2004–2005
603 posts
2005 535
December 2005
- ID Cards and ID Fraud
- DOJ Privacy Breach
- An RFID-Blocking Wallet
- Project Shamrock
- Bomb-Sniffing Wasps
- Are Computer-Security Export Controls Back?
- Bug Bounties Are Not Security
- Is the NSA Reading Your E-Mail?
- Internet Explorer Sucks
- New TSA Guidelines from The Onion
- Story About "Little Red Book" and Federal Agents a Hoax
- Weird Computer-Worm Social Engineering Story
- Idiotic Article on TPM
- Car Thieves Adapt
- Vehicle Tracking in the UK
- Miller on OpenSSH
- Dutch Botnet
- Electronic Shackles and Telephone Communications
- The Security Threat of Unchecked Presidential Power
- How Much High Explosive Does Any One Person Need?
- NSA and Bush’s Illegal Eavesdropping
- Microsoft Windows Receives EAL 4+ Certification
- Cell Phone Companies and Security
- Insider Threat Statistics
- Security Cartoon
- Computer Crime Hype
- More Erosion of Police Oversight in the U.S.
- The Military is Spying on Americans
- Are Port Scans Precursors to Attack?
- Totally Secure Classical Communications?
- Leon County, FL Dumps Diebold Voting Machines
- Weakest Link Security
- Korea Solves the Identity Theft Problem
- Titan Rain
- Brian Snow on Security
- FBI Speaks Sense on Cyberterrorism
- A Pilot on Airline Security
- Most Stolen Identities Never Used
- G. Gordon Liddy on Terrorism
- Sky Marshal Shooting in Miami
- E-Hijacking
- Monocultures and Operating Systems
- Truckers Watching the Highways
- U.S. Immigration Database Security
- OpenDocument Format and the State of Massachusetts
- 30,000 People Mistakenly Put on Terrorist Watch List
- Snake-Oil Research in Nature
- CME in Practice
- Reinventing 911
- Child-Repellent Sounds
- Benevolent Worms
- How Hackers Think
- Armed Killer Dolphins
- The Onion on Security
- GAO Report on Electronic Voting
- FBI to Approve All Software?
- Limitations on Police Power Shouldn't Be a Partisan Issue
- The Human Side of Security
- Airplane Security
- New Phishing Trick
November 2005
- Google and Privacy
- Hacking Wiretapping Systems
- Open-Source Intelligence
- Cybercrime Pays
- Counterfeiting Ring in Colombia
- Miami Police Stages "Random Shows of Force"
- Missed Cellphone Calls as Bomb Triggers
- A Science-Fiction Movie-Plot Threat
- Interdicting Terrorist Funding
- Giving the U.S. Military the Power to Conduct Domestic Surveillance
- Safecracking with Thermal Imaging
- European Terrorism Law and Music Downloaders
- Hoofnagle's Consumer Privacy Top 10
- Vote Someone Else's Shares
- Twofish Cryptanalysis Rumors
- Today's Movie-Plot Threat: Electronic Pulses from Space
- Australian Minister's Sensible Comments on Airline Security Sparks Outcry
- Surveillance and Oversight
- The Sony Rootkit Saga Continues
- Reminiscences of a 75-Year-Old Jewel Thief
- Possible Net Objects Fusion 9 Vulnerability
- Automatic Lie Detector
- Cartoon
- Prisons and Guards
- Fraud and Western Union
- Ex-MI5 Chief Calls ID Cards "Useless"
- U.S. Compromises Canadian Privacy
- Hackers and Criminals
- Sony's DRM Rootkit: The Real Story
- Identity Theft Over-Reported
- Stride-Based Security
- Still More on Sony's DRM Rootkit
- Hans Bethe on Security
- NSA for Kids
- Airport Security Against Chemical and Biological Terrorism
- Metadata in MS Office
- Cold War Software Bugs
- The Security of Tin Foil Hats
- Sky Posse
- More on Sony's DRM Rootkit
- Ownership of Mag Stripe Readers May be Illegal
- The Zotob Worm
- Fraudulent Stock Transactions
- Military Uses for Silly String
- Sniffing Passwords is Easy
- RSA-640 Factored
- Taser Cam
- Richard Clarke Advised New York City Subway Searches
- Howard Schmidt on Software Vulnerabilities
- The FBI is Spying on Us
- Microsoft Calls for National Privacy Law
- Instantaneous Data Grabbing
- A 24/7 Wireless Tracking Network
- U.S. Navy Fleet Broadcast Security
- Oracle's Password Hashing
- The Security of RFID Passports
- Using Security Arguments to Further Agenda
- Authenticating People by their Typing Pattern
- NIST Hash Workshop Liveblogging (5)
- NIST Hash Workshop Liveblogging (4)
- Sony Secretly Installs Rootkit on Computers
- Secret NSA Patents
October 2005
- NIST Hash Workshop Liveblogging (3)
- NIST Hash Workshop Liveblogging (2)
- NIST Hash Workshop Liveblogging (1)
- Limits on Police Tracking People with Cell Phones
- DMCA Review
- Convicted Felons with Big Dogs
- Preventing Identity Theft: The Living and the Dead
- Australia's New Anti-Terrorism Legislation
- Cell Phone Surveillance
- Eavesdropping Through a Wall
- Medical Movie-Plot Threats
- Electronic IDs
- Terrorists Playing Bingo in Kentucky
- Scandinavian Attack Against Two-Factor Authentication
- FBI Abuses of the USA Patriot Act
- Supermarket Loyalty Program Used to Pinpoint Location
- ATM Fraud and British Banks
- Another "Movie Plot" Threat
- Security Awareness Posters
- Password Safe in the News
- Computer-Security Paranoia
- Private Webcams and the Police
- A "Typical" Terrorist
- Liabilities and Software Vulnerabilities
- U.S. Regulators Require Two-Factor Authentication for Banks
- UK Terrorism Law Used for Non-Terrorism Purposes
- Secret Forensic Codes in Color Laser Printers
- Passport Required to Use the Internet in Italy
- Phishing Without Computers
- Playmobil Security Checkpoint
- Chemical Trace Screening
- Real ID and Identity Theft
- RFID and Privacy
- Blizzard Entertainment Uses Spyware to Verify EULA Compliance
- Domestic Spying in the U.S.
- Tax Breaks for Good Security
- $5M Bank Con
- Theme Parks and Privacy
- Exploding Baby Carriages in Subways
- Musicians tell Fans How to Beat Copy Protection
- Terrorism Laws Used to Stifle Political Speech
- Automatic License Plate Scanners
- SMS Denial-of-Service Attack
- Phishing
- RFID Car Keys
- Microsoft Questions
- Prince Andrew Screened At Melbourne Airport
- The Doghouse: Lexar LockTight
- Potential Airbus Flaw and Coverup
September 2005
- Security Pat Downs at Football Games
- Digital Plague
- NSA Watch
- Watches a Security Threat
- Surveillance Via Cell Phones
- Jamming Aircraft Navigation Near Nuclear Power Plants
- German Internet Content Filtering
- The Doghouse: CryptIt
- Bulletproof Clothing
- Computer Malware to Have Uniform Names
- The Beginnings of a U.S. Government DNA Database
- Forging Low-Value Paper Certificates
- Fingerprint-Lock Failure in a Prison
- Man Arrested for Being A Computer Nerd
- Secure Flight News
- Hurricane Security and Airline Security Collide
- Searching Google for Unpublished Data
- Verizon Monitoring Customers for Disney
- Judge Roberts, Privacy, and the Future
- Terrorists and Hurricanes
- Cameras Catch Dry Run of 7/7 London Terrorists
- Automobile Identity Theft
- Locking Gas Caps
- Major Security on a Minor Ferry
- New Poll Tax in Georgia
- A Diebold Insider Speaks
- Alan Cox on Security
- DUI Cases Thrown Out Due to Closed-Source Breathalyzer
- Research in Behavioral Risk Analysis
- Crime-Facilitating Speech
- Privacy Enhanced Computer Display
- Snooping on Text by Listening to the Keyboard
- Israeli Barrier Around Gaza
- Katrina and Security
- Marcus Ranum's "The Six Dumbest Ideas in Computer Security"
- Criminals Learn Forensic Science
- Cold War CIA Tradecraft
- Movie-Plot Threats
- A U.S. National Firewall
- Shoulder Surfing Keys
- Lance Armstrong Accused of Doping
- Identity Cards Don't Help
- Security Lessons of the Response to Hurricane Katrina
- Digital-ER
- Bad Game-Show Random-Number Generator
- Hogwarts Security
- Code Signing
- The Keys to the Sydney Subway
August 2005
- 276 British Spies
- Trusted Computing Best Practices
- Unintended Information Revelation
- Tamper-Evident Paper Mailings
- Security at Visa
- Identity Thief Steals House
- Privacy Risks of Used Cell Phones
- Peggy Noonan and Movie-Plot Terrorist Threats
- U.S. Government Computers Attacked from China
- Actors Playing New York City Policemen
- A Socio-Technical Approach to Internet Security
- Cameras in the New York City Subways
- Ambient Radiation Sensors
- Bluetooth Spam
- RFID in British License Plates
- Bluetooth As a Laptop Sensor
- The Kutztown 13
- Airline Security, Trade-offs, and Agenda
- Infants on the Terrorist Watch List
- Zotob and Variants
- New Cryptanalytic Results Against SHA-1
- Chinese Cryptographers Denied U.S. Visas
- Sensible Airline Security
- Unmanned Planes Patrolling Borders
- Cryptographically-Secured Murder Confession
- Terrorists, Steganography, and False Alarms
- Secure Flight News
- E-Mail Interception Decision Reversed
- Do-it-Yourself Security Checkpoint
- The Devil's Infosec Dictionary
- Fingerprinting Paper
- TSA and Spam
- UK Border Security
- The MD5 Defense
- Xbox Security
- Stealing Imaginary Things
- RFID Passport Security Revisited
- The Myth of Panic
- Wireless Interception Distance Records
- Orlando Airport's CLEAR Program
- Profiling Humor
- Low-Tech Loitering Countermeasure
- London Bombing Details
- New Windows Vulnerability
- U.S. Crypto Export Controls
- Shoot-to-Kill Revisited
- Caches of Explosives Hidden in Moscow
- More Lynn/Cisco Information
- Technological Parenting
- Eavesdropping on Bluetooth Automobiles
- RFID Cards for U.S. Visitors
- Hacking Hotel Infrared Systems
- Plagiarism and Academia: Personal Experience
July 2005
- Dog Poop Girl
- Microsoft Permits Pirated Software to Receive Security Patches
- Cisco Harasses Security Researcher
- Automatic Surveillance Via Cell Phone
- Risks of Losing Portable Devices
- Monopolies and DRM
- UK Police and Encryption
- Encrypted VOIP Phone
- How Banks Profit from ID Theft
- Microsoft Builds In Security Bypasses
- The Sorting Door Project
- Domestic Terrorism (U.S.)
- Shoot-to-Kill
- Secure Flight
- Profiling
- Searching Bags in Subways
- Visa and Amex Drop CardSystems
- Anti-Missile Defenses for Commercial Aircraft
- New Cybersecurity Position at DHS
- How to Not Fix the ID Problem
- Turning Cell Phones off in Tunnels
- Thinking About Suicide Bombers
- Causes of Suicide Terrorism
- Secure RSS Syndication
- London Bombing and the Usefulness of Terrorist Watch Lists
- NIST Publication on Discrete Log Crypto
- Redefining Spyware
- Security Risks of Airplane WiFi
- Forged Documents in National Archives Change History
- Turnrow Interview
- Stealing WiFi Access
- Security Risks of Street Photography
- New York Times on Identity Theft
- Terrorism Defense: A Failure of Imagination
- Surveillance Cameras and Terrorism
- Hymn Project
- The Doghouse: Privacy.li
- London Transport Bombings
- Millimeter-Wave Detection System
- Russia's Black-Market Data Trade
- Noticing Data Misuse
- A Comment on the UK National ID Card Program
- Evaluating the Effectiveness of Security Countermeasures
- Security Skins
June 2005
- Diebold Opti-Scan Voting Machine
- Sandia's New Wireless Technology
- Wired on Identity Theft
- Secrets and Lies Review
- Your ISP May Be Spying on You
- Interview with Marcus Ranum
- Seagate's Full Disk Encryption
- Beyond Fear Review
- The Adaptability of Iraqi Insurgents
- SHA Cryptanalysis Paper Online
- Indian Call Center Sells Personal Information
- Talking to Strangers
- Dell Protects the Homeland
- CardSystems Exposes 40 Million Identities
- Organized Retail Theft
- DNA Identification
- Underhanded C Contest
- Speeding Ticket Avoidance
- Dell Keyboard Loggers
- Disarming Soldiers
- Security Alert Humor
- Write Down Your Password
- Another Failed Copy-Protection System
- Password Safe
- Picking Physicists' Locks
- White Powder Anthrax Hoaxes
- Defining "Access" in Cyberspace
- Torah Security
- Ice Cream Locks
- Orlando Trusted Traveler Program
- Intel Quietly Adds DRM to CPUs
- Risks of Pointy Knives
- More MD5 Collisions
- Backscatter X-Ray Technology
- More on "Encryption As Evidence of Criminal Intent"
- Public Disclosure of Personal Data Loss
- Risks of Cell Phones on Airplanes
- More on the DHS Biometric ID Cards
- TSA Abuse of Power
- U.S. Medical Privacy Law Gutted
- Accuracy of Commercial Data Brokers
- Attack Trends: 2004 and 2005
- Counterfeiting in the Sudan
- Attack on the Bluetooth Pairing Process
- Billions Wasted on Anti-Terrorism Security
- Deep Throat Tradecraft
- Stupid People Purchase Fake Concert Tickets
- Battlefield RFID Listening Rocks
- DHS Enforces Copyright
- Spelling Errors as a Counterfeiting Defense
May 2005
- Eric Schmidt on Secrecy and Security
- Major Israeli Computer Espionage Case
- Holding Computer Files Hostage
- Analysis of the Witty Worm
- Encryption as Evidence of Criminal Intent
- Touch-Screen Voting
- Massive Data Theft
- Paris Hilton Cellphone Hack
- Fingerprint Library Cards
- Social Engineering Via Voicemail
- Phishing
- New Feature: 100 Latest Comments
- Insider Threats
- Fearmongering About Bot Networks
- AES Timing Attack
- Surveillance Cameras in U.S. Cities
- Crypto-Gram
- Identity-Theft Humor
- Combating Spam
- ITConversations Interview
- Should Terrorism be Reported in the News?
- SecurityFocus Interview
- Phishing and Identity Theft
- Company Continues Bad Information Security Practices
- The Potential for an SSH Worm
- REAL ID
- New U.S. Government Cybersecurity Position
- Lessons of the ChoicePoint Theft
- Detecting Nuclear Material in Transport
- PDF Redacting Failure
- Users Disabling Security
April 2005
- The Emergence of a Global Infrastructure for Mass Registration and Surveillance
- RFID Passport Security
- Blowfish on "24"
- The PITAC Report on CyberSecurity
- Ants Staging Ambushes
- New Risks of Automatic Speedtraps
- Airline Security Threat: Penguins
- Security Trade-Offs
- Universal Automobile Surveillance
- Biometric Passports in the UK
- Wi-Fi Liabilities
- Lighters Banned on Airplanes
- Processing Exit Visas
- A Taxonomy of Privacy
- Failures of Airport Screening
- More Ideas for Privacy Reform
- State-Sponsored Identity Theft
- Wi-Fi Minefield
- Brandeis Quote on Openness
- License-Plate Scanning by Helicopter
- Mitigating Identity Theft
- Passwords Alone Don't Protect Trade Secrets
- Hacking the Papal Election
- Bluetooth Sniper Rifle
- The Doghouse: ExeShield
- Top CTOs
- More on Two-Factor Authentication
- Security as a Trade-Off
- Insider Attack Against Citibank
- Analysis of Electronic Passport Security
- Texas Cars with RFID Chips?
- More Uses for Airline Passenger Data
- Secrecy and Security
- Finding Nuclear Power Plants
- UK National IDs
- Sandia on Terrorism Security
- Police Foil Bank Electronic Theft
- The Price of Restricting Vulnerability Information
- DHS's Identification Card
- ChoicePoint Feeling the Heat
- Student Hacks System to Alter Grades
- Sybase Practices Dumb Security
- Security Risks of Biometrics
March 2005
- Why Surveillance Cameras Don't Reduce Crime
- ID Theft is Inescapable
- More on ChoicePoint
- GAO's Report on Secure Flight
- Camouflage in Octopodes
- TSA Lied About Protecting Passenger Data
- Anonymity and the Internet
- Personal Information and Identity Theft
- Voting and IDs
- The Silliness of Secrecy
- France Makes Finding Security Bugs Illegal
- Social Engineering and the IRS
- Nuclear Terrorism False Positives
- Hackers Taking Over Webcams
- U.S. Electronic Passports
- Radiation Detectors in Ports
- Destroying the Earth
- The Doghouse: Xavety
- The Failure of Two-Factor Authentication
- Ideas for Privacy Reform
- Tracking Bot Networks
- Terrorist Risks from Unmanned Aircraft
- Fixing Unicode
- Satellite Tracking Data Made Secret
- Speech-Activated Password Resets
- Melbourne Water-Supply Security Risk
- More Hash Function Attacks
- Security Risks of Dungeons and Dragons
- ChoicePoint Says "Please Regulate Me"
- Secrecy and Security
- Sensitive Security Information (SSI)
- Remote Physical Device Fingerprinting
- GAO on Secure Flight and Commercial Data
- Flaw in Pin-Tumbler Locks
- Banning Matches and Lighters on Airplanes
- Garbage Cans that Spy on You
- RFID Washer
- RFID Security Analysis
- Flaw in Winkhaus Blue Chip Lock
- Sensitive Information on Used Hard Drives
- Choicepoint's CISO Speaks
- Identity Theft out of Golf Lockers
February 2005
- Sneaking Items Aboard Aircraft
- Regulation, Liability, and Computer Security
- DMCA in Court
- Airport Screeners Cheat to Pass Tests
- ChoicePoint
- The Economist on High-Tech Passports
- Keystroke Logging for Profit
- Hunter S. Thompson
- Hacking a Bicycle Rental System
- Cryptanalysis of SHA-1
- Security Risks of Frequent-Shopper Cards
- Pirated Windows to Remain Unpatched
- Unicode URL Hack
- SHA-1 Broken
- RSA Conference
- GhostBuster
- T-Mobile Hack
- The Curse of the Secret Question
- Smart Water
- Authentication and Expiration
- Bank Sued for Unauthorized Transaction
- Flying on Someone Else's Airline Ticket
- Fertilizer as a Weapon
- Bank Mandates Insecure Browser
- Implanting Chips in People at a Distance
- Govcon
- Automobile Virus
- The Weakest Link
January 2005
- TSA's Secure Flight
- Iraqi Election Security
- PS2 Cheat Codes Hacked
- Election Recounts
- RFID as Automobile DNA
- Airplane Defense Security Trade-Off
- Telephone Monitoring While on Hold
- FBI Retires Carnivore
- "Inch of Snow" Paralyzes Air Marshals
- CIA's View of the Future
- American Airlines Data Collection
- DHS Biometric ID Cards
- Microsoft RC4 Flaw
- SIGNAL Article
- Safecracking
- Secure Flight Privacy/IT Working Group
- British Pub Hours and Crime
- Fingerprinting Students
- Terrorism False Positives
- Terrorists and Border ID Systems
- Linux Security
- Altimeter Watches Now a Terrorism Threat
- Shutting Down the GPS Network
- Illegal Aliens and Driver's Licenses
- Easy-to-Remember PINs
2004 68
December 2004
- Wi-Fi Shielding Paint
- Canadian Airport Security Loses Uniforms
- Bad Quote
- Resolutions
- Physical Access Control
- Airline Passenger Profiling
- Electronic Voting in Ireland
- How Not to Test Airport Security
- Burglars and "Feeling Secure"
- 1959 Random Number Generator
- The Electronic Privacy Information Center (EPIC)
- The Electronic Privacy Information Center (EPIC)
- Security Notes from All Over: Israeli Airport Security Questioning
- The Doghouse: Internet Security Foundation
- Safe Personal Computing
- Canada and the USA PATRIOT Act
- The Digital Person
- Safes and Safecracking
- Phishing by Cell Phone
- Airline Security and the TSA
- Sensible Security from New Zealand
- Striking Back Against Spammers
- An Impressive Car Theft
November 2004
- Universal Surveillance Doesn't Make Us Safer
- Desktop Google Finds Holes
- Behavioral Assessment Profiling
- Two-Factor Authentication with Cell Phones
- New Security Vulnerability: Clueless Users
- Amtrak "Security"
- The Problem with Electronic Voting Machines
- Peer-to-Peer Alarm Systems
- Hacking Faxes
- Letter: Lexar JumpDrives
- Letter: Lexar JumpDrives
- The Doghouse: Vadium Technology
- Computer Security and Liability
- Computer Security and Liability
- Clever Virus Attack
October 2004
- Getting Out the Vote: Why is it so hard to run an honest election?
- Mail-in Ballot Attack
- The Security of Checks and Balances
- Foiling Metal Detectors
- A Sensible Elected Official
- World Series Security
- Doghouse: Merced County
- Security Information Management Systems (SIMS)
- Technology and Counterterrorism
- News 1
- Schneier: Security outsourcing widespread by 2010
- Schneier: Microsoft still has work to do
- Disrupting Air Travel with Arabic Writing
- The Legacy of DES
- RFID Passports
- Aerial Surveillance to Detect Building Code Violations
- Aerial Surveillance to Detect Building Code Violations
- Do Terror Alerts Work?
- License Plate "Guns" and Privacy
- License Plate "Guns" and Privacy
- The Doghouse: Lexar JumpDrives
- The Doghouse: Lexar JumpDrives
- Academic Freedom and Security
- Academic Freedom and Security
- News 2
- News
- Keeping Network Outages Secret
- Keeping Network Outages Secret
- New Blog, and Changes to Crypto-Gram
- New Blog, and Changes to Crypto-Gram