Fall Goal – Learn to Eat Not Powerbars for Dinner

Found that in my fridge, look at the date.

I’m also bad at forgetting about the pizza and box in the oven. The worst time was when I found one… four months later.

It was easier when I lived downtown, walk out my door and there’s 30 restaurants to choose from. I’m going to have to learn to cook this winter, necessity is the mother of all inventions and all that.

It’s just… cooking is the least interesting thing ever. Cooking is for when I’m old.

 

 

I Tanked at Gardening this Year

Look, I even killed ferns – the world’s heartiest plant.

Why? By the time I got my act together to plant seeds it was mid-August, way too late. I kept forgetting to water regularly because I thought rain water was enough. And I’m supposed to find time to weed?

While I’m not the most embarrassing house on these street – lawn is usually cut and porch swept – I’m far from the most together.

Canadian Tire even sent me the below package of encouragement, along with the flower seeds I requested for my bathtub… and still I tanked it. They know me well too, and sent stuff that was “just add water.”

However!

According to the labels, this stuff will store fine over the winter provided it is NOT opened.

The added bonus is gardening items are on sale right now at Canadian Tire.

I’ve seen the above items priced at half-off. So go shopping now, and I scheduled a post for May 3, 2016 to remind us to plant the seeds.

***

No money was exchanged for this post.

Canadian Tire sent me their products, so I tested them then typed my impression. This is a beta test of my latest idea.

 

 

80% of Prox Card Readers are Now Vulnerable

A pair of security researchers introduced BLEKey at the 2015 Black Hat Security Conference.

It’s such a high percentage – 80% – because really, all proximity card readers are made by 1 of 2 companies. Actually, if you use one to get into work, I bet it’s a HID unit.

The BLEKey (Bluetooth low energy key) can be installed in 60 seconds by attaching it to the reader via 3 wires. Then, when paired with a mobile phone, this $10 device can open a proximity card protected door.

1 – Bluetooth

2 – processor

3 – where the 3 wires attach (2 data, 1 power)

4 – battery

Once in place, it can clone cards, remotely open the door, or disable the door entirely for 2 minutes after the attacker is through.

Business Owners:

At the conference, the pair threw 200 BLEKeys into the crowd, and made available both the code, and unit for sale; it’s now out there.

To protect your business, they suggest ensuring tamper detection is turned on, and make sure to monitor the logs for anomalies. Also monitor the camera by the door, to stop an attacker from installing one into your reader.

Pentesters:

Add this to your kit. It could make the physical portion of your pentest smoother, especially since sensitive areas are often protected by prox cards.

Or use it to mess with the company’s logs.

Get the code here – GitHub

Here’s the are the guys behind BLEKey and the best part is… they’re Canadian! They also received the most cheers of all the presentations I attended.

Left is Eric Evenchick, and right is Mark Baseggio.

From Black Hat 2015

Blog tag = Black Hat