XZ Utils Backdoor
April 3 2024The cybersecurity world got really lucky last week. An intentionally placed backdoor in XZ Utils, an open-source compression utility, was pretty much accidentally discovered by a Microsoft engineer—weeks...
Read moreDeclassified NSA Newsletters
April 3 2024Through a 2010 FOIA request (yes, it took that long), we have copies of the NSA’s KRYPTOS Society Newsletter, “Tales of the Krypt,” from 1994 to 2003.
There are...
Read moreMagic Security Dust
April 1 2024Adam Shostack is selling magic security dust. It’s about time someone is commercializing this essential technology.
Read moreRoss Anderson
April 1 2024Ross Anderson unexpectedly passed away Thursday night in, I believe, his home in Cambridge.
I can’t remember when I first met Ross. Of course it was before 2008,...
Read moreFriday Squid Blogging: The Geopolitics of Eating Squid
March 30 2024New York Times op-ed on the Chinese dominance of the squid industry:
China’s domination in seafood has raised deep concerns among American fishermen, policymakers and human rights activists. They...
Read more
You might think that libraries are kind of boring, but this self-analysis of a 2023 ransomware and extortion attack against the British Library is anything but.
Read moreHardware Vulnerability in Apple’s M-Series Chips
March 28 2024It’s yet another hardware side-channel attack:
The threat resides in the chips’ data memory-dependent prefetcher, a hardware optimization that predicts the memory addresses of data that running code is...
Read more
It’s pretty devastating:
Today, Ian Carroll, Lennert Wouters, and a team of other security researchers are revealing a hotel keycard hacking technique they call Unsaflok. The technique is...
Read more
On Secure Voting Systems
March 26 2024Andrew Appel shepherded a public comment—signed by twenty election cybersecurity experts, including myself—on best practices for ballot marking devices and vote tabulation. It was written for the Pennsylvania...
Read moreAI and Trust
March 26 2024Watch the Video on YouTube.com A 15-minute talk by Bruce Schneier.
Read more
Recent Comments