Arguing Against CALEA
April 8 2025At a Congressional hearing earlier this week, Matt Blaze made the point that CALEA, the 1994 law that forces telecoms to make phone calls wiretappable, is outdated...
Read moreDIRNSA Fired
April 7 2025In “Secrets and Lies” (2000), I wrote:
It is poor civic hygiene to install technologies that could someday facilitate a police state.
It’s something a bunch of us were saying...
Read moreFriday Squid Blogging: Two-Man Giant Squid
April 5 2025The Brooklyn indie art-punk group, Two-Man Giant Squid, just released a new album. As usual, you can also use this squid post to talk about the security stories in the...
Read moreTroy Hunt Gets Phished
April 4 2025In case you need proof that anyone, even someone who does cybersecurity for a living, can fall for a phishing attack, Troy Hunt has a long, iterative story on...
Read moreWeb 3.0 Requires Data Integrity
April 3 2025If you’ve ever taken a computer security class, you’ve probably learned about the three legs of computer security—confidentiality, integrity, and availability—known as the CIA triad. When we talk about a...
Read moreRational Astrologies and Security
April 2 2025John Kelsey and I wrote a short paper for the Rossfest Festschrift: “Rational Astrologies and Security“:
There is another non-security way that designers can spend their security budget:...
Read more
Cell Phone OPSEC for Border Crossings
April 1 2025I have heard stories of more aggressive interrogation of electronic devices at US border crossings. I know a lot about securing computers, but very little about securing phones.
Are there...
Read moreThe Signal Chat Leak and the NSA
March 31 2025US National Security Advisor Mike Waltz, who started the now-infamous group chat coordinating a US attack against the Yemen-based Houthis on March 15, is seemingly now suggesting that the...
Read moreFriday Squid Blogging: Squid Werewolf Hacking Group
March 29 2025In another rare squid/cybersecurity intersection, APT37 is also known as “Squid Werewolf.” As usual, you can also use this squid post to talk about the security stories in the news...
Read moreAIs as Trusted Third Parties
March 28 2025This is a truly fascinating paper: “Trusted Machine Learning Models Unlock Private Inference for Problems Currently Infeasible with Cryptography.” The basic idea is that AIs can act...
Read more
Recent Comments