The Curious Engineer

All blogs / Security

Benlog

benlog.com

technology & people

SecuritySociety / politics / economyCrypto / fintech

’10’15’20’25
Posts
369 from 12 Feb 2006 to 17 Nov 2024
Posting
now and then
Kind
personal blog
Feed
https://benlog.com/feed/

2024 4

  1. Who owns the graph?
  2. Affirmative sourcing of online media
  3. Tennis and Democracy
  4. The Parental Control Protocol

2023 1

  1. On experts and amateurs

2022 3

  1. The Flare Process: Incident Response in Medium-Sized Organizations
  2. Firefox should become the best freaking Fediverse app
  3. Don’t let federation make the experience suck

2018 5

  1. Voting Security by Example: Voatz
  2. We Don’t Deserve Dogs
  3. Looking forward to disagreeing
  4. Meltdown & Spectre for non-techies
  5. Crypto as in Crypto

2017 1

  1. Blockchain and Voting

2016 3

  1. Voting Security Cheatsheet [2016 Edition]
  2. What John McCain could say
  3. On Apple and the FBI

2015 5

  1. Letter to My Two Sons – November 13th, 2015
  2. the responsibility we have as software engineers
  3. ben@clever
  4. (your) information wants to be free – obamacare edition
  5. managing photos and videos

2014 7

  1. Power & Accountability
  2. where the system eats itself
  3. Obama lets NTSB exploit widespread tire vulnerabilities
  4. to Brendan and Mozilla
  5. when selfish acts become altruistic
  6. the French like their strikes like Americans like their guns
  7. there are 3 kinds of crypto

2013 14

  1. on cooking turkey and solving problems
  2. Letter to President Obama on Surveillance and Freedom
  3. security is hard, let’s improve the conversation
  4. benadida@square
  5. benadida@vacation
  6. no user is an island
  7. a hopeful note about PRISM
  8. what happens when we forget who should own the data: PRISM
  9. getting web sites to adopt a new identity system
  10. Identity Systems: white labeling is a no-go
  11. so what if torture works?
  12. Firefox is the unlocked browser
  13. the Web is the Platform, and the User is the User
  14. Aaron

2012 7

  1. The Onus is on Scientists – Shame on the AAAS
  2. connect on your terms
  3. in praise of hands-on expertise
  4. encryption is not gravy
  5. cookies don’t track people. people track people.
  6. it’s the randomness, stupid
  7. a simpler, webbier approach to Web Intents (or Activities)

2011 22

  1. encryption is (mostly) not magic
  2. an ode to lessig’s optimism, taking on gigantic challenges… and a quibble
  3. BrowserID and me
  4. my 9.11
  5. with freedom comes responsibility: open publishing
  6. and the laws of physics changed
  7. with great power…
  8. Wombat Voting: Open Audit Elections in Israel
  9. 2 months in at Mozilla
  10. Online Voting is Terrifying and Inevitable
  11. (your) information wants to be free
  12. grab the pitchforks!… again
  13. intelligently designing trust
  14. i changed my mind on nuclear power
  15. degrees of trust: software vs. data hosts
  16. benadida@mozilla
  17. Jumpstarting Health IT innovation
  18. everything I know about voting I learned from American Idol
  19. a personal update
  20. the difference between privacy and security
  21. Facebook, the Control Revolution, and the Failure of Applied Modern Cryptography
  22. an answer to John Gruber: Google dropping H.264 is good for everyone

2010 31

  1. privacy icons
  2. Crisis in the Java Community… could they have used a secret-ballot election?
  3. The Health IT report is very good; some opinionated suggestions
  4. Wikileaks — not ideal, but a force for good in the end
  5. airport privacy
  6. OK, let’s work to make SSL easier for everyone
  7. keep your hands off my session cookies
  8. Facebook can and should do more to proactively protect users
  9. faulty logic, even for good, is still faulty
  10. Fort Knox vs. the Barking Dog
  11. defending against your own stupidity
  12. an unwarranted bashing of Twitter’s oAuth
  13. Usenix Security, voting and health security
  14. Hello world!
  15. browser extensions = user freedom
  16. devices, payload data, and why Kim is (in part) right.
  17. Privacy Advocacy Theater
  18. if you’re outraged by accidental breaches, you’d better sit down
  19. the genius of Steve Jobs: he makes you want the lock-in
  20. distributed innovation
  21. What Nick Carr doesn’t get: hobbyists are the canary in the coal mine
  22. Myth: the app store will protect you and prevent user confusion
  23. “It’s a tradeoff” and other uni-dimensional thinking
  24. The Accidental Tinkerer, Unexpected Lock-in, and Fatherhood
  25. The Great Content Lockdown of 2010
  26. Protecting against web history sniffing attacks: an alternative
  27. What the Oscars teach us about voting
  28. For deniability, faking data even the owner can’t prove is fake
  29. Taxing Human Transactions – Part 1
  30. Buzz Kill
  31. I was wrong about the iPad

2009 70

  1. Sometimes it’s not counter-intuitive
  2. a prediction regarding the Apple “Tablet”
  3. Takoma Park 2009: the conclusion
  4. It’s a WRAP followup: maybe the goal was client-side certs?
  5. It’s a WRAP
  6. Facebook account hacked
  7. Takoma Park: verifying the shuffle and the unopened ballots
  8. The first good mainstream article on vaccines in a while
  9. Takoma Park: auditing the auditor
  10. Takoma Park: and those provisional ballots?
  11. Takoma Park: so can I see my confirmation code already?
  12. Takoma Park: Meeting 2
  13. Takoma Park Election: the 7 steps of auditing
  14. Source Code and Voting: what’s really on that machine?
  15. Takoma Park 2009: Verifying the Tally from the Confirmation Codes
  16. Apple fanboy delusions, the Palm Pre is looking mighty tasty
  17. Stefano thinks I’m a purist…
  18. ITdotHealth – a new forum for Health IT discussion and a workshop next week
  19. Takoma Park 2009: the voter experience
  20. One real issue behind the Mint.com sale to Intuit: who owns the data?
  21. A Partial Report from Social Network Security 2009 @ Stanford
  22. The evolution of OpenID: you’re not a URL after all
  23. Auditing the Takoma Park Election
  24. What about the less obvious errors?
  25. Real-world usage sometimes includes things you don’t like
  26. Schneier on self-enforcing protocols and voting
  27. Quick Thoughts from EVT Day #2
  28. EVT/WOTE 2009, Day 1, Afternoon
  29. EVT/WOTE 2009, Day 1, Morning
  30. HealthEngage leaking email addresses?
  31. Creative Commons and the Associated Press
  32. The erosion of our expectation of autonomy, and the Kindle Pledge
  33. Multi-Factor, maybe, but is it really harder to phish?
  34. Quis custodiet Hawk-Eye?
  35. Engaging Data going, going….
  36. Pot, Kettle, meet Zuckerberg
  37. Open Licensing in Health IT
  38. Loosely Coupled Health IT
  39. Distributed Data Stores: the birth of a new layer in the stack
  40. Empowering the Patient vs. Enabling an Artificial Monopoly
  41. Shieber on Open Access
  42. More on Google Wave Trust Model
  43. Google Wave – thoughts
  44. Engaging Data Forum @ MIT in October
  45. Creative Commons Tech Summit, June 26th
  46. Back from Israel – talks and press
  47. Incremental Benefit and Bursts of Innovation
  48. Owning Genes
  49. Google announces support for RDFa
  50. Voting Workshop in Israel
  51. Swine Flu Source Code
  52. We do (should) not torture
  53. Personal health record: it’s about the feedback loop
  54. Helios @ CodeCon
  55. Warrantless Wiretapping is not OK, even when Obama does it
  56. Does CVS provide a CSV?
  57. What Verifying an Election Means
  58. UCL Election Round 2: Speak Now or Forever Hold your Peace
  59. Disturbing Apple Trends
  60. Open-Audit Voting means a Single Vote Counts
  61. The Beautiful Magic of Cryptography
  62. Luis von Ahn: make academic reviews public
  63. Enough with Secrecy in Research
  64. Hotel Facebook and Tethered Data
  65. Facebook: “we’re keeping your data for your friends’ sake!”
  66. New Slides Posted
  67. More open-audit voting deployment
  68. The Bar of Public Understanding
  69. Pinker on Personal Genomics
  70. On Bad-Faith Mocking of Academic Research

2008 64

  1. Helios x 25K @ UCL
  2. Dan Wallach on Internet Voting
  3. Trusting Trust and JavaScript
  4. “You can get the ballots and count them yourself”
  5. CC Tech Summit – December 2008
  6. Dan Wallach on teaching open-audit voting
  7. OpenID and Creative Commons
  8. The Crisis on Wall Street
  9. Privacy Advocacy Stunts
  10. Interlab 2008
  11. European Projections of Prejudice
  12. Kathie Lee wants to verify her ballot!
  13. Some More Election-Day Anecdotes
  14. Pride and Shame
  15. My Day At the Polls
  16. The Real Issue with Touch-Screen Voting Machines
  17. Genomic Records & Voting
  18. I Voted
  19. Open-Audit Elections featured in Documentary
  20. Policy from Evidence
  21. Salon on Voting
  22. The Economist Covers Voting
  23. Putting the “End” in EndNote.
  24. Stop, Drop, and Register
  25. Children vs. Anonymity
  26. Helios Voting being used for real elections
  27. You Wanted Details?
  28. More of This, Please.
  29. Resig on Chrome: it’s the Process Isolation, Stupid!
  30. I Agree with Pat Buchanan
  31. CRYPTO Rump Session
  32. Off to CRYPTO
  33. Where we’re going, we don’t need SSL
  34. Helios Voting Blog launched
  35. Helios Voting System — Launched!
  36. Adam & Collin strike again
  37. Benaloh strikes again
  38. Get Ready to be Depressed about Elections
  39. On Vote-By-Mail and Untimely Death
  40. Blame the Device or the Carrier?
  41. Bridging the Clickable and Data Webs
  42. Understanding the Freakonomics of the Secret Ballot
  43. Don’t Hash Secrets
  44. Creative Commons Tech Summit
  45. The Internet is Funny
  46. Thank you, Hillary Clinton
  47. What (Who?) Hillary is fighting for
  48. Privacy violations can be so useful
  49. Weezer Culture Mashup
  50. Why I’m switching to Yahoo Search
  51. Translation from Rove-speak to Plain English
  52. WWW2008
  53. Lessig on Obama
  54. An Inconvenient Truth about the Left
  55. Change Congress
  56. Trusting the Machine
  57. A Witness to History
  58. Bad and Good News on the “just give me your password” front
  59. Hope
  60. My Day as an Election Clerk in Santa Clara County
  61. The Carrot, the Stick, and Obama.
  62. Make it Spicy
  63. McLovin and Ed Helms Vote
  64. You know it’s election season when…

2007 64

  1. Voting @ Google
  2. The Turning Point Zinger?
  3. Privacy vs. Omnipotence, Mashups and your browser.
  4. Old Man Sarkozy
  5. 10 Years
  6. Privacy Quote of the Day
  7. Web Cookies Explained
  8. BeamAuth at Computer and Communications Security 2007
  9. Open(Social) Will Win ; and now Privacy?
  10. Bullet-Proofing the Front Door and Leaving the Back Door Open
  11. The State of Badware
  12. Of Park Benches, Cardboard Boxes, Armored Cars and Voting
  13. Security Theater and Transparency
  14. The Password Anti-Pattern and the Login Redirection Anti-Pattern
  15. Support Creative Commons
  16. Health Records and Me
  17. Protecting Data by Being More Open
  18. Lies, Damn Lies, and Statistics
  19. DRM is about control more than anti-piracy
  20. The Insanity of Phone Authentication “Security Processes”
  21. Windows Genuine Advantage: Guilty until Proven Innocent
  22. Crime and Useful Punishment
  23. Are you Kidding Me?
  24. Electronic Voting Technology, 2007
  25. Paths of Causality
  26. Way to Go, Secretary Bowen.
  27. The Web is the Platform, Part 2
  28. The Three Laws of Computer Ethics
  29. The Apple Effect
  30. What Happens Before You Mail It?
  31. Making Sure You’re Human
  32. Facebook Platform: bad login practices, OpenID doesn’t work
  33. Advertising = Democracy?
  34. Know your Supreme Court Justices
  35. Get Over It, The Web is the Platform
  36. Voting: Things are Not Always What They Seem
  37. Web 2.0 Security & Privacy Workshop
  38. Voting à la Française
  39. It’s True “for Me”
  40. Why Boston ran out of Ballots in the Last Election
  41. Workshop on Privacy in Electronic Society (WPES)
  42. Privacy Skills and DRM for healthcare
  43. Google, the Desktop, and Privacy
  44. A Talk at the Boston Latin School
  45. Time to Rethink the Cross-Domain Javascript situation
  46. The Coercion Issues of Vote By Mail
  47. Google & Privacy
  48. Responding to Ronald
  49. Microsoft’s Competitive Advantage: Privacy
  50. I Stand with Avi (regarding American Idol)
  51. On Fully Informed Decisions and the Role of Academics
  52. JSON Safety: It’s about the unwitting servers
  53. Privacy and Social Networks
  54. On Voting, Banking, and Bad Analogies
  55. My Talk at TCC 2007
  56. Advertising Controlled Substances
  57. Property Rehab
  58. BeamAuth: Two-Factor Web Authentication with a Bookmark.
  59. Is that You speaking, or is it just an evil web site?
  60. The End of Bananas
  61. Election Season is Over… It’s time to design the next Voting System
  62. Setting Expectations
  63. Scheduling Poll Workers
  64. 2007: Controlled End-User Web APIs for Private-Data Mashups

2006 68

  1. Felten on Voting
  2. Because we cannot let this become routine
  3. I spoke too quickly?
  4. Presentations Galore!
  5. A Real Shame
  6. UConn voting report: bad timing, good content
  7. Bruce Almighty
  8. Again, the Secret Ballot
  9. My Day as an Election Warden in Boston
  10. Scratch & Vote in the Press again!
  11. The Punchscan FAQ Revisited
  12. Go Vote
  13. Ballot Secrecy!
  14. At the MIT/Caltech Voter Registration Conference
  15. Disbelief
  16. Slides from My Voting Review Talk
  17. Fixing Bugs and Breaking Certification
  18. A Talk on the History of Cryptographic Voting
  19. The Secret Ballot is not Optional
  20. Princeton, Diebold, and the elephant in the room.
  21. Yeeeehah, the Thesis, she is done.
  22. Peace in the Middle East: 200 soldiers outta do it
  23. Scratch & Vote in the Press
  24. DRM: failure by presumption of guilt
  25. Web 2.0 and Security
  26. The Daily Show strikes again
  27. Stunned
  28. Sports Commentators vs. Journalists
  29. New Things
  30. The Internet is not a Truck
  31. You can’t photocopy money
  32. Viva la Defense
  33. So, I lied….
  34. My Letter to the Boston Globe
  35. Return of the Cross Domain AJAX
  36. Shame
  37. Perspective and Pettiness
  38. Talks Galore!
  39. RDFa Web Site Launched
  40. Interoperable Metadata @ WWW20006
  41. W3C AC Lightning Talk on Interoperable Metadata
  42. How much Kool-Aid do you have to drink?
  43. Freakonomics could use some CC
  44. I agree with the Religious Right
  45. Let’s Not Kill the Next Web
  46. People Ought to Learn English
  47. Secure, scalable storage of personal genomic data
  48. WOTE 2006
  49. My Hopeless, Repetitive Talk
  50. Smoking vs. Genetically-Modified Crops
  51. VVPAT is a placebo
  52. Sadness and Anger
  53. Patents are so French
  54. The Clooney Attack
  55. On French Employment Law and Incentives
  56. Cryptography and American Idol
  57. My First Podcast – on Digital Identity
  58. DRM stands for Incompatibility
  59. The French Courts on Law vs. Technology
  60. A National Vote?
  61. Free Markets and Your Health
  62. Freedom of Expression
  63. It’s hard to help people
  64. Cross Domain AJAX 2
  65. Cross Domain AJAX
  66. A Tree Falls in the Woods, Lawyer Style
  67. Meeting of the Bens
  68. New Blog Software and URL