the iPhone. This was not exactly a surprise but its one thing to know they were going to do…
- The origin of the Windows Biometric Framework
One of the projects I was responsible for when I was at Microsoft was the design and delivery of the Windows Biometric Framework. This was actually one of my favorite projects during my entire tenure at the company.