Hacking Boston’s CharlieCard
December 14 2022Interesting discussion of vulnerabilities and exploits against Boston’s CharlieCard.
Read moreObligatory ChatGPT Post
December 13 2022Seems like absolutely everyone everywhere is playing with Chat GPT.
So I did, too….
Write an essay in the style of Bruce...
Read moreApple Is Finally Encrypting iCloud Backups
December 12 2022After way too many years, Apple is finally encrypting iCloud backups:
Based on a screenshot from Apple, these categories are covered when you flip on Advanced Data Protection: device...
Read more
Friday Squid Blogging: China Bans Taiwanese Squid Imports
December 10 2022Today I have some squid geopolitical news. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Read my...
Read moreHacking Trespass Law
December 10 2022This article talks about public land in the US that is completely surrounded by private land, which in some cases makes it inaccessible to the public. But there’s...
Read moreSecurity Vulnerabilities in Eufy Cameras
December 9 2022Eufy cameras claim to be local only, but upload data to the cloud. The company is basically lying to reporters, despite being shown evidence to the contrary....
Read moreLeaked Signing Keys Are Being Used to Sign Malware
December 8 2022A bunch of Android OEM signing keys have been leaked or stolen, and they are actively being used to sign malware.
Łukasz Siewierski, a member of Google’s Android Security...
Read more
The Decoupling Principle
December 7 2022This is a really interesting paper that discusses what the authors call the Decoupling Principle:
The idea is simple, yet previously not clearly articulated: to ensure privacy, information should...
Read more
CryWiper Data Wiper Targeting Russian Sites
December 6 2022Kaspersky is reporting on a data wiper masquerading as ransomware that is targeting local Russian government networks.
The Trojan corrupts any data that’s not vital for the functioning of...
Read more
Recent Comments