AI Vulnerability Finding
April 11 2025Microsoft is reporting that its AI systems are able to find new vulnerabilities in source code:
Microsoft discovered eleven vulnerabilities in GRUB2, including integer and buffer overflows in...
Read more
Reimagining Democracy
April 11 2025Imagine that all of us—all of society—have landed on some alien planet and need to form a government: clean slate. We do not have any legacy systems from the...
Read moreHow to Leak to a Journalist
April 9 2025Neiman Lab has some good advice on how to leak a story to a journalist.
Read moreArguing Against CALEA
April 8 2025At a Congressional hearing earlier this week, Matt Blaze made the point that CALEA, the 1994 law that forces telecoms to make phone calls wiretappable, is outdated...
Read moreDIRNSA Fired
April 7 2025In “Secrets and Lies” (2000), I wrote:
It is poor civic hygiene to install technologies that could someday facilitate a police state.
It’s something a bunch of us were saying...
Read moreFriday Squid Blogging: Two-Man Giant Squid
April 5 2025The Brooklyn indie art-punk group, Two-Man Giant Squid, just released a new album. As usual, you can also use this squid post to talk about the security stories in the...
Read moreTroy Hunt Gets Phished
April 4 2025In case you need proof that anyone, even someone who does cybersecurity for a living, can fall for a phishing attack, Troy Hunt has a long, iterative story on...
Read moreWeb 3.0 Requires Data Integrity
April 3 2025If you’ve ever taken a computer security class, you’ve probably learned about the three legs of computer security—confidentiality, integrity, and availability—known as the CIA triad. When we talk about a...
Read moreRational Astrologies and Security
April 2 2025John Kelsey and I wrote a short paper for the Rossfest Festschrift: “Rational Astrologies and Security“:
There is another non-security way that designers can spend their security budget:...
Read more
Cell Phone OPSEC for Border Crossings
April 1 2025I have heard stories of more aggressive interrogation of electronic devices at US border crossings. I know a lot about securing computers, but very little about securing phones.
Are there...
Read more
Recent Comments