<?xml version="1.0" encoding="UTF-8"?> <rss version="2.0" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:wfw="http://wellformedweb.org/CommentAPI/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:sy="http://purl.org/rss/1.0/modules/syndication/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/" ><channel><title>Java Code Geeks &#187; Christopher Meyer</title> <atom:link href="http://www.javacodegeeks.com/author/Christopher-Meyer/feed/" rel="self" type="application/rss+xml" /><link>http://www.javacodegeeks.com</link> <description>Java 2 Java Developers Resource Center</description> <lastBuildDate>Wed, 19 Jun 2013 07:00:21 +0000</lastBuildDate> <language>en-US</language> <sy:updatePeriod>hourly</sy:updatePeriod> <sy:updateFrequency>1</sy:updateFrequency> <generator>http://wordpress.org/?v=3.5.1</generator> <item><title>Browser-based Key Generation and interaction with the Browser&#8217;s Key/Certificate Store</title><link>http://www.javacodegeeks.com/2013/06/browser-based-key-generation-and-interaction-with-the-browsers-keycertificate-store.html</link> <comments>http://www.javacodegeeks.com/2013/06/browser-based-key-generation-and-interaction-with-the-browsers-keycertificate-store.html#comments</comments> <pubDate>Sun, 02 Jun 2013 22:00:37 +0000</pubDate> <dc:creator>Christopher Meyer</dc:creator> <category><![CDATA[Enterprise Java]]></category> <category><![CDATA[Security]]></category><guid isPermaLink="false">http://www.javacodegeeks.com/?p=13512</guid> <description><![CDATA[Imagine the following scenario: You need to get a key (in the asymmetric case the user&#8217;s public key) from a user visiting your website and want the browser to remember the private part without bothering the user with lengthy import procedures. To be honest, in practice you don&#8217;t even want the user to deal with [...]]]></description> <wfw:commentRss>http://www.javacodegeeks.com/2013/06/browser-based-key-generation-and-interaction-with-the-browsers-keycertificate-store.html/feed/</wfw:commentRss> <slash:comments>0</slash:comments> </item> <item><title>Weaknesses in Java Pseudo Random Number Generators (PRNGs)</title><link>http://www.javacodegeeks.com/2013/03/weaknesses-in-java-pseudo-random-number-generators-prngs.html</link> <comments>http://www.javacodegeeks.com/2013/03/weaknesses-in-java-pseudo-random-number-generators-prngs.html#comments</comments> <pubDate>Tue, 26 Mar 2013 08:00:48 +0000</pubDate> <dc:creator>Christopher Meyer</dc:creator> <category><![CDATA[Core Java]]></category> <category><![CDATA[Security]]></category><guid isPermaLink="false">http://www.javacodegeeks.com/?p=10363</guid> <description><![CDATA[This will be a sum up of a Paper written by Kai Michaelis, Jörg Schwenk and me, which was  presented at the Cryptographers&#8217; Track at RSA Conference 2013. You can get the slides of my presentation here and our full Paper here. We performed an analysis on the random sequences generated by common Java libraries [...]]]></description> <wfw:commentRss>http://www.javacodegeeks.com/2013/03/weaknesses-in-java-pseudo-random-number-generators-prngs.html/feed/</wfw:commentRss> <slash:comments>0</slash:comments> </item> <item><title>A brief chronology of SSL/TLS attacks</title><link>http://www.javacodegeeks.com/2013/02/a-brief-chronology-of-ssltls-attacks.html</link> <comments>http://www.javacodegeeks.com/2013/02/a-brief-chronology-of-ssltls-attacks.html#comments</comments> <pubDate>Thu, 07 Feb 2013 11:00:15 +0000</pubDate> <dc:creator>Christopher Meyer</dc:creator> <category><![CDATA[Software Development]]></category> <category><![CDATA[Security]]></category><guid isPermaLink="false">http://www.javacodegeeks.com/?p=8215</guid> <description><![CDATA[I haven&#8217;t had a substantial post for quite a long time, so it&#8217;s time for something useful and interesting. Although not Java-specific, this post might still be interesting to some of  you. A brief warning before reading: This is a very lengthy post, but &#8211; believe it or not &#8211; this is just the brief [...]]]></description> <wfw:commentRss>http://www.javacodegeeks.com/2013/02/a-brief-chronology-of-ssltls-attacks.html/feed/</wfw:commentRss> <slash:comments>0</slash:comments> </item> <item><title>Hash Length Extension Attacks</title><link>http://www.javacodegeeks.com/2012/07/hash-length-extension-attacks.html</link> <comments>http://www.javacodegeeks.com/2012/07/hash-length-extension-attacks.html#comments</comments> <pubDate>Mon, 30 Jul 2012 19:00:00 +0000</pubDate> <dc:creator>Christopher Meyer</dc:creator> <category><![CDATA[Core Java]]></category> <category><![CDATA[Security]]></category><guid isPermaLink="false">http://www.javacodegeeks.com/2012/10/hash-length-extension-attacks.html</guid> <description><![CDATA[In this post I will try to leave the summer slump behind and focus on more interesting things than complaining about the weather &#8211; hash length extension attacks. Hash length extension attacks are nothing complicated or high sophisticated, to be honest it is just about how to use hash functions. As discussed in one of [...]]]></description> <wfw:commentRss>http://www.javacodegeeks.com/2012/07/hash-length-extension-attacks.html/feed/</wfw:commentRss> <slash:comments>0</slash:comments> </item> <item><title>How to deal with {conservative, intractable, annoying} APIs</title><link>http://www.javacodegeeks.com/2012/05/how-to-deal-with-conservative.html</link> <comments>http://www.javacodegeeks.com/2012/05/how-to-deal-with-conservative.html#comments</comments> <pubDate>Mon, 28 May 2012 13:00:00 +0000</pubDate> <dc:creator>Christopher Meyer</dc:creator> <category><![CDATA[Software Development]]></category> <category><![CDATA[API]]></category><guid isPermaLink="false">http://www.javacodegeeks.com/2012/10/how-to-deal-with-conservative-intractable-annoying-apis.html</guid> <description><![CDATA[Have you ever been fighting with an, at least for your current purpose, inflexible API? I picked up one of the trickier scenarios &#8211; calling super( &#8230; ) with parameters. Sometimes there will be APIs defining constructors that force to be called with instances of Objects. So far so good, but what if the handled [...]]]></description> <wfw:commentRss>http://www.javacodegeeks.com/2012/05/how-to-deal-with-conservative.html/feed/</wfw:commentRss> <slash:comments>0</slash:comments> </item> <item><title>Using the final keyword on method parameters</title><link>http://www.javacodegeeks.com/2012/04/using-final-keyword-on-method.html</link> <comments>http://www.javacodegeeks.com/2012/04/using-final-keyword-on-method.html#comments</comments> <pubDate>Thu, 26 Apr 2012 16:00:00 +0000</pubDate> <dc:creator>Christopher Meyer</dc:creator> <category><![CDATA[Core Java]]></category><guid isPermaLink="false">http://www.javacodegeeks.com/2012/10/using-the-final-keyword-on-method-parameters.html</guid> <description><![CDATA[After some own confusion which specific meaning final declared method parameters have this blog entry will try to clarify this. At least the final keyword on method parameters can be seen as an indicator for the Java compiler that this parameter can not be reassigned to another reference. Java parameter handling is always Call by [...]]]></description> <wfw:commentRss>http://www.javacodegeeks.com/2012/04/using-final-keyword-on-method.html/feed/</wfw:commentRss> <slash:comments>0</slash:comments> </item> <item><title>Investigating the HashDoS issue</title><link>http://www.javacodegeeks.com/2012/02/investigating-hashdos-issue.html</link> <comments>http://www.javacodegeeks.com/2012/02/investigating-hashdos-issue.html#comments</comments> <pubDate>Fri, 24 Feb 2012 19:07:00 +0000</pubDate> <dc:creator>Christopher Meyer</dc:creator> <category><![CDATA[Core Java]]></category> <category><![CDATA[Security]]></category><guid isPermaLink="false">http://www.javacodegeeks.com/2012/10/investigating-the-hashdos-issue.html</guid> <description><![CDATA[Nearly one month ago I have written some thoughts on how the HashDoS problem presented at the 28C3 or other code defects could perhaps be fixed temporarily without interaction of vendors. Now it&#8217;s time to deeper investigate the complexity attack and have at look at the sources. I quitely assume that java.util.HashMap and java.util.Hashtable are [...]]]></description> <wfw:commentRss>http://www.javacodegeeks.com/2012/02/investigating-hashdos-issue.html/feed/</wfw:commentRss> <slash:comments>0</slash:comments> </item> <item><title>Patching Java at runtime</title><link>http://www.javacodegeeks.com/2012/02/patching-java-at-runtime.html</link> <comments>http://www.javacodegeeks.com/2012/02/patching-java-at-runtime.html#comments</comments> <pubDate>Thu, 16 Feb 2012 11:47:00 +0000</pubDate> <dc:creator>Christopher Meyer</dc:creator> <category><![CDATA[Core Java]]></category> <category><![CDATA[Instrumentation]]></category> <category><![CDATA[JVM]]></category><guid isPermaLink="false">http://www.javacodegeeks.com/2012/10/patching-java-at-runtime.html</guid> <description><![CDATA[This article will slightly highlight how to fix issues with third party libs that can&#8217;t be circumvented are difficult to exclude/bypass/replaced simply provide no bugfix In such cases solving the issue remains a challengig task. As a motivation for this scenario consider the attacks on &#8220;hash indexed&#8221; data structures, such as java.util.Hashtable and java.util.HashMap (for [...]]]></description> <wfw:commentRss>http://www.javacodegeeks.com/2012/02/patching-java-at-runtime.html/feed/</wfw:commentRss> <slash:comments>0</slash:comments> </item> </channel> </rss>
<!-- Performance optimized by W3 Total Cache. Learn more: http://www.w3-edge.com/wordpress-plugins/

Minified using disk: basic
Page Caching using disk: enhanced
Database Caching 1/10 queries in 0.061 seconds using apc
Object Caching 1146/1222 objects using apc
Content Delivery Network via jcg.javacodegeeks.netdna-cdn.com

Served from: www.javacodegeeks.com @ 2013-06-19 13:04:51 -->