Matt Blaze on OTP Radio Stations
September 18 2020Matt Blaze discusses (also here) an interesting mystery about a Cuban one-time-pad radio station, and a random number generator error that probably helped arrest a pair of Russian spies...
Read moreNew Bluetooth Vulnerability
September 17 2020There’s a new unpatched Bluetooth vulnerability:
The issue is with a protocol called Cross-Transport Key Derivation (or CTKD, for short). When, say, an iPhone is getting ready to pair...
Read more
How the FIN7 Cybercrime Gang Operates
September 16 2020The Grugq has written an excellent essay on how the Russian cybercriminal gang FIN7 operates. An excerpt:
The secret of FIN7’s success is their operational art of cyber crime....
Read more
Privacy Analysis of Ambient Light Sensors
September 15 2020Interesting privacy analysis of the Ambient Light Sensor API. And a blog post. Especially note the “Lessons Learned” section.
Read moreInteresting Attack on the EMV Smartcard Payment Standard
September 14 2020It’s complicated, but it’s basically a man-in-the-middle attack that involves two smartphones. The first phone reads the actual smartcard, and then forwards the required information to a second...
Read moreFriday Squid Blogging: Calamari vs. Squid
September 11 2020St. Louis Magazine answers the important question: “Is there a difference between calamari and squid?” Short answer: no. As usual, you can also use this squid post to talk about...
Read moreRanking National Cyber Power
September 11 2020Harvard Kennedy School’s Belfer Center published the “National Cyber Power Index 2020: Methodology and Analytical Considerations.” The rankings: 1. US, 2. China, 3. UK, 4. Russia, 5. Netherlands,...
Read moreThe Third Edition of Ross Anderson’s Security Engineering
September 10 2020Ross Anderson’s fantastic textbook, Security Engineering, will have a third edition. The book won’t be published until December, but Ross has been making drafts of the chapters available online...
Read moreUS Space Cybersecurity Directive
September 9 2020The Trump Administration just published “Space Policy Directive – 5“: “Cybersecurity Principles for Space Systems.” It’s pretty general:
Principles. (a) Space systems and their supporting infrastructure, including software, should...
Read more
Recent Comments