2008–2009
1,165 posts
2009 538
December 2009
- Quantum Cryptography Cracked
- Me and the Christmas Underwear Bomber
- Change Blindness
- "The Behavioral Economics of Personal Information"
- Separating Explosives from the Detonator
- Friday Squid Blogging: Squid Creche
- Friday Squid Blogging: Madonna and Squid
- Intercepting Predator Video
- Plant Security Countermeasures
- Luggage Locator
- Howard Schmidt to be Named U.S. Cybersecurity Czar
- Santa's Naughty–Nice Database Hacked
- Defeating Microsoft BitLocker
- Friday Squid Blogging: Squid Mosaic
- Yet Another Schneier Interview
- Live Face-Off with Marcus Ranum at ISD
- MagnePrint Technology for Credit/Debit Cards
- Australia Restores Some Sanity to Airport Screening
- The Politics of Power in Cyberspace
- Facial Recognition Door Lock
- Telcoms Security
- The U.S. Civil Rights Movement as an Insurgency
- U.S./Russia Cyber Arms Control Talks
- Me Speaking on "The Future of Privacy"
- Friday Squid Blogging: Cephalopod Christmas Trees
- Yet Another Schneier Interview
- Wondermark on Passwords
- Obama's Cybersecurity Czar
- Reacting to Security Vulnerabilities
- TSA Publishes Standard Operating Procedures
- My Reaction to Eric Schmidt
- Emotional Epidemiology
- Using Fake Documents to Get a Valid U.S. Passport
- Terrorists Targeting High-Profile Events
- Friday Squid Blogging: Squid Showerhead
- Sprint Provides U.S. Law Enforcement with Cell Phone Customer Location Data
- The Security Implications of Windows Volume Shadow Copy
- Fingerprinting RFID Chips
- Cyberwarfare Policy
November 2009
- The Psychology of Being Scammed
- Friday Squid Blogging: Two Squid T-Shirts
- Fear and Public Perception
- Leaked 9/11 Text Messages
- Mumbai Terrorist Attacks
- Virtual Mafia in Online Worlds
- Users Rationally Rejecting Security Advice
- Norbt
- Decertifying "Terrorist" Pilots
- Al Qaeda Secret Code Broken
- Friday Squid Blogging: New Squid Discovered
- Interview with Me
- FailBlog on Security
- Denial-of-Service Attack Against CALEA
- A Taxonomy of Social Networking Data
- Stabbing People with Stuff You Can Get Through Airport Security
- How Smart are Islamic Terrorists?
- Quantum Ghost Imaging
- Secret Knock Lock
- A Useful Side-Effect of Misplaced Fear
- Anti-Malware Detection and the Original Trojan Horse
- Public Reactions to Terrorist Threats
- Bruce Schneier Action Figure
- Friday Squid Blogging: Sperm Whale Eating Giant Squid
- Blowfish in Fiction
- Video Interview with Me
- Beyond Security Theater
- FBI/CIA/NSA Information Sharing Before 9/11
- Security in a Reputation Economy
- Hacking the Brazil Power Grid
- Thieves Prefer Stealing Black Luggage
- Protecting OSs from RootKits
- Is Antivirus Dead?
- John Mueller on Zazi
- Laissez-Faire Access Control
- Friday Squid Blogging: Dentyne Ice Squid Ad
- Interview with Me
- The Doghouse: ADE 651
- Mossad Hacked Syrian Official's Computer
- The Problems with Unscientific Security
- Fear and Overreaction
- Zero-Tolerance Policies
- Detecting Terrorists by Smelling Fear
- The FBI and Wiretaps
October 2009
- Friday Squid Blogging: Humboldt Squid in Canada
- Article on Me
- Attacking U.S. Critical Infrastructure
- Report on Chinese Cyberwarfare Capability
- DDNI for Collection Press Conference
- A Critical Essay on the TSA
- Best Buy Sells Surveillance Tracker
- Psychology and Security Resource Page
- 2006 Wal-Mart Hack
- CIA Invests in Social-Network Datamining
- Friday Squid Blogging: Steampunk Squid Cake
- Friday Squid Blogging: Draw-a-Squid Contest
- "Evil Maid" Attacks on Encrypted Hard Drives
- James Bamford on the NSA
- Ballmer Blames the Failure of Windows Vista on Security
- Australia Man Receives Reduced Sentence Due to Encryption
- TSA Successfully Defends Itself
- Computer Card Counter Detects Human Card Counters
- Six Years of Patch Tuesdays
- Helpful Hint for Fugitives: Don't Update Your Location on Facebook
- Friday Squid Blogging: Squid Robot
- The Commercial Speech Arms Race
- Camouflaging a WWII Factory
- The Bizarre Consequences of "Zero Tolerance" Weapons Policies at Schools
- 1777 Steganography
- The Current Status of P Versus NP
- The Doghouse: Privacy Inside
- David Dittrich on Criminal Malware
- Wi-fi Blocking Paint
- Using Wi-fi to "See" Through Walls
- Friday Squid Blogging: Squidsoup
- Pigs Defeating RFID-Enabled Feeding Systems
- 1,000 Cybersecurity Experts
- The Futility of Defending the Targets
- Detecting Forged Signatures Using Pen Pressure and Angle
- Hotel Safe Scam
- Detecting People Who Want to Do Harm
- Computer-Assisted Witness Identification
- Don't Let Hacker Inmates Reprogram Prison Computers
- Malware that Forges Bank Statements
- UK Defense Security Manual Leaked
- Moving Hippos in the Post-9/11 World
- Actual DHS Travel Record
- Friday Squid Blogging: Squid Cartoon
- "Security Theater in New York City"
- Proving a Computer Program's Correctness
- Reproducing Keys from Photographs
- Nice Use of Diversion During a Robbery
September 2009
- Immediacy Affects Risk Assessments
- The Doghouse: Crypteto
- The Problem of Vague Laws
- Predicting Characteristics of People by the Company they Keep
- Unauthentication
- Ass Bomber
- A Stick Figure Guide to AES
- Friday Squid Blogging: 20-Foot Squid Caught in the Gulf of Mexico
- Texas Instruments Signing Keys Broken
- The Onion on Security
- Sears Spies on its Customers
- Monopoly Sets for WWII POWs: More Information
- Eliminating Externalities in Financial Security
- Quantum Computer Factors the Number 15
- Hacking Two-Factor Authentication
- Inferring Friendship from Location Data
- Terrorist Havens
- Friday Squid Blogging: Embracing Your Inner Squid
- Modifying the Color-Coded Threat Alert System
- Printing Police Handcuff Keys
- Skein News
- Robert Sawyer's Alibis
- Friday Squid Blogging: Stinky Squid
- Schneier on "The Future of the Security Industry"
- Refuse to be Terrorized
- Eighth Anniversary of 9/11
- File Deletion
- Demonstration of a Liquid Explosive
- NSA Intercepts Used to Convict Liquid Bombers
- The Global Illicit Economy
- David Kilcullen on Security and Insurgency
- Friday Squid Blogging: Squid Coloration
- Subpoenas as a Security Threat
- "The Cult of Schneier"
- Real-World Access Control
- The History of One-Time Pads and the Origins of SIGABA
- The Exaggerated Fears of Cyber-War
- Hacking Swine Flu
- Matthew Weigman
August 2009
- On London's Surveillance Cameras
- Friday Squid Blogging: Squid Police
- The Security Risks of Accepting Free Laptops
- Marine Worms with Glowing Bombs
- Banning Beer Glasses in Pubs
- Stealing 130 Million Credit Card Numbers
- Manipulating Breathalyzers
- Small Business Identity Theft and Fraud
- Actual Security Theater
- Non-Randomness in Coin Flipping
- Modeling Zombie Outbreaks
- Friday Squid Blogging: Jurassic Squid
- Embarrassing Terrorist Failures
- Hacking the Assa Solo Lock
- Developments in Lie Detection
- The Continuing Cheapening of the Word "Terrorism"
- Fabricating DNA Evidence
- Movie-Plot Threat Alert: Robot Suicide Bombers
- Flash Cookies
- Friday Squid Blogging: Squid and Owl
- EFF on Locational Privacy
- Man-in-the-Middle Trucking Attack
- Lockpicking and the Internet
- An Ethical Code for Intelligence Officers
- Self-Enforcing Protocols
- Password Advice
- Friday Squid Blogging: Humboldt Squid is "Timid"
- New Airport Security Hole
- Risk Intuition
- How we Reacted to the Unexpected 75 Years Ago
- Security vs. Usability
- Regulating Chemical Plant Security
- Too Many Security Warnings Results in Complacency
- Too Many Security Warnings Results in Complacency
- Building in Surveillance
July 2009
- Friday Squid Blogging: Spicy Squid on a Stick
- Snake Oil Salesman
- Eve Ensler on Security
- Nuclear Self-Terrorization
- Another New AES Attack
- Risks of Cloud Computing
- iPhone Encryption Useless
- New Real Estate Scam
- Large Signs a Security Risk
- Swiss Security Problem: Storing Gold
- Tips for Staying Safe Online
- Base Rate Fallacy
- Friday Squid Blogging: Humboldt Squid Invasion
- SHA-3 Second Round Candidates Announced
- Social Security Numbers are Not Random
- The Twitter Attack
- Mapping Drug Use by Testing Sewer Water
- Verifiable Dismantling of Nuclear Bombs
- Cybercrime Paper
- Friday Squid Blogging: Bottled Water Plus Squid
- Pepper Spray–Equipped ATMs
- Privacy Salience and Social Networking Sites
- Laptop Security while Crossing Borders
- Data Leakage Through Power Lines
- Poor Man's Steganography
- Gaze Tracking Software Protecting Privacy
- North Korean Cyberattacks
- Strong Web Passwords
- Friday Squid Blogging: Humboldt Squid Caught Off Seattle
- Lost Suitcases in Airport Restrooms
- Making an Operating System Virus Free
- NSA Building Massive Data Center in Utah
- The ATM Vulnerability You Won't Hear About
- Homomorphic Encryption Breakthrough
- Spanish Police Foil Remote-Controlled Zeppelin Jailbreak
- Court Limits on TSA Searches
- Why People Don't Understand Risks
- More Low-Tech Security Solutions
- Pocketless Trousers to Protect Against Bribery
- Terrorist Risk of Cloud Computing
- Friday Squid Blogging: Office Squid
- The Pros and Cons of Password Masking
- The Insecurity of Secrecy
- Information Leakage from Keypads
- More Security Countermeasures from the Natural World
- MD6 Withdrawn from SHA-3 Competition
- New Attack on AES
- Security, Group Size, and the Human Brain
June 2009
- Cryptography Spam
- Growth of the CSE
- Anti-Stab Knife
- Protecting Against the Snatched Laptop Data Theft
- Friday Squid Blogging: 8 Gig USB Squid Flash Drive
- Fake Receipts
- The Problem with Password Masking
- Clear Shuts Down Operation
- Authenticating Paperwork
- Workshop on Economics of Information Security
- Fixing Airport Security
- Research on the Security of Online Games
- John Walker and the Fleet Broadcasting System
- The Iranian Firewall
- Eavesdropping on Dot-Matrix Printers by Listening to Them
- John Mueller on Nuclear Disarmament
- Engineers More Likely to Become Muslim Terrorists
- Friday Squid Blogging: Squid Embryos
- This Week's Movie-Plot Threat: Fungus
- Fraud on eBay
- Imagining Threats
- Lockpicking
- New Computer Snooping Tool
- The Psychology of Being Scammed
- Carrot-Bomb Art Project Bombs in Sweden
- Ever Better Cryptanalytic Results Against SHA-1
- DHS Has a Blog
- Prairie Dogs Hack Baltimore Zoo
- Did a Public Twitter Post Lead to a Burglary?
- The "Hidden Cost" of Privacy
- Friday Squid Blogging: Squid Also See Through Non-Eye Organ
- Second SHB Workshop Liveblogging (9)
- Second SHB Workshop Liveblogging (8)
- Second SHB Workshop Liveblogging (7)
- Second SHB Workshop Liveblogging (6)
- Second SHB Workshop Liveblogging (5)
- Second SHB Workshop Liveblogging (4)
- Second SHB Workshop Liveblogging (3)
- Second SHB Workshop Liveblogging (2)
- Second SHB Workshop Liveblogging (1)
- Malware Steals ATM Data
- I'm Selling My Laptop
- Industry Differences in Types of Security Breaches
- Teaching Children to Spot Terrorists
- Corrupted Word Files for Sale
- British High Schoolers Write About CCTV in School
- Fear of Aerial Images
- Friday Squid Blogging: Flying Squid
- Bullet Pen
- Clever Combination Door Lock Design
- I'm Being Interviewed in Second Life Today
- Secret Government Communications Cables Buried Around Washington, DC
- Cloud Computing
- Why Is Terrorism so Hard?
- Arming the Boston Police with Assault Rifles
- Update on Computer Science Student's Computer Seizure
- Research on Movie-Plot Threats
May 2009
- Friday Squid Blogging: Squid Pasta
- Obama's Cybersecurity Speech
- Interview with Me on Cloud Security
- No Smiling in Driver's License Photographs
- News from the Fingerprint Biometrics World
- Faking Background Checks for Security Clearances
- Steganography Using TCP Retransmission
- Automatic Dice Thrower
- Defending Against Movie-Plot Threats with Movie Characters
- Secret Questions
- Friday Squid Blogging: How to Capture a Giant Squid
- Schneier and Ranum on Face-Off Video
- The Doghouse: Net1
- This Week's Terrorism Arrests
- IEDs Are Now Weapons of Mass Destruction
- On the Anonymity of Home/Work Location Pairs
- Me on Full-Body Scanners in Airports
- Microsoft Bans Memcopy()
- "Lost" Puzzle in Wired Magazine
- Invisible Ink Pen
- Pirate Terrorists in Chesapeake Bay
- Kylin: New Chinese Operating System
- Friday Squid Blogging: Welcome Squid Overlords
- Interview with Me
- No Warrant Required for GPS Tracking
- Detecting Liars by Content
- Attacking the Food Supply
- Software Problems with a Breath Alcohol Detector
- Using Surveillance Cameras to Detect Cashier Cheating
- Fourth Movie-Plot Threat Contest Winner
- Zeus Trojan has Self-Destruct Option
- Researchers Hijack a Botnet
- Friday Squid Blogging: Squid Wallet
- Marc Rotenberg on Security vs. Privacy
- MI6 and a Lost Memory Stick
- Virginia Data Ransom
- Lie Detector Charlatans
- Secure Version of Windows Created for the U.S. Air Force
- Security Considerations in the Evolution of the Human Penis
- An Expectation of Online Privacy
- Mathematical Illiteracy
- Friday Squid Blogging: Squid Beer Ad
- Googling Justice Scalia
- Yet Another New York Times Cyberwar Article
April 2009
- Preparing for Cyberwar
- A Sad Tale of Biometrics Gone Wrong
- Ireland Does Away with Electronic Voting
- Lessons from the Columbine School Shooting
- "No-Fly" Also Means "No-Flyover"
- How to Spot a Fake Census Worker
- Cell Phones and Hostage Situations
- Unfair and Deceptive Data Trade Practices
- Friday Squid Blogging: Squid Forensics
- San Francisco Restaurant Reviews for the RSA Conference
- The Terrorism Arrests that Weren't
- Fake Facts on Twitter
- Hacking U.S. Military Satellites
- Conficker
- Lessons in Key Management
- Low-Tech Impersonation
- NSA at RSA
- Funny "War on Photography" Anecdote
- DHS Recruitment Drive
- Hacking a Time Poll
- Book Review: The Science of Fear
- Friday Squid Blogging: Squid T-Shirt
- New Frontiers in Biometrics
- Boston Police Consider Using Linux to be Ground for Suspicion
- How to Write a Scary Cyberterrorism Story
- UK Terrorism Arrests
- Tweenbots
- Friday Squid Blogging: Squid Cartoon
- How Not to Carry Around Secret Documents
- U.S. Power Grid Hacked, Everyone Panic!
- P2P Privacy
- Police Powers and the UK Government in the 1980s
- Social Networking Identity Theft Scams
- Crypto Puzzle and NSA Problem
- What to Fear
- Definition of "Weapon of Mass Destruction"
- Identifying People using Anonymous Social Networking Data
- Learning About Giant Squid From Sperm Whale Stomachs
- Interview with Me
- Stealing Commodities
- DNA False Positives
- Who Should be in Charge of U.S. Cybersecurity?
- Thefts at the Museum of Bad Art
- Fourth Annual Movie-Plot Threat Contest
March 2009
- Privacy and the Fourth Amendment
- Massive Chinese Espionage Network
- The Zone of Essential Risk
- Friday Squid Blogging: Two Squid Recipes
- Gorilla Detector
- Security Fears Drive Iran to Linux
- A Solar Plasma Movie-Plot Threat
- Surviving a Suicide Bombing
- Sniffing Keyboard Keystrokes with a Laser
- Election Fraud in Kentucky
- Fear and the Availability Heuristic
- Research in Explosive Detection
- Friday Squid Blogging: Make a Giant Giant Squid Pillow
- Holy Hand Grenade of Antioch Bomb Scare
- More NSA Video Courses from 1991
- Why People Steal Rare Books
- Blowfish on 24 , Again
- Fingerprinting Paper
- Hiding Behind Terrorism Law
- 1801 Cipher Solved
- Leaving Infants in the Car
- The Onion on the Hudson River Plane Crash
- Privacy in Google Latitude
- Friday Squid Blogging: Build Your Own Virtual Squid
- The Doghouse: Sentex Keypads
- The Kindness of Strangers
- IT Security: Blaming the Victim
- The Story of the World's Largest Diamond Heist
- Google Maps Spam
- The Techniques for Distributing Child Porn
- Security Theater Scare Mongering
- Choosing a Bad Password Has Real-World Consequences
- History and Ethics of Military Robots
- Friday Squid Blogging: Squid Pie
- New eBay Fraud
- Self-Defense Pen
- More European Chip and Pin Insecurity
- All-or-Nothing Encryption Program
- Commentary on the UK Government National Security Strategy
- Michael Froomkin on Identity Cards
- Three Security Anecdotes from the Insect World
- Shower Mirror with Hidden Camera
- Judge Orders Defendant to Decrypt Laptop
- Perverse Security Incentives
February 2009
- Friday Squid Blogging: Researching Squid Bacteria
- Privacy in the Age of Persistence
- Defeating Caller ID Blocking
- Electromagnetic Pulse Grenades
- The Doghouse: Singularics
- Maine Man Tries to Build a Dirty Bomb
- Melissa Hathaway Interview
- Another Conficker Variant
- Is Megan's Law Worth It?
- NSA Wants Help Eavesdropping on Skype
- Friday Squid Blogging: Jumbo Squid Teeth
- The "Broken Windows" Theory of Crimefighting
- Another Password Analysis
- Balancing Security and Usability in Authentication
- Terrorism Common Sense from MI6
- HIPAA Accountability in Stimulus Bill
- Computer Virus Epidemiology
- Difficult-to-Pronounce Things are Judged to Be More Risky
- Los Alamos Explains Their Security Problems
- Insiders
- Using Fear to Sell Pens, Part Two
- Friday Squid Blogging: Squid Art
- Another Interview with Me
- The Doghouse: Raidon's Staray-S Encrypted Hard Drives
- Worldwide Browser Patch Rates
- Cheating at Disneyworld
- Privacy on Facebook
- Billboards that Watch you Back
- Cloning RFID Passports
- Self-Propelled Semi-Submersibles
- Man Arrested by Amtrak Police for Taking Photographs for Amtrak Photography Contest
- U.S. is One Small Step Closer to Making No-Fly List Less Harassing
- Monster.com Data Breach
- Friday Squid Blogging: Squid Cake
- xkcd on Cryptanalysis
- Radio Interview with Me
- List of NSA Video Courses from 1991
- Hacking an Electronic Road Sign
- Hard Drive Encryption Specification
- Racial Profiling No Better than Random Screening
- Confessions Corrupt Eyewitnesses
- Cost of the U.S. No-Fly List
- Making Cameras Go Click
- Evaluating Risks of Low-Probability High-Cost Events
- Airlines Defining Anyone Disruptive as Terrorists
January 2009
- Friday Squid Blogging: Safe Quick Undercarriage Immobilization Device (SQUID)
- Jon Stewart on Closing Guantanamo and Movie-Plot Threats
- Jeffrey Rosen on the Department of Homeland Security
- Interview with an Adware Developer
- Helping the Terrorists
- The Exclusionary Rule and Security
- A Rational Response to Peanut Allergies and Children
- Remote Fireworks Launcher
- Teaching Risk Analysis in School
- Risk Mismanagement on Wall Street
- Friday Squid Blogging: Squid Teething Toy
- Interview with Me
- BitArmor's No-Breach Guarantee
- When Voting Machine Audit Logs Don't Help
- New Police Computer System Impeding Arrests
- Identity, Authentication, and Authorization
- The Presidential Limousine
- Breach Notification Laws
- The Discovery of TEMPEST
- Dognapping
- In-Person Credit Card Scam
- "The Cost of Fearing Strangers"
- Friday Squid Blogging: Your Octopus, Squid and Cephalopod Information Center
- Podcast with Me
- Top Eleven Reasons Why Lists of Top Ten Bugs Don't Work
- Michael Chertoff Claims that Hijackings were Routine Prior to 9/11
- Economic Distress and Fear
- Michael Chertoff Parodied in The Onion
- Stupid Security Tricks: Key Management
- Two Security Camera Studies
- Shaping the Obama Administration's Counterterrorism Strategy
- Bad Password Security at Twitter
- DHS's Files on Travelers
- Movie-Plot Threat: Terrorists Using Insects
- Friday Squid Blogging: Squid Hats
- Friday Squid Blogging: Bizarre Squid Reproductive Habits
- Impersonation
- Interview with Me
- Allocating Resources: Financial Fraud vs. Terrorism
- Biometrics
- Reporting Unruly Football Fans via Text Message
- The NSA on the Origins of the NSA
- Censorship on Google Maps
- The Best Capers of 2008
- Kip Hawley Is Starting to Sound Like Me
- FBI's New Cryptanalysis Contest
- Trends in Counterfeit Currency
- Friday Squid Blogging: Climate Change Affects Squids
- Friday Squid Blogging: Squid Attacks ROV
- Another Recently Released NSA Document
- Software Security
2008 627
December 2008
- Schneier on Twitter
- Forging SSL Certificates
- CDC Bioterrorism Readiness Plan
- NSA Patent on Network Tampering Detection
- Matthew Alexander on Torture
- Shoplifting on the Rise in Bad Economy
- Gunpowder Is Okay to Bring on an Airplane
- Friday Squid Blogging: Vandals Wreck Giant Squid Collection
- Friday Squid Blogging: Me Eating Squid
- Interview with Me
- CCTV Cameras Going Unmonitored
- Securing Cyberspace for the 44th Presidency
- U.S. COMSEC History from 1973
- Comparing the Security of Electronic Slot Machines and Electronic Voting Machines
- DHS Reality Show
- Voice Prints
- Registry of Cell Phone Owners
- Food in Defense of a Crime
- Schneier on 60 Minutes
- Friday Squid Blogging: Squid Print
- Friday Squid Blogging: Christmas Squid
- Security Cartoon: Overly Specific Countermeasures
- Dilbert on Computer Security
- "Nut Allergy" Fear and Overreaction
- Schneier on 60 Minutes
- Bypassing Airport Checkpoints
- James Bamford Interview on the NSA
- DNS Dead Drop
- Brazilian Logging Firms Hire Hackers to Modify Logging Limits
- Ed Felten on TSA Behavioral Screening
- Arming New York City Police with Machine Guns
- Buying Fake Nintendo Consoles Helps Terrorists
- Snipers
- Hollow Coins
- How to Steal the Empire State Building
- Killing Robot Being Tested by Lockheed Martin
- Friday Squid Blogging: Petrified Squid
- Influential Security Professionals
- Jim Harper Responds to My Comments on Fingerprinting Foreigners at the Border
- Another Schneier on Security Book Review
- More SHA-3 News
- Remote-Controlled Thermostats
- Audit
- Disguised USB Drive
- Who Worries About Terrorism?
- Flying While Armed
- Mumbai Terrorists Used Google Earth, Boats, Food
- Tourist Scams
- Friday Squid Blogging: Elbowed Squid
- Friday Squid Blogging: Colossal Squid Causes Traffic Jam
- Protecting Yourself from Hotel Terrorism
- Prisoner Escapes by Mailing Himself Out of Jail
- Cyberattacks Against NASA
- Credit Card with One-Time Password Generator
- Hacking a Teleprompter
- Who Falls for those Nigerian 419 Scams Anyway?
- TSA Aiding Luggage Thieves
- Evolutionary Perspectives of War
- Communications During Terrorist Attacks are Not Bad
- Lessons from Mumbai
November 2008
- Friday Squid Blogging: Cooking a Humboldt Squid
- Terrorism Survival Bundle for Windows Mobile
- 1941 Pencil-and-Paper Cipher
- FBI Stoking Fear
- Victoria's Secret Competition Gets Hacked
- New DHS Head Understands Security
- Government Can Determine Location of Cell Phones without Telco Help
- Here Comes Everybody Review
- The Future of Ephemeral Conversation
- BNP Database Leaked
- Friday Squid Blogging: Preserving Giant Squid
- Lego Safe
- Online Age Verification
- When Sky Marshals Do Bad Things
- Secret German IP Addresses Leaked
- RIAA Lawsuits May Be Unconstitutional
- Skein and SHA-3 News
- Schneier for TSA Administrator
- The Neuroscience of Cons
- Most Spam Came from a Single Web Hosting Firm
- Friday Squid Blogging: Vintage Squid Can Labels
- Datamation Interview
- Me on Passwords
- Reducing the Risk of Human Extinction
- Giving Out Replacement Hotel Keys
- Watching a Malware Author Work
- Censorship in Dubai
- The Economics of Spam
- Reading a Letter from the Envelope it Was In
- Interview on Nuclear Terror
- WPA Cracked
- Aspidistra
- Friday Squid Blogging: Squid USB Drive
- Anti-Terror Law Mission Creep in the U.K.
- The Ill Effects of Banning Security Research
- U.S. Court Rules that Hashing = Searching
- P = NP?
- Duplicating Keys from Photographs
- Understanding Terrorist Behavior
October 2008
- Friday Squid Blogging: Long-Arm Squid Caught by Japanese Fishermen
- Podcast Interview with Me
- Keeping America Safe from Terrorism by Monitoring Distillery Webcams
- UPC Switching Scam
- Horrible Identity Theft Story
- Movie-Plot Threat: Terrorists Using Twitter
- TSA News
- The Skein Hash Function
- Keeping Contraband Out of Prisons
- Rubber-Hose Cryptanalysis
- Barack Obama Discusses Security Trade-Offs
- Friday Squid Blogging: Data Squid
- Schneier on Security Book Review
- ANSI Cyberrisk Calculation Guide
- Remotely Eavesdropping on Keyboards
- Kip Hawley Responds to My Airport Security Antics
- Terrorists and Child Porn, Oh My!
- Terrorist Fear Mongering Seems to be Working Less Well, Part II
- ID Cards for Port Workers
- Quantum Cryptography
- "In Case of Terrorist Attack, Do Not Discard Brain"
- The Psychology of Con Men
- Friday Squid Blogging: Giant Squid in The Onion
- Taser-Proof Clothing
- Me Helping Evade Airport Security
- Designing a Malicious Processor
- How to Write Injection-Proof SQL
- Dr. Dobb's Interview
- NSA's Warrantless Eavesdropping Targets Innocent Americans
- Terrorist Fear Mongering Seems to be Working Less Well
- New Chip-and-Pin Scam in the UK
- Does Risk Management Make Sense?
- Speeding up WiFi Hacking with Hardware Accelerators
- Clever Counterterrorism Tactic
- Threat Modeling at Microsoft
- Friday Squid Blogging: Natural Squid Steganography
- The More Things Change, the More They Stay the Same
- Data Mining for Terrorists Doesn't Work
- Nonviolent Activists Are Now Terrorists
- "New Attack" Against Encrypted Images
- Chinese Monitoring Skype Messages
- Do-Not-Call Lists
- The Seven Habits of Highly Ineffective Terrorists
- Clickjacking
- New Cross-Site Request Forgery Attacks
- Friday Squid Blogging: Close-Up of a Long-Finned Squid Tentacle
- Article in the Irish Times
- Another Article on Chemical Plant Security and Externalities
- Taleb on the Limitations of Risk Management
- Bank Robber Hires Accomplices on Craigslist
- "Scareware" Vendors Sued
- MI6 Camera—Including Secrets—Sold on eBay
- Hand Grenades as Weapons of Mass Destruction
September 2008
- How to Clone and Modify E-Passports
- Hot Dogs are Not Bombs
- Talk to the TSA
- Security Maxims
- Friday Squid Blogging: Graffiti Squid
- Friday Squid Blogging: International Squid Cookbook
- Your Own Personal Robot Voyeur
- Thoughtcrime
- $20M Cameras at New York's Freedom Tower are Pretty Sophisticated
- Sarah Palin's E-Mail
- The Two Classes of Airport Contraband
- India Using Brain Scans to Prove Guilt in Court
- Friday Squid Blogging: Dissecting a Giant Squid
- Schneier Interview in Telecom Asia
- Unlocking Doors Over the Internet
- TSA Employees Bypassing Airport Screening
- The Pentagon's World of Warcraft Movie-Plot Threat
- The NSA Teams Up with the Chinese Government to Limit Internet Anonymity
- NSA Snooping on Cell Phone Calls
- GPS Spoofing
- Fear of Terrorism Could Cause Psychosomatic Epidemic
- UK Ministry of Defense Loses Memory Stick with Military Secrets
- Change Your Name and Avoid the TSA Watchlist
- New Book: Schneier on Security
- Adi Shamir's Cube Attack Paper is Online
- Friday Squid Blogging: The Mystery of Humboldt Squid Beaks
- The Doghouse: Tornado Plus Encrypted USB Drive
- Cost/Benefit of Terrorism Security
- Turning off Fire Hydrants in the Name of Terrorism
- DNA Matching and the Birthday Paradox
- Mythbusters Episode on RFID Security Nixed
- Secret Military Technology
- News from the Rock Phish Gang
- Gait Analysis from Satellite
- Identity Farming
- Bumblebees Making Security Trade-Offs
- BT, Phorm, and Me
- Friday Squid Blogging: Colossal Squid was a Lethargic Blob
- Contest: Cory Doctorow's Cipher Wheel Rings
- Using Shredded Checks as Packaging Material
- Privacy Policies: Perception vs. Reality
- Movie-Plot Threats in the Guardian
- Diaries Written in Code
- Sucking Data off of Cell Phones
- Software to Facilitate Retail Tax Fraud
- Security ROI
- My LA Times Op Ed on Photo ID Checks at Airport
August 2008
- Friday Squid Blogging: Translucent Squid
- Another Voting Machine Cartoon
- A British Bank Bans a Man's Password
- Border Gateway Protocol (BGP) Attacks
- The TSA Told You That Liquids Are Dangerous
- Diebold Finally Admits its Voting Machines Drop Votes
- Virus Infects the Space Station
- Doctoring Photographs without Photoshop
- Full Disclosure and the Boston Farecard Hack
- Red Light Cameras Don't Work
- Friday Squid Blogging: Giant Squids on Exhibit at the Smithsonian
- Monitoring P2P Networks
- MI5 on Terrorist Profiling
- TSA Follies
- Nice Article on Personal Surveillance
- A Security Assessment of the Internet Protocol
- Mental Illness and Murder
- Adi Shamir's Cube Attacks
- Cyberattack Against Georgia Preceded Real Attack
- The Continuing Cheapening of the Word "Terrorism"
- Air Force Suspends Cyber-Command
- Friday Squid Blogging: Talking Squids in Outer Space
- XKCD on Voting Machine Security
- UK Police Seize War on Terror Board Game
- Kids with Cell Phones in Emergencies
- Data Mining to Detect Pump-and-Dump Scams
- The Risk of Anthrax
- UK National Risk Register
- Flying Without ID
- Memo to the Next President
- Bypassing Microsoft Vista's Memory Protection
- Amber Alerts As Security Theater
- Friday Squid Blogging: Squid Fables
- Are the Chinese Olympics a Trap?
- DMCA Does Not Apply to U.S. Government
- UK Electronic Passport Cloned
- Indictments Against Largest ID Theft Ring Ever
- Hacking Mifare Transport Cards
- Security Idiocy Story
- NSA Forms
- Laptop with Trusted Traveler Identities Stolen
- Italians Use Soldiers to Prevent Crime
- Gary McKinnon
- Random Killing on a Canadian Greyhound Bus
- Schneier Misquote
- Friday Squid Blogging: Jumbo Squid Photo
- U.S. Government Policy for Seizing Laptops at Borders
- Suspect in 2001 Anthrax Attacks Kills Self
- Terrorists Using Open Wireless Networks
July 2008
- Why You Should Never Talk to the Police
- 3,000 Blank British Passports Stolen
- Social Engineering
- TSA Proud of Confiscating Non-Dangerous Item
- World War II Deception Story
- The DNS Vulnerability
- Software Liabilities and Free Software
- Write-Once Read-Many Memory Cards
- Friday Squid Blogging: Burning Squid
- Schneier Interviewed by RU Sirius
- Washington Post Comments on Terrorist Plots
- Open Source Laptop Tracking Service
- Anti-Terrorism Stupidity at Yankee Stadium
- Information Security and Liabilities
- Speed Cameras Record Every Car
- Washington DC Metro Farecard Hack
- The Case of the Stolen BlackBerry and the Awesome Chinese Hacking Skills
- Scary Knife Makes for Great Newspaper Headlines
- Cost/Benefit Analysis of Airline Security
- Friday Squid Blogging: Researching the Reproductive Habits of Giant Squids
- Funny Radio Skit on Identity Theft
- Midazolam as a Non-Lethal Weapon
- TrueCrypt's Deniable File System
- Locksmiths Hate Computer Geeks who Learn Lockpicking
- Homeland Security Cost-Benefit Analysis
- Wednesday Squid Blogging: Giant Squid Dissection Live on the Web
- Disgruntled Employee Holds San Francisco Computer Network Hostage
- Congratulations to our Millionth Terrorist!
- Using a File Erasure Tool Considered Suspicious
- Man-in-the-Middle Attacks
- Unbreakable Fighting Umbrellas
- Daniel Solove on the New FISA Law
- Chinese Cyber Attacks
- Friday Squid Blogging: Rising Squid Populations off the Coast of Rhode Island
- Security Cartoon
- Good Essay on TSA Stupidity
- Schneier on Security and Privacy at Supernova
- Exploiting the War on Photography
- George Carlin on Airport Security
- The Continued Cheapening of the Word "Terrorism"
- Sunglasses that Hide your Face from Cameras
- Automatic Profiling Is Useless
- Friday Squid Blogging: Giant Squid Found off Santa Cruz Coast
- Time Bomb Neckties
- Encrypting Disks
- Hundreds of Thousands of Laptops Lost at U.S. Airports Annually
- Random Stupidity in the Name of Terrorism
- Browser Insecurity
- Dan Wallach on Electronic Voting Machines
- Nugache Worm Writer Arrested
- Kill Switches and Remote Control
June 2008
- Pentagon Consulting Social Scientists on Security
- Security and Human Behavior
- Top Ten Anti-Terrorism Patents
- Friday Squid Blogging: Rising Fuel Costs Halt Japanese Squid Industry
- Schneier Interview in The Edge
- Carrier Pigeons Bringing Contraband into Prisons
- CCTV Cameras
- Fever Screening at Airports
- Using Google Earth to Find Unguarded Houses
- Confused Security Reasoning
- IT Attacks: Insiders vs. Outsiders
- Liquid Ban Gone Weird
- New Technology to Detect Chemical, Biological, and Explosive Agents
- Friday Squid Blogging: Contaminated Squids
- Dilbert on Workplace Surveillance
- Underhanded Implementation of RC4
- Hacking a Coffee Machine
- Eavesdropping on Encrypted Compressed Voice
- Security Through Obscurity
- Magnetic Ring Attack on Electronic Locks
- LifeLock and Identity Theft
- Ransomware
- Botnets as a Business
- Friday Squid Blogging: Cuttlefish Embryos Can See
- Article on Schneier
- "Bruce Schneier and the King of the Crabs"
- Top Secret Al Qaeda Documents Left on London Train
- Kaspersky Labs Trying to Crack 1024-bit RSA
- Secrecy , the Movie
- New TSA ID Requirement
- Faketv 1
- Bus Defended Against Terrorists Who Want to Reenact the Movie Speed
- Sikhs Can Carry Knives on Airplanes in India
- Great Fear-Mongering Product: Subway Emergency Kit
- Framing Computers Under the DMCA
- Schneier Motivational Poster
- Friday Squid Blogging: Giant Squid in The Onion
- The Onion on Airport Security and Voting
- Schneier Interview
- Clever Museum Theft
- Clever Micro-Deposit Scam
- The War on Photography
- More on Airplane Seat Cameras
- The ID Divide
- Filming in DC's Union Station
- Fax Signatures
- The War on T-Shirts
- E-Mail After the Rapture
- Did the Chinese PLA Attack the U.S. Power Grid?
May 2008
- Friday Squid Blogging: 500-Pound Giant Squid Caught Off Australia
- Airline Fees and Security
- Electronic Crime Scene Investigation Handbook
- Bletchley Park May Close Due to Lack of Funds
- Vengeance
- TPM to End Piracy
- Built-in Windows Command-Line Security Tools
- Spray-On Explosive Detector
- Tracking People with their Mobile Phones
- Dan Geer on Security, Monoculture, Metrics, Evolution, Etc.
- Nasal Spray Increases Trust for Strangers
- How to Sell Security
- Friday Squid Blogging: Never Poke a Squid
- The Onion on 9/11 Conspiracy Theories
- More Schneier Talks
- Fermilab Code
- UK Wants to Monitor All Phone Calls and E-mails
- Surveillance in China
- BlackBerry Giving Encryption Keys to Indian Government
- Risk and Culture
- Our Data, Ourselves
- Spying on Computer Monitors Off Reflective Objects
- Airlines Profiting from TSA Rules
- Hijacker Working at Heathrow Airport
- Random Number Bug in Debian Linux
- Friday Squid Blogging: Tentacle Arm
- Terrorists Attacking via Air Conditioners
- Crossing Borders with Laptops and PDAs
- Crypto-Gram Tenth Anniversary Issue
- Third Annual Movie-Plot Threat Contest Winner
- The Ethics of Vulnerability Research
- U.S. Air Force Considers Creating its Own Botnet
- What Is the Comprehensive National Cybersecurity Inititative?
- Interesting Microsoft Patent Application
- Terrorism as a Tax
- Friday Squid Blogging: Squid Fishing Lures
- Schneier Talks
- Making Security Cuddly
- Cell Phone Spying
- History of the U.S. Surveillance Debate
- Tourists, Not Terrorists
- Third Annual Movie-Plot Threat Contest Semi-Finalists
- Al Qaeda Threat Overrated
- London's Cameras Don't Reduce Crime
- State Department Loses Hundreds of Laptops
- Dual-Use Technologies and the Equities Issue
- Security Engineering , by Ross Anderson
- The Doghouse: Passwordsafe.com
- Friday Squid Blogging: Squid Fiction
- Friday Squid Blogging: They're Defrosting a Colossal Squid in New Zealand
- Schneier Interviews
- Protect Your Macintosh Copies Available
- Sky Marshals on the No-Fly List
- What to Worry About
- Heroin vs. Terrorism
April 2008
- Microsoft Has Developed Windows Forensic Analysis Tool for Police
- DHS "Neighborhood Watch" Hoax
- SQL Injection Attacks Against Automatic License Plate Scanners
- Virtual Kidnapping
- More Insane Police Photo Hysteria
- Cyber Espionage
- Boring Jobs Dull the Mind
- Friday Squid Blogging: Video of Squid Spawning
- Protect Your Laptop Screen from Roving Eyes
- Identity Theft from the Dead
- Designing Processors to Support Hacking
- Hacking ISP Error Pages
- Reverse-Engineering Exploits from Patches
- Software that Assesses Security Risks to Transportation Networks
- Airport Security Game
- The RSA Conference
- Giving Up Passwords for Chocolate
- Chertoff Says Fingerprints Aren't Personal Data
- Friday Squid Blogging: Squid Cartoons
- Friday Squid Blogging: Squid Kite
- Surveillance Camera Photos
- Oklahoma Data Leak
- Risk Preferences in Chimpanzees and Bonobos
- Comparing Cybersecurity to Early 1800s Security on the High Seas
- Our Inherent Capability for Evil
- More RIPA Creep
- Drugs in Prisons
- Pentagon May Issue Pocket Lie Detectors to Afghan Soldiers
- People and Security Rules
- Friday Squid Blogging: Squidpunk
- Friday Squid Blogging: Humboldt Squid Invasion
- Seat Belt Usage and Compensating Behavior
- Bulk Text Messaging
- Overestimating Threats Against Children
- Tracking Vehicles through Tire Pressure Monitors
- NSA on the Enigma
- College Degrees in Homeland Security
- NSA's Linux
- The Feeling and Reality of Security
- Third Annual Movie-Plot Threat Contest
- The Ineffectiveness of Security Cameras
- Internet Censorship
- Friday Squid Blogging: Squid Beaks for Artificial Limbs?
- Another Schneier Interview
- Terroristic Threatening
- KeeLoq Still Broken
- The Liquid Bomb
- Labyrinth Security Lock
- Would-Be Bomber Caught at Orlando Airport
- 1967 Article on Data Privacy and Security
- Australia May Outlaw Laser Pointers
- Outsourcing Passports
- German Minister's Fingerprint Published
- For a Safe Night's Sleep
- Bottle Liquid Scanners
March 2008
- Church's Pastor Is an ID Thief
- N-DEx National Intelligence System
- Friday Squid Blogging: Plastinated Squid
- Interviews and Podcasts
- Speeding Tickets and Agenda
- Ten Security Land Mines
- Web Entrapment
- Science Fiction Writers Offer Homeland Security Advice
- Malware Targeted Against Pro-Tibet Groups
- New Cyber-Security Czar
- Hypnotist Thief in Italy
- NSA's Domestic Spying
- Craigslist Scam
- Martin Hellman on the Invention of Public-Key Cryptography
- The Security Mindset
- Paper Enigma Machine
- Security Perception: Fear vs Anger
- Quantum Computing: Hype vs. Reality
- Friday Squid Blogging: Video of Vampire Squid
- MC Frontalot Raps About Encryption
- Fraud Due to a Credit Card Breach
- Wacky Airplane Security Idea
- Detecting Gunshots
- Border Security: the Weakest Link
- More Threat Modeling at Microsoft
- The Continuing Slide Towards Thoughtcrime
- Bomb Squad Defuses Turnip
- Risk and the Brain
- Security in Montana
- Camera that Sees Under Clothes
- Friday Squid Blogging: Squid Craft Projects
- Surveillance Cameras
- London Tube Smartcard Cracked
- Stealing from Bookstores
- Physically Hacking Windows Computers via FireWire
- ENISA Report on Security and Economics
- Chip and PIN Vulnerable
- Hacking Medical Devices
- German Courts Rule on Spying in Cyberspace
- Searching for Terrorists in World of Warcraft
- FAA Badges Missing
- Privacy and Power
- Israel Implementing IFF System for Commercial Aircraft
- Security Products: Suites vs. Best-of-Breed
- Friday Squid Blogging: Squid T-Shirts
- Me in the News
- My Talk on "Dual Use Technologies"
- TSA's Ideal Laptop Bag
- Progress
- TSA Gangstaz
- Risk of Knowing Too Much About Risk
- SurveillanceSaver
- Creating and Entrapping Terrorists
- Google Vulnerability Scanner
- TrueCrypt 5.0
- InfoWorld Article About Me
- Good Uses for RFID Chips
February 2008
- Friday Squid Blogging: Giant Snow Squid
- Another Interview with Me
- Kids and Lying
- More War on the Unexpected
- Why Some Terrorist Attacks Succeed and Others Fail
- Toy X-Ray Machine for Kids
- Third Parties Controlling Information
- Liquid Bomb
- Fear of Internet Predators Largely Unfounded
- Research on Malware Distribution
- The Doghouse: Drecom
- Forensic Printer Codes May Be Illegal in Europe
- Friday Squid Blogging: Camouflage in Squids
- Video Interview of Me
- Amtrak to Start Passenger Screening
- Cryptanalysis of A5/1
- Cold Boot Attacks Against Disk Encryption
- U.S. Post Office to Enable Wholesale Surveillance of Mail
- Foreign Hackers Stealing American Health Care Records
- Hijacking in New Zealand
- Spending Money on the Wrong Security Threats
- Benevolent Worms
- Fascinating Social Engineering Story
- Sonic Weapon
- Friday Squid Blogging: Valentine Squidograms in Second Life
- DHS in The Onion
- HotPlug
- Credentica
- Embedding Iris Watermarking in Photos
- Latest News on the War on the Unexpected
- DHS Warns of Female Suicide Bombers
- Giving Drivers Licenses to Illegal Immigrants
- U.S. Customs Seizing Laptops
- Lock-In
- How the MPAA Might Enforce Copyright on the Internet
- Improvements in Face Recognition
- Friday Squid Blogging: The Real Cause of the Cable Breaks
- The Onion on Terror
- Me at Linux.conf.au
- Mujahideen Secrets 2
- Cyber Storm Details
- Heavily Armed Officers on New York City Subways
- Cloned Trucks
- VoIP Threats
- Fourth Undersea Cable Failure in Middle East
- UK Two-Tier Tax Security System
- A Good Security Investment by DHS
- Little People Hiding in Luggage
- NSA Monitoring U.S. Government Internet Traffic
- Friday Squid Blogging: Cocaine Smuggled in Giant Squid
- Think Illegal Downloading Is Free?
- Detecting Nuclear Weapons Using the Cell Phone Network
- Bavarian Government Wants to Intercept Skype Calls
January 2008
- Leaked UK Government Document on National ID
- Psychology Today on Risk Assessment
- FBI Knows Identity of Storm Worm Writers
- Data as Pollution
- Terrorist Tradecraft
- TSA Misses the Point, Again
- Airplane Stowaways
- Security vs. Privacy
- The Estonia Cyberwar
- Ethics of Autonomous Military Robots
- Norbert Wiener Award
- Friday Squid Blogging: National Geographic Colossal Squid Photo
- Cameras in the New York City Subways
- Continuing Battles in the War on the Unexpected
- Gun Slips Through TSA Airport Checkpoint
- Al Qaeda Recruiting Non-Muslims
- Unshredding
- Hacking Thermostats
- Hacking Power Networks
- Combined Taser and MP3 Player
- SmartWater Works
- Dutch RFID Transit Card Hacked
- Friday Squid Blogging: National Geographic Giant Squid Photo
- Another Schneier Interview
- Anti-Missile Technology on Commercial Aircraft
- Locked Call Boxes and Banned Geiger Counters
- Hacking Polish Trams
- MySpace and U.S. Attorneys General Agree to Fight Sexual Predators
- Fear Is Unhealthy
- Rudy Giuliani on Terrorism Security
- Corporate Spying
- Social-Engineering Bank Robbery
- Hiding Crib Notes on a Bottle Label
- My Open Wireless Network
- Modeling Urban Panic
- Business Week on the Department of Homeland Security
- Friday Squid Blogging: Large Mechanical Squid
- Patrick Smith on Aviation Security
- NSA Backdoors in Crypto AG Ciphering Machines
- Consumer Reports on Aviation Security and the TSA
- Five-Year-Old Boy Detained by the TSA
- Privacy International's 2007 Report
- Swedish Army Loses Classified Information on Memory Stick
- Your Brain on Fear
- Passport Fraud
- How Well "See Something, Say Something" Actually Works
- Computerworld Australia Interview
- Hacking the Boeing 787
- U.S. Army Installing Apple Computers
- New York Times Magazine on Electronic Voting Machines
- Friday Squid Blogging: Lolcat with Squid
- "Responsible Behavior"
- Lessons from the Ft. Dix Terrorist Plotters
- Airport Behavioral Profiling Leads to an Arrest
- Is Sears Engaging in Criminal Hacking Behavior?
- Demos Report on National Security
- War on Terror Over in the UK
- The Cybercrime Economy
- Wrongly Accused