A Digital Red Cross
November 14 2022The International Committee of the Red Cross wants some digital equivalent to the iconic red cross, to alert would-be hackers that they are accessing a medical network.
The emblem...
Read more
The Conviction of Uber’s Chief Security Officer
November 7 2022I have been meaning to write about Joe Sullivan, Uber’s former Chief Security Officer. He was convicted of crimes related to covering up a cyberattack against Uber. It’s a...
Read moreOctober Is Cybersecurity Awareness Month
October 5 2022For the past nineteen years, October has been Cybersecurity Awareness Month here in the US, and that event that has always been part advice and part ridicule. I tend...
Read moreNew Report on IoT Security
September 27 2022The Atlantic Council has published a report on securing the Internet of Things: “Security in the Billions: Toward a Multinational Strategy to Better Secure the IoT Ecosystem.” The...
Read moreSecurity and Cheap Complexity
August 26 2022I’ve been saying that complexity is the worst enemy of security for a long time now. (Here’s me in 1999.) And it’s been true for a long time.
In...
Read moreMudge Files Whistleblower Complaint against Twitter
August 24 2022Peiter Zatko, aka Mudge, has filed a whistleblower complaint with the SEC against Twitter, claiming that they violated an eleven-year-old FTC settlement by having lousy security. And he should...
Read moreUSB “Rubber Ducky” Attack Tool
August 18 2022The USB Rubber Ducky is getting better and better.
Already, previous versions of the Rubber Ducky could carry out attacks like creating a fake Windows pop-up box to...
Read more
Remotely Controlling Touchscreens
August 16 2022This is more of a demonstration than a real-world vulnerability, but researchers can use electromagnetic interference to remotely control touchscreens.
From a news article:
It’s important to note that...
Read more
Traffic lights make a handy global metaphor for denoting the sensitivity of cybersecurity threat data - three colours that everyone knows.
Read moreSecuring Open-Source Software
July 27 2022Good essay arguing that open-source software is a critical national-security asset and needs to be treated as such:
Open source is at least as important to the economy, public...
Read more
Recent Comments