This blog post evolved over time – initially it was a mere scratchpad for notes during our initial research between 2012/11/29 and 11/30. Later, after Syria was back online again, I added a summary and some potential explanations of what might have happened at the end of this blog post. UPDATE 2014/8/13: It seems it … Read more
Microsoft’s Security Intelligence Report 12 uses the computers cleaned per mille (CCM) metric to compare the infection rates over time and between countries. This is, of course, no perfect measurement of the actual infection rates due to a number of factors, but nevertheless an interesting data-point. Austria usually sports a quite low CCM score, but … Read more
Internet Explorer 6 has outlived its “good-before”-date for years now and both Web-programmers (living hell to support) and Microsoft (a security-nightmare for them) were keen to put a stake through its heart for the last years. It finally seem to have worked: Austria is now at < 1% IE6 according to Microsoft’s IE6 Countdown page. … Read more
It’s not an everyday occurrence that an Austrian Company finds an important security issue. If they then follow responsible disclosure towards the vendor and also inform the local CERT, that’s something that should be openly acknowledged. Thus: A round of applause from CERT.at goes to Johannes Greil of SEC Consult Unternehmensberatung GmbH for finding a … Read more
This week, Comcast announced that they will enable DNSSEC validation on their production resolvers. One thing one might want to keep in mind if you do that: People make mistakes. Some domain owners will break their DNSSEC signatures. We’ve seen a good number of these in 1010, including TLDs like .arpa, .be, and .uk. I … Read more