2011–2015
1,010 posts
2015 46
December 2015
November 2015
October 2015
September 2015
August 2015
- 6 Things Washington Doesn’t Get About Hackers
- Larger than Life (Stawka większa niż życie)
- Real History of the Word “Hacker”
- A Common Security Fallacy? Too Big to Fail (KISS)
- Roll Your Own Kali 2.0 ISO
- Saving the Bobcat: Lessons in Segmentation and Surveillance
- Howto: Delete old Docker containers
July 2015
- This Day in History: Antoine de Saint-Exupéry Disappears
- Convert Kali Linux VMDK to KVM
- Howto: Install GPG on Jolla Sailfish OS
- We Need a Digital Right to Repair
- Jeep WordPress Edition
- Jeep Software Patching: You and UConnect
- The <69 words you're no longer allowed to use in Infosec
- Airbnb Privacy Policy Changes
- The Little Can That Could: History of the Yellow Jerrycan
- The story behind the yellow Jerry can
- The 1936 story behind the Jerry can
June 2015
April 2015
March 2015
February 2015
- SuperFish Exploit: Kali on Raspberry Pi 2
- Cyberwar revisionism: 2008 BTC pipeline explosion
- Eventually Navies Take Over
- Samsung TV: Would You Trust It?
- The DPRK Humanitarian Crisis
- A Remote Threat: The White House Drone Incident
- Beware the Sony Errorists
January 2015
- Gov Fumbles Over-Inflated Sony Hack Attribution Ball
- Russian Cables to North Korea: Lessons From the Sony Cyberattack
- Was Stuxnet the “First”?
- Movie Review: JSA (Joint Security Area)
- Crowdstrike or Clownstrike? A Political Science TL;DR for InfoSec
- Automobile Control System “Eliminates” the Driver
- The Beginning Wasn’t Full-Disclosure
- US President Calls for Federal 30-day Breach Notice
- The (Secret) History of the Banana Split
2014 19
December 2014
- Linguistics as a Tool for Cyber Attack Attribution
- Big Data Security in 1918: How Far Off Is That German Gun?
September 2014
July 2014
June 2014
- 2014 Things Expo: New Security Models for the Internet of Things
- Cyber-Colonialism and Beliefs About Global Development
May 2014
April 2014
- 2014 Österreich Stammtisch: The UnCERTainty of Attribution
- American Tipping is Rooted in Slavery
- 2014 SOURCE Boston: Delivering Security at Big Data Scale
- Yet “Unother” heartbleed Perspective (YUhP)
March 2014
- Troubled Audit Waters: Trustwave and the Target Breach
- #Hotmailgate: Where Don’t You Want to Go Today?
February 2014
- Mining and Visualizing YouTube Metadata for Threat Models
- What Surveillance Taught Me About the NSA and Tear Gas: It’s Time to Rethink our Twitters about Nightmares
- Ethiopian Troops in Somalia Join AMISOM
- On Kristallnacht: Tom Perkins Edition
January 2014
2013 34
December 2013
November 2013
October 2013
- How Google Will Destroy Stoplights
- Windows NEIN: Behind the Scenes
- NSA Silver Lining: Interesting Startups
September 2013
August 2013
- AC34: ETNZ Bows Down…and Survives
- 3 Realities of Big Data Security
- Guide to VMworld 2013: Trust
- AC34 Team Oracle Caught Cheating…Again
- #AC34Fatigue “Look at My Penis Go”
- Update: Putting and End to the End of Active Defense
- Putting and End to the End of Active Defense
July 2013
- Red Means Go, Green Means Slow
- The anti-virus age AIN’T over
- #HeavyD and the Evil Hostess Principle
- Diesel = Winning
- American Fear of a Non-Motorized Planet
- New GM Diesel Sportscar Beats Camaro Z/28
- 2013 BSidesLV: Data Breach Panel
- Repeal the Internet
June 2013
May 2013
- Active Defense/Hack Back and “Complete Ignorance”
- Active Defense: Attribution is just not that important
- Legal Issues of Cloud Forensics
February 2013
January 2013
2012 282
December 2012
- Top Reasons to Move to Windows 8
- This Day in History: 1900 Carrie Nation Vandalizes Wichita Saloon
- What Kurzweil Brings to Google
- National Eggnog Day
- Top Diesel Myths and Why Diesel Hybrids Make Perfect Sense
- ‘Active Defense’ will Improve Cyber Security
- 2012 CONSEGI Presentation: CyberFall
- Evolution VEVENT Errors with Google Read-Only Calendar
- Apple’s map “errors could prove deadly”
- MySQL 0-Days: CVE-2012-5611 to 5615
November 2012
- Algorithms, DVD CSS and Haiku
- Why South Carolina’s Governor wants encryption NOW
- Aptitude kept back on Ubuntu 12.04
- Tweets from Gaza
- Karma and the Winter’s Edge
- Brene Brown: The power of vulnerability
October 2012
- Just Say No to Cyber
- This Day in History: 1962 Cuban Missle Crisis
- Yellow Rain and the Hmong Tragedy
- The Fourth Bullet – When Defensive Acts Become Indefensible
- And Suddenly I Miss Everybody
- Bromium, Beavers, Bruce and Liars & Outliers
- This Day in History: 1863 Quantrill Ambushes, Kills Badger Band
- “Nobody Expects Volvo to Sell Many”
- Partying With Security Instead of Compliance
September 2012
- Active Defense: Moving the Discussion Forward
- Bidder 70
- PCI Draft ATM Security Guidelines Information Supplement
- The Most Vulnerable Man in the World
- Data Proves Local Support for Bike Lane
- Active Defense: “We are the Government; We are here to help.†Well, not so much
- Ithaka
- This Day in History: 1931 Mukden Incident
- Cannon Accidentally Fires Real Ammo, Damages Bill of Rights
- Pu-erh Tea – the New Black Coffee
- infosec insights on the benghazi attack
- GoDaddy is Not Dead
- Take Back Halloween Costume: Lizzie Borden
- Guerrilla Grafters Lose Their Fruit
- Saving Somalia’s National Archives
- When all the iPhones strike thirteen
- This Day in History 1942: Gestapo Arrest the Harnacks
- What Smokers Really Smoke
- Drink Rate Control Through Visual Feedback
August 2012
- Don’t Move by Phantogram
- Wind Predictions for AC45 Races
- Stompy: the Future of Rescue?
- Paul Ryan and the Great Irish Potato Famine
- AC45 World Series Comes to SF
- Another Mispresentation of new DoE Cybersecurity Model
- This Day in History: 1863 Quantrill Raid on Lawrence
- Android is Winning (Still)
- IBM Opens African “Smart City” Research Center
- Human Predictability Paper Wins Nokia Mobile Data Challenge
- Attack Source Location in Large Networks
- Do US Power Companies Need a CISO?
- Simple Post-Mortem
- ATM Fingerprint Scans
- Hitler Wine in Italy
- The Imposter
- Surveillance Mashup: Place de Dublin
- Kim Dotcom Raid Video Released
- HD Voice, Authentication and Inland Revenue
- Barracuda Investigation of Romney’s Twitter Followers
- New Diesel Taxi for London, NYC, and Tokyo
- Chinese Security Mysteries and Social Networking
- Dangers in Predicting the Future With Data
- Performics Market Data and Analysis
- US Sailing Report on Farallones Tragedy
- AT&T Announces End of 2G
July 2012
- Video: Big Data’s Fourth V
- Shanghai Roadway Breach and Identity Protection in China
- Death Threat Fraud SMS in Australia
- Bike-cams Help Catch Hit-and-Run Drivers
- PFGBest and Audit Red Flags
- 2012 BSidesLV: Big Data’s Fourth V
- USCG Arctic Shield Operation
- Chinatown Sues over Shark Fin Ban
- Egress Filters for Heat in Homes
- Xorg downgrades Macbook users
- Why Allies Spy on Each Other
- The Finnish Kalevala Runo
- Scofflaw Cycling and Multi-Tenancy
- Symantec “Proactive Threat Protection” BSOD
- This day in history: 1942 Val d’Hiv – French Police Raid
- A-Class Catamaran Video: 2012 German Championship
- Snow on the Mountain in Kansas: Konza Prairie
- Screen Freeze on Ubuntu 12.04 LTS
- Robots Learn Cockroach Escape Tricks
- Berkeley Cancels Order for Armored Car
- Visa Update to Mobile Payment Best Practices
- Hacking NASCAR: If You Ain’t Cheatin’…
- Aligning NTFS to SSD Geometry
- Victim Exposure by Anti-Malware Research
- Future of Camouflage…is the Past
- Virus Causes Firework Explosion
- The High Cost of Park Vandals
- Vaping Harmful to Health
- Sophos Warns: Don’t AutoBlame China
- This Day in History: General Lee Defeated at Gettysburg
- Views of Greenery Make You Smarter, Healthier
- Why Americans Want Iran to Get the Bomb
- Why Squirrels Take Credit for Evolution
- Berkeley Police Armor Up
- Islamic Fundamentalist Rebels Destroy Timbuktu
June 2012
- X.org evdev segfault
- Fighting Big (Data) Brother
- Ok, enough with the MD5 already
- CVE-2012-2118: X.org input device format string
- Terrorist Use of Fire as a Weapon
- Good Security Questions
- Will Engineers Save the Network?
- Eat More Possum
- Bicycle Power
- CVE-2012-3586: Basho Riak API, Security Alert
- Why do Microsoft Researchers Say They are from Microsoft?
- Why do Nigerian Scammers Say They are from Nigeria?
- U.S. Navy Supercomputers Predict Weather Threats
- Bromium and the Bad Guys
- Active Defense in Nature: Lions Forced into “Landscapes of Fear”
- How Intelligence Makes You Vulnerable
- USDA Set to Approve Agent Orange Corn (Ingredient 2,4-D)
- An Uncomfortable Truth About Jews in Poland
- This Day in History: Falklands War and ITIL
- 2012 Defence IQ Blogging Award Nomination: Cyber (Security, Warfare, Strategy)
- VMware vShield Manager 5.0.1 – Syslog Configuration
- This Day in History: Escape From Alcatraz
- Louis Mhlanga – Shungu Iwe
- Worried Blues – Babe Stovall
- Hack Back is Here
- A-Class Catamaran Video: 2011 German Championships
- D-Day Message by General Eisenhower
- VMware vSphere 5 hardening guidelines announced for vCM
- vShield Architecture for vCloud Director
- IDF Defines Cyber Warfare
- 2012 Delta Ditch Run – Nacra F20 Carbon Takes Line-Honors
- Vernon Fraud in Audit Report
- VMware vSphere 5.0 Security Hardening Guide Released
May 2012
- When Is Electronic Espionage an ‘Act of War?”
- NSA announces new Cyber Operations program
- iPad Security and U
- Flame On
- Automated SSL Check for vCenter and Host
- Ice-Cream Lid Lock from Ben & Jerry’s
- African Robotics Network
- Social Engineering for Good Art
- How Tough is Your Phone?
- Risk Management Research: Body over Mind?
- Hawaii Disappearing: USGS Beach Study of Availability
- PCI DSS Requirement 10.7 Changelog
- Risks of High SPF Sunscreen
- This day in history: 1862 Robert Smalls Pilots the Planter to Freedom
- Last Call at the Oasis
- AC72 wing design
- $200M Sea Shadow Sent to the Chopping Block
- VMware Workstation 8.0.3 and the troubles with Ubuntu 12.04
- The Power of Cracking Passwords
- Police Solve Stolen Lamborghini and Related Cases
- VMware Security Update: Accelerated Release of Patches
- 500pix Terms of Service
- Survey: 70% Still See Security Barrier to Cloud
- PCI DSS v2.0 Change in Requirements 6.2 and 6.5.6
April 2012
- At the Edge of the Abyss
- Ubuntu 12.04 LTS released
- Man Without a Cell Phone
- Bitter Seeds
- German EMV and 45% fraud decline
- VMware Security Note: ESX Source Posted
- Bait Car – Surveillance Setup Tricks
- Low Speed Chase Memorial
- Wood Helmets
- Sleep and the 25% breached
- Wuti by Li Shangyin
- US Gov Drops Oracle
- Co-tenancy risk for Polar Bears
- vSphere 5.0 Hardening Guide
- Five Perish in Farallon Race
- Penguin Satellite Surveillance
- CVE-2012-1182: Samba root remote exploit
- RSA Conference 2012 — Message in a Bottle – Finding Hope in a Sea of Security Breach Data
- Disabling Stolen Phones
- Parking Space Corruption
- iOS struggles against Linux phones
- Cost of a Cellphone Tap
- Are they singing or speaking, or both?
- Attorneys and Law Firms Beware and Implement Good Cyber Security Practices
- Multiple Syslog Configuration on ESXi 5
- Why are you driving a car?
March 2012
- Chinese Crackdown, U.S. Outgunned
- Big Data Integrity
- SF Bike Theft Workshop
- Rain = 600% increase in So. California road accidents
- Language Center for Newcomers
- PCI DSS 2.0 VMware Compliance Checker
- Segmentation, Privacy and Dog Sniffing
- Find the Backdoor
- Harvard Study: Bacon Kills
- Why Microsoft Never Made Bathtubs
- TechWomen and Security
- How Bicycles Liberated Women
- vCloud Director Audit script
- Teen Blocks Sim-Hack: Wins Award
- Ocean Punishes Crews in Clipper Round the World Race
- Zombie Killer Bike
- Watson: What IBM Won’t Tell You
- Penguin fights Sea Lion
- Live Global Ship Positioning
- Chrome tarnished by Glazunov again
- Faith in the GE Garage
- Breaking the Law with Corn Syrup: 1910 Edition
- Kandel on Memory and Identity
- “Unfollow” Nokia N9 Ad with Fan Bingbing
- Collusion Add-on for Firefox
- Big Data Security, Big Challenges: Start Here
- The Trackback and Arrest of Sabu
- Interview of Bruce Schneier: RSAC 2012
February 2012
- iOS 5 Trusted Root Certificates
- Defeating cold boot attacks
- A flyingpenguin Guide to RSA 2012
- We Won the TSA Slogan Competition
- vCloud Health Assessment with VCM
- EFF: Historical Facts are not Property
- Using APIs to identify VMs
- Identification of Oakland Riot Police
- Metasploit 4.2 release: Brute force of vSphere API
- RSAC 2012: Interview with Bruce Schneier about his new book, Liars and Outliers
- OC Healthcare Breach Response Example
- SL33 Catamaran
- Nokia N9 Operator Logo Hack
- Disaster Recovery for VMware View and vCloud Director
- Changing VCVA SSL Certificates
- Congress: Cyber Security & the Private Sector. FBI Hacked
- The Right to a Mitigative Counterstrike
- History and Programming Languages
- Starry Night: Animated
- Monitoring Cloud Availability with Twitter
- “Only the one who dies, truly lives”
- PA-DSS Program Guide v2.0
- Breach Analysis: Grizzly Bear Edition
- VMware PEX 2012: Security and Compliance
- VMware and PCI QSAs
- FBI Cloud Compliance Challenges
- Changing SSL Certs with VMware vSphere 5
- Intelligence as it relates to safety…and political philosophy
- iPhone usbmuxd buffer overflow
- Fox News Exclusive: WikiLeaks
January 2012
- Courts and Lawyers: Gauging the Level of Technical Knowledge
- Hack Back Lecture @ the FBI and Fordham Univ. International Conference on Cyber Security (ICCS) 2012
- Gates’ Pledge to Fight Virus
- Forensics with VMware VDDK
- New EU Data Protection Rules Proposed
- Video Cameras in Boardrooms
- NIST SP800-144: Guidelines on Security and Privacy in Public Cloud Computing
- CVE-2011-3923: Apache Struts2
- Why the NYPD hates bicyclists
- VMware Cloud Prediction Talk
- Judge rules decryption can be forced
- vCenter Events and Alarms
- American Military Suicide Rates
- vShield Edge Setup without NAT
- NIST Draft Documents on Continuous Monitoring
- Vado a bordo, cazzo!
- Superpipe Deaths and Risk Tautology
- PCI Scope and Virtualization
- Podcast for RSAC 2012: Message in a Bottle
- Stop SOPA
- When Google Attacks
- Bush Pilot’s Private Reserve Whiskey
- Today in History: 1945 Warsaw Liberation
- Minemu: VM DTA
- SEC Social Media Risk Alert
- Peacock Groove: Deep Custom
- OpenSSL Fixes Six CVE
- Breaking Human Limits
- Technology and the Workplace: BYOD
- UCLA Breach of Encrypted Drive
- Rooting the Samsung Infuse: Change a File Permission
- Hacking Back Part II
- VMware vShield Automation with PowerShell
- Visa Security Report: List of Common Vulnerabilities
- China IE6 Usage Still Over 25%
- 7 Bad Habits of CISOs
2011 629
December 2011
- Protecting VMs, In the user’s brain
- I’m a Bear, etc.
- Vuoi Vuoi Me (Henrik Schwarz Remix)
- Ethiopia Anti-Terror Law: Journalists jailed for 11 years
- AWS Object Expiration
- Final ATSB Report on 2008 Qantas flight QF72
- BSI Study: Vblock Threats and Countermeasures
- The When and How of Static Code Analysis
- HEXAGON spy satellite video declassified
- Worlds in Collision
- TIME: Best Photographer on the Wires
- Open Greyhound letter to Alec Baldwin
- The Legality of Offensive Hacking
- Networking Food
- SCADA exploits released: Siemens SIMATIC
- Why Drones Crash
- Linotype: The Film
- U.S. Authorizes Cyberoffense Defense
- Diving Under Antarctic Ice
- Senate to cook up a new FISMA
- Why Bears Prefer Minivans
- Gers Pardoel – Ik Neem Je Mee
- PCI Scope Errors
- Flow: Chapter 78, Tao Te Ching
- Deep Thoughts on Convergence
- Crouching Pterodactyl, Mandiant Dragon
- BayThreat Images: A-Cat
- Flying the F/A-18A
- SF Health Inspectors Charged with Fraud
- Metasploit update and DNS fuzz challenge
- SF Police Shootout, Larkin and Bush
- Bloomberg Fear: All Has Been Lost to Chinese
- MythBuster’s Accident: The Breach Apology
- People’s Gas Breach not Infinite
- Another U.S. Spy Plane Crash
- 50km wireless link for Farallon Islands
- PuTTY fixes password leak
- Exploitability of MS11-083
- Funnel Triples Wind Turbine Output
- Chinese Attacks Raise Concerns
- How penguins know when to land
- Mini Diesel Coming to America?
- Spy Planes Veer into Iran, South Dakota
- Sudanese Freedom Rap and Guns of Brixton
- Commodore 64 Turns 30
- Computer virus slows hospital, diverts ambulances
- VXLAN Traffic Trombone
- Humor: Pentest Storytelling
- FedRAMP Launched with Memo to CIOs
- Children’s Cereals Fail Nutrition Test
- Podcast: Virtualization Practice on PCI and Mixed-Mode
- Naming names, BOF and the Chinese APT
- MythBuster’s Accident: Cannonball Gets Loose
- Quoted in Inc.
- VMware vCloud Connector 1.5 Certificate Installation
- Phone Porting to Bypass 2-Factor Authentication
- German Cloud Provider receives Trusted Cloud Certification
- US Navy orders fuel for Green Hornet
- Rwandan ATMs to Dispense Cash with PIN Only
- Emperor Penguin Endangered
November 2011
- Cloud Customization and Compliance
- RockYou.com Breach: $292K per user
- What’s the Matter with IT in Kansas: Brownback Edition
- Legal Threats to Security Research
- BayThreat 2011: Sharpening the Axe
- Facebook FAIL: ID mixup leads to lawsuit
- DB dump rescues lost dog
- Case Study: Virtualization and PCI Compliance
- Software bug haiku
- Kenya Enters War with Somalia
- This Day in History 1944: the 584th Squadron of the 394th Bomb Group
- Fuzz and the NeXT Computer
- Search, Social Engineering and the 4th Amendment
- EAST Report 3: ATM Cash Trapping
- My Life as a Turkey
- Jaguar XF Diesel in America: Road Test
- Data Loss as Art
- Android Phone Ads Banned
- Cloud Security: 云安全之åˆè§„性：访Flyingpenguin总è£
- VXLAN Primer
- US Security Experts Bemoan “Colander” Model
- Running Risks While Running
- Risks and Controls in Cloud Computing: Updated ISACA Schedule
- ESXistentialism and Remote Logs
- NIST Cloud Roadmap SP 500-293
- PCI DSS 2.0 open for review
October 2011
- Dell Launches Cloud
- US Federal CIO calls for Security and Innovation
- Nigeria Launches Driver Tracking System
- Textbook theft in Cameroon
- Finding the Security Spot for Virtualization
- HowTo: vCenter alarm for root login
- RSA China 2011: Cooking Security into the Cloud
- Why I Bought the Nokia N9
- Finland Goes on Cyber Offensive
- BART Wireless Ban Email Exposes “Not a Whole Lot of Thought”
- Diesel-Hybrids Start Selling
- New Sony Breach
- HIPAA Auditors Cause Breach
- Chinese Version of Cloud Forensics – RSA 2011
- Why Risk Predictions Fail
- Operation Swiper: Thieves Buy Apple to Sell, Launder Credit
- RSA Europe Podcast: Everything You Wanted to Know About Virtual Compliance
- Cloud Enclaves, Multitenancy and FISMA
- BART admits failure
- Hybrid Cloud Model Security
- VMworld Europe 2011: Penetration Testing the Cloud
- RSA Europe 2011: Virtual Compliance
- Steam Car for Sale
- Betfair’s Gamble on Disclosure
- How (not) to Fail an Audit
- Ex-Vormetric Execs Start High Cloud
- Breaches Down for Third Year
- FOX News Gets Stuffed on Wall Street
- USCG seizes squid boat after failed identity test
- Risk Lessons from the Startup Genome Project
September 2011
- Automated vShield services installation
- Are Security Surveys Too Cocky?
- African Social Networks Improve Quality of Life
- The Science of Oktoberfest Risk
- New Qualys Professional Travel Case
- Intuit Privacy Chief on Data Stewardship
- Documentation of the Red Terror
- Parental Computing
- 20 Years of Microsoft Research
- Water-bottles as light source
- Clean Water Using Banana Peels
- CBC Attack on TLS 1.0
- FreshBooks to customers: “probably don’t want to use us”
- L’envol
- PCI DSS drops ATM fraud 90% in Nigeria
- Encapsulation Risk and VXLAN
- CVE-2011-2894: Spring Serial Vulnerability
- LSE Report on Cycling Benefits
- The Green Silence by Brooks
- The Cloud Race
- Gamers crack AIDS puzzle
- Kwame Dawes on Breaking in to the Theater
- Today in History: The Battle of Antietam
- Do we know how to make software?
- Extending OVF for security
- TSA Creator Laments Creation
- Wide-area encrypted radio network seized in Mexico
- Police pay damages to al-Qaeda raid suspect
- Cloud Infrastructure Management Interface (CIMI) Model
- “Mixed Mode” acceptable in a vSphere Enviroment?
- VMworld 2011 LV Feedback: Thank you!
- Computer Generated Text Woos Venture Money
- Warrants Rejected for GPS Location Data
- Apple New Product Security
- Wiener against bare bottoms in SF
- California SB 24 to replace SB 1386
- If Hemingway wrote code…
- Another AC45 crash due to ‘limit’ test
- The DigiNotar effect
- Risks and Controls in Cloud Computing: 2011 SF ISACA
- Cloud VXLANs and segmentation
- Cicada
- Save the Library
- Free exploit automation: Pmcma released
- Restaurants That Stalk Online Commenters
- Cisco Sued for Aiding Chinese Authorities
- Hallo (featuring Tout Puissant Mukalo and Nelly Liyemge)
- Limbe
- Warning Labels for Coal Power Plants
- How HIPAA is Enforced
- The Interrupters
August 2011
- BP Shoots and Kills Polar Bear
- iRank App
- FedCloud at VMworld 2011
- Beware: Townsend Key Management HSM for SQL Server
- AWS Splits Up Cloud to Achieve Compliance
- Meal Worm Tacos
- A Black Box Life: the Danger of Mathematical Automation
- Shionogi vSphere Breach
- vCenter Orchestrator AMQP Plugin Released
- Terror/Hate Crimes Continue in Santa Cruz
- Lake Michigan Storm at U20 Championships
- Gonder (አስቴሠአወቀ – ጎንደáˆ)
- Visa brings EMV to US; PCI DSS Waived for Merchants
- IDLELO 5 Conference to be in Nigeria
- Security in the Cloud: Data Sovereignty, Open Source and Multi-Tenancy
- Cloud Security Different, Says Okta
- Microphone Fiend
- X9.125 Cloud Services Compliance Data
- IR 7756 and SCAP meetings scheduled
- DARPA RA-11-52
- Bike Lane Enforcement
- FISMA Cloud Focus Transcript
- Storm Video from the 2011 Mackinac Race
July 2011
- Makemeasammich Billboard
- National Cloud BBQ on a Train Nightmare
- Guerrilla Greywater: Living Off the Grid
- Pwning the 2004 Presidential Vote in Ohio
- Court Complaint Aims at LulzSec Insider
- CVE-2011-2696 libsndfile overflow
- Why Agile Sucks
- Heat
- BART Independent Police Auditor job posting
- The Failure of the Play Pump
- Most Vulnerable App for Android
- E.A.S.T. Fraud Update
- Truth v. Privacy: Colbert on Murdoch
- Incident Debt Visualization
- SB 914 or leave your cell phone at home
- Nietzsche at DefCon19
- Automated Shoulder Surfing iPad Passwords
- Microsoft Fights Porn Searches
- ATMs for the Illiterate
- The Peace of Wild Things
- Software Transaction Memory Risks
- Audio Triggers for Surveillance Cameras
- Edison of Rootkits
- The End of the Economist
- COBIT 5 Open for Review
- 10 Days of Rain Mistakes: McAfee Whitepaper
- 2011 BSidesLV: A Cloud Odyssey
June 2011
- NIST SP 800-63 Rev. 1
- Enterprise Key Management for Cloud
- Counterfeit Bills in Canada
- CloudFlare Ethics and LulzSec
- Cloud Providers Spooked by Shared Space
- Pakistani Women Launch Radio Station
- Who fights with monsters…
- Ponemon Breach Analysis Exposed
- Securosis to Cloud: Wakey Wakey
- LSE Blog on Africa: Al-Qaeda Defunct
- Buffer Overflow and Event Calculus
- Bitcoin Market Crash: Auditor Blamed for Breach
- Stuxnet: Anatomy of a Virus Sensational Video
- How Cloud Will Kill Everything Before It
- Penguin Flight Leads to Arrests in Prague
- Virtualization and the DHS 20 for FISMA
- NIST Cloud Security Impediment List
- Homicide and Cupcakes
- Interview with Johnny Clegg
- Siemens Security Advisory (SSA-625789)
- Who Should be Responsible for Software Security?
- Pentagon Officially Recognizes Energy as Security Issue
- The Last Mountain
- Pesticides in Produce: Shoppers Guide
- Poems of war, peace, women, power
- US Obesity Trends 1985-2009
- PCI DSS Virtualization Guidelines
- AC45 in SF Bay (Capsize)
- Sunscreen Hall of Shame
- Railroaded
- ATM Lie-detector in Russia
- The Schwartz is with RSA
- Surveillance of Drunks
- Facial Recognition on Facebook
- ATM + Pipe Organ = Art?
- EC2 Security Group Support
- Happy IPv6 Day!
- Static Checks for Dynamic Security Policies
- Making Penguins Fly
- VMware vShield Audit via REST API
- Then a cloud occurs…
- Thames River Bylaws and Signaling
- Making Hay for Dinner
- Google Fights (Chinese) Treats
- 2011 DECnet Remote Exploit
- ChooseMyPlate.gov
- Reuters Quotes Me on Michaels Breach
- LAFS Storage Illustration
- Dr. Strangelove: How I Learned to Stop Worrying and Love the BeEF
- Thoughts on iCloud
- I’m a Climate Scientist
- The Wave
- China Regulates Fictional Currencies
May 2011
- vSphere HA and DRS Audit Script
- CVE-2011-1910: BIND buffer DoS exploit
- JSON Security
- Why I Remain Anonymous
- Cigar Risks
- Breaches in Ireland: Data Protection Commissioner Report
- Motorcade Security Theatre
- hUkt On f6nlks
- The Eight Roles of DCID 6/3
- Phoenix Law Enforcement Arrest Moles
- “Quit Coal” Painted on Fisk Smokestack
- The Pissalyzer
- The Facebook Trap
- Denmark Bans Cereal Killer: Marmite
- Restitution for Hacks
- ATM Malware Author Sentenced: 27mos in Prison
- Hangover (BaBaBa)
- NIST Cloud Computing Standards Roadmap
- 3 Financial Firm Cloud Questions
- Cloud API Query for Firewall Rules
- Replacing Access Controls for Large Sets
- AC 45 Test Session
- NTSB Aircraft Accident Report
- Bicycle Speed Limit on Golden Gate Bridge
- US to Require Automotive Black Boxes
- L4.verified: A Formally Correct Operating System Kernel
- Skunkx DDoS Bot Nationality
- Louder Than a Bomb
- Hack the Lexus CT 200h
- Email Breaches Ruled as “Significant Harm”
- New Amazon Time Theory
- Is it time to abandon cloud?
- Achilles Heel of Spam Revealed
- The Most Interesting Developer in the World
- 2010 ADA Standards for Accessible Design (and Privacy)
- VMware vCenter Leaks: CVE-2011-0426 and CVE-2011-1788
- Tarantulas Emit Webs From Legs
- PCI DSS Cloud Service Provider Compliance
- SYN Flood Knocks Down Heroku
- ISO/IEC JTC1/SC 38 Study Group on Cloud Computing Draft Report
- Clifford Stoll: Computer Security Kind of Boring
- Malware Mutation and Descendancy
- Extended DNSSEC Validation
- Birther Malware
- Queensland Qops Arrest Security Reporter
- GFCI for Google Toast
- NIST SP 800-146 DRAFT Cloud Computing Synopsis and Recommendations
- Dropbox Encryption Faces FTC Complaint
- Eyes on the Fries: Surveillance of US School Lunches
- DEFCON 19 badge *not* electronic
- Black Boxes of Air France Flight 447: Le Figaro Exonerates Airbus
- Contents Unknown…or are they?
- US Banks Looted with Simple Fraud
- GOpenVPN Install on Ubuntu 10.04
- Qwick Codes and Card-less ATMs
- Web Pentest Practice List
- Facebook Security Leak Since 2007
- Crafty 20 State PIN Pad Attack
- Step Yo Game Up
- Compliance in the Cloud – Unfiltered and Unplugged
- Make Your Own Bogota Toolset
- Poa kichizi kama ndizi kwenye freezer
- vCloud Plays With Active Directory
- Keynes vs. Hayek in Verse
- Firewalls for Android: WhisperMonitor
- Under the Covers with CVE-2011-0654
- The Filter Bubble in Reverse
- Visa Releases Mobile Best Practices
- Osama bin Laden Killed
- America’s Cup Promo Video for SF
- Ma vie 2 fois
April 2011
- TechCrunch Argues Location Tracking Harmless
- NM Rep Falsifies Info in Fight Against Oil Regulation
- CA to Consider Ban on Copper-based Anti-fouling Paint
- Illinois Court Reinstates Suit Against Persistent Social Engineer
- Highest Risks to ATM Internal?
- Efficient XML Interchange (EXI) Standard
- The death of ATM skimming?
- US Finally Switching to Diesel
- ATM Skim Group Busted in Canada
- AMQP Sniffing
- Labor Identity, Controls and Exploitation
- Exploit Intelligence
- UK Surveillance of WWII German POWs Reveals Private Beliefs
- iPhone keeps a database of all your movements
- Pwn2Own Exploit Breaches Top-Secret US Lab
- Facebook Offers Two-factor Login
- Barracuda Breach Root Cause Marketing
- What Six Months of Your Life Looks Like to a Telecom
- Encapsulation Failures
- Surveillance is the new black
- PCI DSS Effective – According to Breach Reports
- USAID sends Elmo to Pakistan
- FlyNano Safety Concerns
- Hill Fort Theories Challenged
- Firefox 4 Forensics
- Mdwambe
- Active Shooter Study and Exam
- iPad “waived” through FISMA
- Lewis Thumbs Cyber Nose at Chinese
- It is raining now
- Skype Vulnerability on Android
- The Breach Bully Dilemma
- WordPress Hacked
- The Poison of Sugar
- The Art of Remembering Everything
- Barracuda Networks Breached via SQL Injection
- Bubble-sort with Hungarian (“Csángó”) folk dance
- The Arrest of Ai Weiwei
- Chebba
- GOP Wants Oil Industry to Manage Natural Resources
- New Armored Carrier Best Practices
- Germany Launches Cyber Defense Center
- Lock-in Fears Delay Cloud
- Stuxnet at TED2011
March 2011
- IID Blasts Rabobank for DDoS Response
- Italy Rushes Forward in Clean Energy Race
- Will the Real Black Swan Please Stand Up
- Efficiency of Police Cars – LA to Save $20mil
- Pilot License Fraud in India
- Poetry Projection Project
- Jounalists Try but Fail to Protect Libyan Woman
- Risks of (Wind) Power Overproduction
- FNB ATMs Allow Cell Phone Withdrawal
- GE Hacks Tax Law – Pays Nothing
- EPA Withholds Nuclear Data on CA
- Turmeric Detects Explosives
- Yosemite Offline Due to Power Failure
- Unique Codes of Sperm Whales
- Russian Billboard Hacked with Porn
- Rootkit Lessons from Early Polymorphism
- Cuckoo’s Egg Arms Race
- US Soldier Guilty Plea for Murders in Afghanistan
- Was Stuxnet an Inside Job?
- US Losing African Support Over Libya
- WP Candy WordCamp Contest
- SCADA Exploits Roam Free
- SERE Expert Blasts Bush Torture Program
- Telephone-based Payment Card Data PCI Guidelines
- US to Follow Chinese Common Cell Power Rule
- MHTML Exploit Evolution and Warning
- How the Dutch WiFi Hacker Escaped Conviction
- SSB Radios and Revolution
- Tuareg Rebel Music
- Engineering Safety for Cosmonauts
- US Electronic Warfare in Libya
- $3K electric Cloud car with 200 mile range
- The Risk of Radiation Dosage, Illustrated
- SF Plague of Auto Window Smashing
- RIP Knut
- A Brief History of the Bohemian
- Blowback Mountain? Idaho to Train Saudi Airforce
- UK Banker Resorts to Vigilantism
- Harsh Words for White House IP Czar
- The Underground Spam Economy
- How to Detect Fraud In-Person
- Confidentiality Versus Availability
- Recovery Funds Speed Nuclear Cleanup
- MS stops Renocide worm, spreading since 2008
- GE Mark 1 Reactor Safety Design and Fukushima
- Visualizing American Tax Inequality
- Using Music to Hack Cars
- Pwn2Own Winner Criticizes Event
- The Sparrow
- Lessons From the Great Wave
- Germany Shuts Down Almost 1/2 of its Nuclear Reactors
- “New” Amazon EC2 Networking
- TalkingPuffin Web Video
- Security and Aesthetics of “Floating Parking”
- World of Koch Offline
- FAA Bans Lavatory Oxygen Generators
- Do Portable Electronics Cause Airplane Interference?
- Google Person Finder Easily Abused
- Blogger Admin Privilege Exploit
- Get a Free Hotel Room — Key Management Failure
- Bicycle Sales Climb After Disasters
- BP Spill Cleanup Causes Toxic Catastrophe
- US Rep King says it can’t be terrorism if it doesn’t happen in the US
- Majority of US Children Unable to Swim
- Pacific 8.9 Quake Tsunami Info
- US Police Caught Smuggling Guns to Mexico
- The Last Ink Cartridge You Will Buy
- EU Forces Hungary to Change Media Censor Law
- Three Languages in 30 Minutes
- Contest Proves Browsers Have Flaws
- BBC Journalists Tortured by Libyan Military
- Exposing Anonymous With Frequent Pattern
- Hard Math CAPTCHAs – Easy As Pie
- It’s China! It’s Israel! It’s…
- How the US Fell Behind in Broadband
- German Drivers Reject Ethanol
- $238K Stolen From Plane Lavatory
- How Facebook Helps Repressive Regimes
- Orcas Hunt in Predictable Stealth Mode
- Winning the Oil Endgame
- NATO Article 5 and Cyber Attack
- NERC Issues Risk Methodology Warning
- The London Schools on Libya
- CSI: Microsoft — Malicious Autostart
- Funding the Enemy to Fight Them
- Securely Erase Your SSD
- Chicken Littlestux is Falling
- Snap Judgement: Marc Bamuthi Joseph
February 2011
- WTF is Wrong with Wisconsin?
- Hypervisor Anti-rootkit: Hooksafe
- Cisco ASA 5500 IPv6 Vulnerability
- Langner Stuxnet Interview
- False Labels on “Local” Food
- FareBot Update for Android 2.3.3
- Video: Westboro Church Raises Funds for Anonymous
- German Police Raid PS3 Hacker House
- Volvo V60 Diesel Hybrid by 2012
- Rumsfeld Admits Lack of Confidence in Iraq War Decision
- Cover Your Tweedle, Save the Burying Beetle
- Petzl Safety Warning on Counterfeits
- AutoWitness Surveillance Chip
- The Problem with WAF (Again)
- Social Network Platform Security Lessons: Why I Deleted Facebook
- Air Freight Security Costs Up 10x
- Revenge of the Curds
- Lift Security and the OWASP Top 10
- Metasploit 3.5.1 ‘Sploited
- Brit Stranded in Canada by US No-Fly List
- The HBGary Story
- Al Jazeera Availability (in America)
- Monkeys Know When They Don’t Know
- Libyans Flee to Egypt, Release Evidence of Crimes
- Employee Use of Social Media
- Gesho and Honey Wine
- Security and the Politics of Humanitarian Aid
- SMS protest language censored by phone companies in Uganda
- EFF: Higher Stakes Brings Worse Security
- Libya Internet Link Cut
- Stuxnet Failed to Stop or Delay LEU
- Cloud SMaaS (Sloppy Meat as a Service)
- Crowd Attribution and Riots
- Cyber War???
- Wi-Fi Capacity Breakthrough – Smarter Cancelling Gives Better Listening
- HTTPS Everywhere 0.9.4 Disables Cisco
- Remote Exploit of BMC Patrol: CVE-2011-0975
- Operation Sloppy Night Dragon
- Hacking Quality Into Electronics
- VMware vShield Manager Design and Availability
- CIA Surveillance Technology on Flickr
- NRA Attacks Lawyers
- The Onion Terror News Update
- Securosis Warns Against Cloud
- The History and Meaning of Finding Kumbaya
- Facebook Malware App Builder
- Scans Could Detect Liquid Explosives
- Tweets Ruled to be Public Information
- Firewall Rule Complexity Studies
- Buying an ATM on Craigslist
- Zuckerberg Restraining Order on Facebook Stalker
- lightRadio to Fix Cellular Communication
- Chromium-6 Found in US Cities
- Cracking the Scratch Lottery Ticket
- Malawi May Pass a Fart Law
- Ice Virus Hits Hard in Texas
- Tahrir Square Protest Poetry
- ATM Tech Manuals for Free on Android
- NOM Defaced by Cartoonist
- US Doctors Warn on Carbs and Sugar
- Congressional Quiz on Facebook Privacy
- Strandbeests – Wind Powered Kinetic Sculpture
- EXT3 Unallocated Space File Recovery
- Officer Uses No-Fly List to Get Rid of Wife
- Digital Image Forensics
- SF Chefs Fail Fish Test
- Is the Kochtopus Risk Real?
- Accepting Mistakes Reduces Their Frequency
- Crime View for Google Maps by UK Police
- TSA Rules Successfully Challenged: No ID Required, Photos Allowed
- VW Beetles Snagged by Safety Rule
- PCI Council Does Not Ban MD5
January 2011
- Virtual Reality Program Distracts Burn Victims from Pain
- AZ gun show dealers exposed – no background checks
- Cars Shunned by Germany’s Youth
- Drug Catapult at US Border
- Diesels today already meet 2025 standards
- De-coded Note — Hitler Was Fooled
- Analysis of the Zuckerberg Fan Page Hack
- Triclosan Ban
- 2011 BSidesSF: Dr. Stuxlove
- ATMs Into Africa
- An American Army Suicide Story
- VW XL1 Diesel Claims 261mpg
- European Privacy Experts Slam Facebook
- DoD Warns of GPS Failures
- CIA Launches New Spy Satellites
- Drivers Work Together Against Parking Police
- Mossad Accused of Slowing Iranian Nuclear Program
- FBI Hunt for Spokane Bomber
- Columbian Cocaine Pigeon Foiled
- Safe-Cracking Robot
- Cloud Security Not Roadblock for Majority of C-Level
- White Hat Missing; Feared Lost
- Android Security Patch Delayed: SD Card Exposed
- RSA 2011 San Francisco: Cloud Investigations and Forensics
- Addicted to Risk
- Stuxnet Analysis (0-day edition)
- Cyberwar is Cyberhyped
- Risk Research on Bat Survival
- US Military Counters Dr. Strangelove
- …I’ve also got a problem with my Apple
- The Politics of Loughner
- Mill’s Harm Principle of Free Speech
- Argentina ATMs Run Out of Cash
- Cloud: Superhighway for Cyber crime?
- How Hunting Humans is Better Than Foxes
- US Civil War and the South: 5 Myths
- EFF Condemns Tunisian Cyberwar Tactics
- Sorting It Out
- US Intent to Militarize African Coast
- Police Raid Guinea Pigs in UK
- Flipper Bands Hurt Penguins
- China’s Stealth Fighter: Bluff or Real?
- Lincoln’s Gettysburg Address Revisited
- Jaguar XJ Supersport Diesel Quicker Than Gasoline
- Schroedinger’s Cat: Another Look at American Conspiracy Theory
- Harnessing the Danger of Lake Kivu
- Gizmodo calls iPhone ‘miserable’
- Likert Scale for Risk Assessments
- Women will rule the world
- More Bird Kills Found
- Terrorist Shoots to Kill Congresswoman
- Breakthrough in Breast Cancer Detection
- Network Buffer Bloat
- Asbestos in Organic Brake Pads
- AC45 Catamaran Design Challenges
- SF Forces McDonalds to Switch to Crappy Meal
- The Risk of Not Investing
- PCI and System Restore Points on Windows XP
- Razer Switchblade
- NIST Reorg and the Cloud
- PlayStation 3 Hacked
- California Outlaws Online Impersonation
- FBI on the trail of Anonymous
- Saudi Arabia Accuses Israel of Spying with Birds
- Back Door Java
- SourceFire Acquires Immunet
- NVIDIA announces CPU
- Guidelines for Secure IPv6
- US Government Oversight – Up for Bid
- Tahoe Resort Power Outages
- DNA link to hair color
- Lawsuit Threatens Marin Pastic Bag Ban
- Top 5 Most Dangerous Malwares, or Not
- Crocs Fined for Health Claims
- Italy bans all plastic bags
- Cloud Providers Say It’s Safe
- AlertMap by Havaria Information Service
- Flower Hour: The Homemade Lemon Battery
- The 10 gram 80 gb SSD
- WNS: America’s Wildlife Health Crisis
- America’s Cup Planning for San Francisco
- GSM Hacked (Again)
- Rivers Clean Again in UK
- Civil War Vignere Cipher Code Decrypted