The Curious Engineer

Schneier on Security

2010–2012

1,413 posts

← 2008–2009 2013–2015 →

2012 451

December 2012

  1. Terms of Service as a Security Threat
  2. Friday Squid Blogging: William Gilly, Squid Researcher
  3. I Seem to Be a Verb
  4. Becoming a Police Informant in Exchange for a Lighter Sentence
  5. Breaking Hard-Disk Encryption
  6. Public Shaming as a Security Measure
  7. Cryptography Engineering Available as an eBook
  8. Hackers Use Backdoor to Break System
  9. Peruvian Spider Species Creates Decoys
  10. Phishing via Twitter
  11. Friday Squid Blogging: Laughing Squid
  12. This Week's Overreactions
  13. Amazon Replacement-Order Scam
  14. China Now Blocking Encryption
  15. Information-Age Law Enforcement Techniques
  16. Nasty Samsung Phone Exploit
  17. Possible Decryption of World War II Pigeon Message
  18. Friday Squid Blogging: Giant PVC Squid
  19. Book Review: Against Security
  20. The History of Security Economics
  21. The Internet in North Korea
  22. QR Code Scams
  23. Detecting Edited Audio
  24. Drone Flights Over the US
  25. The National Cyber Security Framework Manual
  26. Dictators Shutting Down the Internet
  27. Bypassing Two-Factor Authentication
  28. Buy Your Own ATM Skimmer for $3000
  29. Squids on the Economist Cover
  30. Comedy and Cryptography
  31. Roger Williams' Cipher Cracked
  32. Feudal Security

November 2012

  1. Friday Squid Blogging: Possible Squid Eyeball Found in Florida
  2. IT for Oppression
  3. Advances in Attacking ATMs
  4. James Bond Movie-Plot Threats
  5. The Psychology of IT Security Trade-offs
  6. Classified Information Confetti
  7. Hackback
  8. Liars and Outliers Ebook 50% Off and DRM-Free
  9. Homeland Security Essay Contest
  10. Friday Squid Blogging: Another Squid Comic
  11. Preventing Catastrophic Threats
  12. Cell Phone Surveillance
  13. Decrypting a Secret Society's Documents from the 1740s
  14. Anonymous Claims it Sabotaged Rove Election Hacking
  15. E-Mail Security in the Wake of Petraeus
  16. Security Theater in American Diplomatic Missions
  17. Friday Squid Blogging: Vampire Squid
  18. Jamming 4G Cell Networks
  19. Stealing VM Keys from the Hardware Cache
  20. The Terrorist Risk of Food Trucks
  21. Webmail as Dead Drop
  22. Keys to the Crown Jewels Stolen?
  23. Free Online Cryptography Course
  24. Fairy Wren Passwords
  25. Encryption in Cloud Computing
  26. Friday Squid Blogging: Squid Ink as a Condiment
  27. How To Tell if Your Hotel Guest Is a Terrorist
  28. How Terrorist Groups Disband
  29. Gary McGraw on National Cybersecurity
  30. Micromorts
  31. New SSL Vulnerability
  32. Regulation as a Prisoner's Dilemma
  33. Three-Rotor Enigma Machine Up for Auction
  34. Wanted: RSA Exhibitor for Book Signing
  35. New Vulnerability Against Industrial Control Systems
  36. New Jersey Allows Voting by E-Mail
  37. New WWII Cryptanalysis
  38. On the Ineffectiveness of Airport Security Pat-Downs
  39. Loopholes
  40. Friday Squid Blogging: Squid Costume
  41. Peter Neumann Profile

October 2012

  1. Doping in Professional Sports
  2. Rap News on Internet Surveillance
  3. Dan Ariely on Dishonesty
  4. Detecting Fake Hurricane Photographs
  5. Protecting (and Collecting) the DNA of World Leaders
  6. Sony Playstation 3 Master Key Leaked
  7. Friday Squid Blogging: Squid from the Power Ranger Universe
  8. Hacking TSA PreCheck
  9. The Risks of Trusting Experts
  10. Risks of Data Portability
  11. Weaponizing Office Supplies
  12. Camera Jammer that Protects Licence Plates
  13. Friday Squid Blogging: Squid Insurance
  14. Stoking Cyber Fears
  15. Analysis of How Bitcoin Is Actually Used
  16. Genetic Privacy
  17. Studying Zero-Day Attacks
  18. Apple Turns on iPhone Tracking in iOS6
  19. Master Keys
  20. Another Liars and Outliers Review
  21. Friday Squid Blogging: Squid Car
  22. "Ask Nicely" Doesn't Work as a Security Mechanism
  23. The Insecurity of Networks
  24. Story of a CIA Burglar
  25. New Developments in Captchas
  26. Friday Squid Blogging: Giant Squid Engraving from the 1870s
  27. When Will We See Collisions for SHA-1?
  28. Maps Showing Spread of ZeroAccess Botnet
  29. Tradecraft and Terrorism
  30. Authentication Stories
  31. Keccak is SHA-3
  32. 2013 U.S. Homeland Security Budget
  33. Security Question Cartoon
  34. Scary Android Malware Story

September 2012

  1. Friday Squid Blogging: Octonaut
  2. NPR on Biometric Data Collection
  3. Replacing Alice and Bob
  4. Using Agent-Based Simulations to Evaluate Security Systems
  5. Quantum Cryptography
  6. Homomorphic Encryption
  7. Security Vulnerability in Windows 8 Unified Extensible Firmware Interface (UEFI)
  8. SHA-3 to Be Announced
  9. Friday Squid Blogging: Beached Firefly Squid
  10. Another Review of Liars and Outliers
  11. Accountable Algorithms
  12. The NSA and the Risk of Off-the-Shelf Devices
  13. Analysis of PIN Data
  14. Recent Developments in Password Cracking
  15. Diamond Swallowing as a Ruse
  16. Friday Squid Blogging: Giant Squid Museum
  17. Schneier on Security on Elementary
  18. Man-in-the-Middle Bank Fraud Attack
  19. Ugnazi
  20. Estimating the Probability of Another 9/11
  21. Steganography in the Wild
  22. Stopping Terrorism
  23. A Real Movie-Plot Threat Contest
  24. New Attack Against Chip-and-Pin Systems
  25. Security at the 9/11 WTC Memorial
  26. Another Stuxnet Post
  27. Friday Squid Blogging: Controlling Squid Chromatophores with Music
  28. Hacking Marathon Races
  29. CSOs/CISOs Wanted: Cloud Security Questions
  30. Database of 12 Million Apple UDIDs Leaked
  31. Wall Street Journal Review of Liars and Outliers
  32. Hacking Brain-Computer Interfaces
  33. Eye Twitch Patterns as a Biometric

August 2012

  1. Friday Squid Blogging: "The Seasick Squid"
  2. Conversation about Liars and Outliers on The WELL
  3. The Psychological Effects of Terrorism
  4. Shared Lock
  5. The Importance of Security Engineering
  6. Fear and Imagination
  7. Friday Squid Blogging: Squid Sacrifices Arms to Avoid Predators
  8. Internet Safety Talking Points for Schools
  9. Fear and How it Scales
  10. Exaggerating Cybercrime
  11. Video Filter that Detects a Pulse
  12. Five "Neglects" in Risk Management
  13. Poll: Americans Like the TSA
  14. Is iPhone Security Really this Good?
  15. Help Cryptanalyze Gauss
  16. Passive Sensor that Sees Through Walls
  17. The View from an Israeli Security Checkpoint
  18. Friday Squid Blogging: Efforts to Film a Live Giant Squid
  19. $200 for a Fake Security System
  20. Rudyard Kipling on Societal Pressures
  21. An Analysis of Apple's FileVault 2
  22. Lousy Password Security on Tesco Website
  23. Sexual Harassment at DefCon (and Other Hacker Cons)
  24. Liars and Outliers on Special Discount
  25. Schneier in the News
  26. Measuring Cooperation and Defection using Shipwreck Data
  27. Cryptocat
  28. Preventive vs. Reactive Security
  29. U.S. and China Talking About Cyberweapons
  30. Friday Squid Blogging: Dumpling Squid
  31. Termite Suicide Bombers
  32. 11-Year-Old Bypasses Airport Security
  33. Rolling Stone Magazine Writes About Computer Security
  34. Detecting Spoofed GPS Signals
  35. Chinese Gang Sells Fake Professional Certifications
  36. Yet Another Risk of Storing Everything in the Cloud
  37. Peter Swire Testifies on the Inadequacy of Privacy Self-Regulation
  38. Verifying Elections Using Risk-Limiting Auditing
  39. Breaking Microsoft's PPTP Protocol
  40. State-by-State Report on Electronic Voting
  41. Friday Squid Blogging: SQUIDS and Quantum Computing
  42. Unsafe Safes
  43. Overreaction and Overly Specific Reactions to Rare Risks
  44. Court Orders TSA to Answer EPIC
  45. Hotel Door Lock Vulnerability
  46. Profile on Eugene Kaspersky
  47. Lone Shooters and Body Armor
  48. On Soft Targets

July 2012

  1. Fake Irises Fool Scanners
  2. Hacking Tool Disguised as a Power Strip
  3. Fear-Mongering at TED
  4. Detroit Bomb Threats
  5. Friday Squid Blogging: Tentacle Doorstop
  6. Liars and Outliers Summed Up in Two Comic Strips
  7. Criminals Using Commercial Spamflooding Services
  8. Police Sting Operation Yields No Mobile Phone Thefts
  9. Making Handcuff Keys with 3D Printers
  10. Implicit Passwords
  11. How the Norwegians Reacted to Terrorism
  12. Friday Squid Blogging: Preserved Squid
  13. Camera-Transparent Plastic
  14. Chinese Airline Rewards Crew for Resisting Hijackers
  15. Remote Scanning Technology
  16. Friday Squid Blogging: Barbecued Squid—New Summer Favorite
  17. Hacking BMW's Remote Keyless Entry System
  18. All-or-Nothing Access Control for Mobile Phones
  19. Dropped USB Sticks in Parking Lot as Actual Attack Vector
  20. Petition the U.S. Government to Force the TSA to Follow the Law
  21. Cryptanalyze the Agrippa Code
  22. Attacking Fences
  23. Sensible Comments about Terrorism
  24. Students Hack DHS Drone
  25. Friday Squid Blogging: Dissecting a Squid
  26. Me on Military Cyberattacks and Cyberweapons Treaties
  27. Naming Pets
  28. So You Want to Be a Security Expert
  29. Commercial Espionage Virus
  30. On Fear
  31. WEIS 2012

June 2012

  1. Friday Squid Blogging: Another Giant Squid Found
  2. FireDogLake Book Salon for Liars and Outliers
  3. On Securing Potentially Dangerous Virology Research
  4. Nuclear Fears
  5. Top Secret America on the Post-9/11 Cycle of Fear and Funding
  6. Russian Nuclear Launch Code Backup Procedure
  7. E-Mail Accounts More Valuable than Bank Accounts
  8. Stratfor on the Phoenix Serial Flashlight Bomber
  9. Resilience
  10. Op-ed Explaining Why Terrorism Doesn't Work
  11. Friday Squid Blogging: Giant Mutant Squid at the Queen's Jubilee
  12. Colbert Report on the Orangutan Cyberthreat
  13. Economic Analysis of Bank Robberies
  14. Far-Fetched Scams Separate the Gullible from Everyone Else
  15. Apple Patents Data-Poisoning
  16. Rand Paul Takes on the TSA
  17. Switzerland National Defense
  18. Attack Against Point-of-Sale Terminal
  19. The Failure of Anti-Virus Companies to Catch Military Malware
  20. Britain's Prince Philip on Security
  21. Honor System Farm Stands
  22. Friday Squid Blogging: Woman's Mouth Inseminated by Cooked Squid
  23. FireDogLake Book Salon for Liars and Outliers
  24. Rare Rational Comment on al Qaeda's Capabilities
  25. Cheating in Online Classes
  26. Cyberwar Treaties
  27. Teaching the Security Mindset
  28. High-Quality Fake IDs from China
  29. Israel Demanding Passwords at the Border
  30. Changing Surveillance Techniques for Changed Communications Technologies
  31. Friday Squid Blogging: Baby Opalescent Squid
  32. The Catastrophic Consequences of 9/11
  33. Homeland Security as Security Theater Metaphor
  34. Ghostery
  35. Security and Human Behavior (SHB 2012)
  36. Interesting Article on Libyan Internet Intelligence Gathering
  37. The Unreliability of Eyewitness Testimony
  38. Flame
  39. Friday Squid Blogging: Mimicking Squid Camouflage
  40. Obama's Role in Stuxnet and Iranian Cyberattacks
  41. The Vulnerabilities Market and the Future of Security

May 2012

  1. Tax Return Identity Theft
  2. Bar Code Switching
  3. The Psychology of Immoral (and Illegal) Behavior
  4. The Problem of False Alarms
  5. Backdoor Found (Maybe) in Chinese-Made Military Silicon Chips
  6. Interview with a Safecracker
  7. My Last Post About Ethnic Profiling at Airports
  8. Friday Squid Blogging: Squid Ink from the Jurassic
  9. The Explosive from the Latest Foiled Al Qaeda Underwear Bomb Plot
  10. The Ubiquity of Cyber-Fears
  11. The Banality of Surveillance Photos
  12. Lessons in Trust from Web Hoaxes
  13. Privacy Concerns Around "Social Reading"
  14. Racism as a Vestigal Remnant of a Security Mechanism
  15. Security Incentives and Advertising Fraud
  16. Portrait of a Counterfeiter
  17. Friday Squid Blogging: Squid Scalp Massager
  18. Kip Hawley Reviews Liars and Outliers
  19. Cybersecurity at the Doctor's Office
  20. Rules for Radicals
  21. USB Drives and Wax Seals
  22. Security Vulnerabilities in Airport Full-Body Scanners
  23. U.S. Exports Terrorism Fears
  24. The Trouble with Airport Profiling
  25. Friday Squid Blogging: New Book on Squid
  26. Smart Phone Privacy App
  27. Security Fail
  28. RuggedCom Inserts Backdoor into Its Products
  29. A Foiled Terrorist Plot
  30. Overreacting to Potential Bombs
  31. Naval Drones
  32. Friday Squid Blogging: Squid Bicycle Parking Sculpture
  33. Tampon-Shaped USB Drive
  34. Facial Recognition of Avatars
  35. Criminal Intent Prescreening and the Base Rate Fallacy
  36. Al Qaeda Steganography
  37. Cybercrime as a Tragedy of the Commons
  38. When Investigation Fails to Prevent Terrorism

April 2012

  1. JCS Chairman Sows Cyberwar Fears
  2. Vote for Liars and Outliers
  3. Friday Squid Blogging: Chesapeake Bay Squid
  4. Attack Mitigation
  5. Biometric Passports Make it Harder for Undercover CIA Officers
  6. Fear and the Attention Economy
  7. Amazing Round of "Split or Steal"
  8. Alan Turing Cryptanalysis Papers
  9. Friday Squid Blogging: Extracting Squid Ink
  10. Liars & Outliers Update
  11. TSA Behavioral Detection Statistics
  12. Dance Moves As an Identifier
  13. Smart Meter Hacks
  14. Password Security at Linode
  15. Stolen Phone Database
  16. Forever-Day Bugs
  17. Outliers in Intelligence Analysis
  18. Hawley Channels His Inner Schneier
  19. How Information Warfare Changes Warfare
  20. Friday Squid Blogging: Squid Fiction
  21. Me at RSA 2012
  22. Disguising Tor Traffic as Skype Video Calls
  23. Bomb Threats As a Denial-of-Service Attack
  24. Brian Snow on Cybersecurity
  25. "Raise the Crime Rate"
  26. A Heathrow Airport Story about Trousers
  27. Teenagers and Privacy
  28. Laptops and the TSA
  29. Friday Squid Blogging: Squid Art
  30. A Systems Framework for Catastrophic Disaster Response
  31. James Randi on Magicians and the Security Mindset
  32. Helen Nissenbaum, Privacy, and the Federal Trade Commission
  33. JetBlue Captain Clayton Osbon and Resilient Security
  34. The Battle for Internet Governance
  35. Lost Smart Phones and Human Nature
  36. Law Enforcement Forensics Tools Against Smart Phones
  37. Computer Forensics: An Example
  38. Buying Exploits on the Grey Market

March 2012

  1. Friday Squid Blogging: How Squid Hear
  2. Summer Schools in Cryptography and Software Security at Penn State
  3. Harms of Post-9/11 Airline Security
  4. SHARCS Conference
  5. The Effects of Data Breach Litigation
  6. Congressional Testimony on the TSA
  7. Rare Spanish Enigma Machine
  8. Friday Squid Blogging: Giant Squid Eyes
  9. The Economist Debate on Airplane Security
  10. Can the NSA Break AES?
  11. Another Liars and Outliers Excerpt
  12. Unprinter
  13. Hacking Critical Infrastructure
  14. Avi Rubin on Computer Security
  15. Australian Security Theater
  16. Friday Squid Blogging: Squid-Shaped USB Drive
  17. Bitcoin Security Musings
  18. Non-Lethal Heat Ray
  19. Assorted Schneier News Stories
  20. More "Liars and Outliers" Links
  21. On Cyberwar Hype
  22. A Negative Liars and Outliers Review
  23. The Security of Multi-Word Passphrases
  24. Video Shows TSA Full-Body Scanner Failure
  25. Jamming Speech with Recorded Speech
  26. Friday Squid Blogging: Humboldt Squid Can Dive to 1.5 km
  27. Liars and Outliers : Book Excerpt
  28. Cloud Computing As a Man-in-the-Middle Attack
  29. NSA's Secure Android Spec
  30. How Changing Technology Affects Security
  31. The Keywords the DHS Is Using to Analyze Your Social Media Posts
  32. Comic: Movie Hacking vs. Real Hacking
  33. Themes from the RSA Conference
  34. British Anti-Theft Briefcase from the 1960s
  35. Friday Squid Blogging: Squid Vision
  36. Liars and Outliers : The Big Idea
  37. GPS Spoofers
  38. State Department Redacts Wikileaks Cables
  39. Detect Which Social Networking Sites Website Visitors Are Logged Into

February 2012

  1. FBI Special Agent and Counterterrorism Expert Criticizes the TSA
  2. "Cyberwar Is the New Yellowcake"
  3. Liars and Outliers : Interview on The Browser
  4. U.S. Federal Court Rules that it Is Unconstitutional for the Police to Force Someone to Decrypt their Laptop
  5. Friday Squid Blogging: Squid Can Fly to Save Energy
  6. Liars and Outliers News
  7. Press Mentions
  8. Mention of Cryptography in a Rap Song
  9. Computer Security when Traveling to China
  10. Another Piece of the Stuxnet Puzzle
  11. Mobile Malware Is Increasing
  12. John Nash's 1955 Letter to the NSA
  13. "1234" and Birthdays Are the Most Common PINs
  14. Covert Communications Channel in Tarsiers
  15. Friday Squid Blogging: Squid Desk Lamp
  16. What Is a Suspicious-Looking Package, Anyway?
  17. Self-Domestication in Bonobos and Other Animals
  18. Cryptanalysis of Satellite Phone Encryption Algorithms
  19. Lousy Random Numbers Cause Insecure Public Keys
  20. Dumb Risk of the Day
  21. The Sudafed Security Trade-Off
  22. SSL Traffic Analysis on Google Maps
  23. Trust Requires Transparency
  24. Liars and Outliers Update
  25. What Happens When the Court Demands You Decrypt a Document and You Forget the Key?
  26. Friday Squid Blogging: Squid's Beard
  27. Captchas
  28. Securing iPads for Exams
  29. Security Implications of "Lower-Risk Aircraft"
  30. Solving the Underlying Economic Problem of Internet Piracy
  31. Error Rates of Hand-Counted Voting Systems
  32. The Failure of Two-Factor Authentication
  33. Friday Squid Blogging: Clothing that Keeps an Exercise Journal
  34. The Problems of Too Much Information Sharing
  35. VeriSign Hacked, Successfully and Repeatedly, in 2010
  36. Cipher Beer
  37. Prisons in the U.S.
  38. The Idaho Loophole

January 2012

  1. Possibly the Most Incompetent TSA Story Yet
  2. Biases in Forensic Science
  3. Liars and Outliers Update
  4. British Tourists Arrested in the U.S. for Tweeting
  5. The Nature of Cyberwar
  6. Password Sharing Among American Teenagers
  7. Evidence on the Effectiveness of Terrorism
  8. Federal Judge Orders Defendant to Decrypt Laptop
  9. Supreme Court Rules that GPS Tracking Requires a Warrant
  10. Research into an Information Security Risk Rating
  11. Using Plant DNA for Authentication
  12. Authentication by "Cognitive Footprint"
  13. The Continued Militarization of the U.S. Police
  14. The Onion on Facebook
  15. Using False Alarms to Disable Security
  16. Going Dark to Protest SOPA/PIPA
  17. Tor Opsec
  18. The Importance of Good Backups
  19. PCI Lawsuit
  20. Friday Squid Blogging: Argentina Attempts a Squid Blockade against the Falkland Islands
  21. Recovering a Hacked Gmail Account
  22. "Going Dark" vs. a "Golden Age of Surveillance"
  23. Abolish the Department of Homeland Security
  24. TSA Cupcake Update
  25. A Theory of Online Jihadist Sites
  26. Apple Split-Key Patent
  27. Protecting Your Privacy at International Borders
  28. Collecting Expert Predictions about Terrorist Attacks
  29. Stealing Source Code
  30. The TSA Proves its Own Irrelevance
  31. Friday Squid Blogging: Squid Skateboards
  32. Time to Patch Your HP Printers
  33. Improving the Security of Four-Digit PINs on Cell Phones
  34. Liars and Outliers News
  35. Newly Released Papers from NSA Journals
  36. Sending Coded Messages with Postage Stamps
  37. Allocating Security Resources to Protect Critical Infrastructure
  38. Applying Game Theory to Cyberattacks and Defenses

2011 447

December 2011

  1. Studying Airport Security
  2. Tying Up Phone Lines as a Cyberattack Tactic
  3. Hacking Marconi's Wireless in 1903
  4. Butt Identification
  5. The Collar Bomb Robbery
  6. Hacking Subway's POS System
  7. Merry Christmas from the TSA
  8. Friday Squid Blogging: Goldman Sachs and the Vampire Squid Metaphor
  9. Santa Hacked
  10. Me on Airport Security
  11. Human Ear Biometric
  12. Giveaway: Liars and Outliers Galleys
  13. Chinese Hacking of iBahn Internet Services
  14. Multiple Protocol Attacks
  15. How to Open a Padlock with a Coke Can
  16. Plasmonics Anti-Counterfeiting Technology
  17. Friday Squid Blogging: Squid Season
  18. Me Speaking on Cryptography in 1997
  19. Cameo in a Rock Video
  20. More on the Captured U.S. Drone
  21. Snow Cone Machines for Homeland Security
  22. The EFF's Sovereign Key Proposal
  23. Investigative Report on "Buckshot Yankee"
  24. Liars and Outliers Galleys
  25. Feeling vs. Reality of Security in Sparrows
  26. Yet More Fear-Mongering from the DHS
  27. Assessing Terrorist Threats to Commercial Aviation
  28. Iranians Capture U.S. Drone
  29. Dumbest Camera Ban Ever
  30. First-Person Account of a TSA Airport Screener
  31. Friday Squid Blogging: Humbolt Squid Mystery Solved
  32. Robbing a Bank as Part of a Penetration Test
  33. Lockable USB Hard Drive
  34. DARPA Unshredding Contest
  35. Skype Security Flaw
  36. Tagging People with Invisible Ink
  37. Security Problems with U.S. Cloud Providers
  38. Recent Developments in Full Disclosure
  39. GCHQ Hacking Contest
  40. Carrier IQ Spyware
  41. Friday Squid Blogging: Squid-Inspired Robot
  42. I Received an Honorary Doctorate
  43. Hacking Printers and Setting Them on Fire
  44. Walls as Security Theater
  45. Full-Disk Encryption Works
  46. Status Report: Liars and Outliers

November 2011

  1. Full Disclosure in Biology
  2. Bad CIA Operational Security
  3. Security Systems as a Marker for High-Value Targets
  4. Shopper Surveillance Using Cell Phones
  5. Spider Webs Contain Ant Poison
  6. The DHS Partners with Major League Soccer to Promote Fear
  7. Friday Squid Blogging: Cephalopod Art Conference
  8. Android Malware
  9. Free Cryptography Class
  10. Hack Against SCADA System
  11. Friday Squid Blogging: Squid Camouflage
  12. A Link between Altruism and Fairness
  13. EU Bans X-Ray Body Scanners
  14. Detecting Psychopaths by their Speech Patterns
  15. Paul Kocher
  16. Sam Harris on Self-Defense
  17. Identity Theft Call Center
  18. More SSL Woes
  19. Remotely Opening Prison Doors
  20. Commentary on Strong Passwords
  21. Advanced Persistent Threat (APT)
  22. Unlocking any iPad2 using a Smart Cover
  23. Cutting Wallets Out of Drunks' Pockets on New York City Subways
  24. Fake Documents that Alarm if Opened
  25. Friday Squid Blogging: Star Trek IV , now with Squid
  26. Weaponized UAV Drones in the Hands of Local Police
  27. Journal Article on Cyberwar
  28. Underage Children on Facebook
  29. DARPA Cyber Colloquium
  30. The Economist on Lying

October 2011

  1. Cell Phone Surveillance System
  2. Another ATM Theft Tactic
  3. Friday Squid Blogging: Video of Kid Eating Squid
  4. Full Extent of the Attack that Compromised RSA in March
  5. XKCD Today
  6. Secret Codes in Bacteria
  7. The Security of SSL
  8. Cracking the Copiale Cipher
  9. Demands from Law Enforcement for Google Data
  10. Twofish Mentioned in Thriller Novel
  11. NSA Acronyms
  12. Blue Coat Products Enable Web Censorship in Syria
  13. Facebook Patent to Track Users Even When They are Not Logged In to Facebook
  14. Friday Squid Blogging: Squid T-Shirt
  15. Google Enables SSL by Default for Search
  16. Random Passwords in the Wild
  17. New Malware: Duqu
  18. Discovering What Facebook Knows About You
  19. Criminal Uses of Crowdsourcing
  20. Friday Squid Blogging: Prehistoric Sentient Squid—Or Not
  21. Burglars Tip Off Police About Bigger Crime
  22. Weird World War II Security Puzzle
  23. Official Malware from the German Police
  24. New Attacks on CAPTCHAs
  25. U.S. Drones Have a Computer Virus
  26. Friday Squid Blogging: Hundreds of Squid Wash Up on Southern California Beaches
  27. Security Seals on Voting Machines
  28. Dilbert on Security Standards
  29. FBI-Sponsored Backdoors
  30. Status Report: Liars and Outliers
  31. Insider Attack Against Diebold Voting Machines
  32. Security Cartoon
  33. National Cybersecurity Awareness Month
  34. Isaac Asimov on Security Theater
  35. HTC Android Vulnerability

September 2011

  1. Friday Squid Blogging: Interesting Squid Recipes
  2. Insecure Chrome Extensions
  3. Making Fake ATMs Using 3D Printers
  4. Problems with Mac OS X Lion Passwords
  5. Tor Arms Race
  6. Friday Squid Blogging: Sex Life of Deep-Sea Squid
  7. Man-in-the-Middle Attack Against SSL 3.0/TLS 1.0
  8. Three Emerging Cyber Threats
  9. An Interesting Software Liability Proposal
  10. U.S.-Australia Cyberwar Treaty
  11. Shifting Risk Instead of Reducing Risk
  12. Complex Electronic Banking Fraud in Malaysia
  13. Pretty Creepy Type of Cyberstalking
  14. The Effectiveness of Plagiarism Detection Software
  15. Friday Squid Blogging: Squid Street Art
  16. Identifying Speakers in Encrypted Voice Communication
  17. Domain-in-the-Middle Attacks
  18. Sharing Security Information and the Prisoner's Dilemma
  19. A Status Report: "Liars and Outliers"
  20. Risk Tolerance and Culture
  21. TSA Administrator John Pistole on the Future of Airport Security
  22. Human Pattern-Matching Failures in Airport Screening
  23. Risk Perception and Terrorism
  24. More 9/11 Retrospectives
  25. ACLU Report on the War on Terror
  26. Friday Squid Blogging: Beautiful Squid Drawings
  27. New Lows in Secret Questions
  28. The Legality of Government Critical Infrastructure Monitoring
  29. Outing a CIA Agent
  30. Optimizing Airport Security
  31. Where Are All the Terrorists?
  32. Friday Squid Blogging: SQUIDS Game
  33. The Efficacy of Post-9/11 Counterterrorism
  34. A Professional ATM Theft
  35. Unredacted U.S. Diplomatic WikiLeaks Cables Published
  36. Forged Google Certificate

August 2011

  1. Job Opening: TSA Public Affairs Specialist
  2. The Effects of Social Media on Undercover Policing
  3. Facebook Privacy Guide
  4. Details of the RSA Hack
  5. Screenshots of Chinese Hacking Tool
  6. Friday Squid Blogging: Squid Fishing in Ulleungdo, Korea
  7. Preventing the Theft of Wire Cutters
  8. The Problem with Using the Cold War Metaphor to Describe Cyberspace Risks
  9. Terrorism in the U.S. Since 9/11
  10. Funniest Joke at the Edinburgh Fringe Festival
  11. Moving 211 Tons of Gold
  12. The Security Risks of Not Teaching Malware
  13. Stealing ATM PINs with a Thermal Camera
  14. Smartphone Keystroke Logging Using the Motion Sensor
  15. Security for Implanted Medical Devices
  16. Cheating at Casinos with Hidden Cameras
  17. Movie-Plot Threat: Open Airplane Cockpit Doors During Bathroom Breaks
  18. How Microsoft Develops Security Patches
  19. Pseudonymity
  20. Friday Squid Blogging: Squid Forks
  21. Looking Backward at Terrorism
  22. The Dilemma of Counterterrorism Policy
  23. Steven Pinker on Terrorism
  24. New Attack on AES
  25. Alarm Geese
  26. Security by Default
  27. Search Redirection and the Illicit Online Prescription Drug Trade
  28. New, Undeletable, Web Cookie
  29. Interview with Me
  30. Friday Squid Blogging: Giant Squid Painted on Canal Narrowboat
  31. Liars and Outliers Cover
  32. Rat that Applies Poison to its Fur
  33. Counterfeit Pilot IDs and Uniforms Will Now Be Sufficient to Bypass Airport Security
  34. Security Flaws in Encrypted Police Radios
  35. Friday Squid Blogging: Smaller Male Squid Have Bigger Sperm
  36. GPRS Hacked
  37. "Taxonomy of Operational Cyber Security Risks"
  38. Free-Riding on Plant Security Countermeasures
  39. MRI Lie Detectors
  40. New Bank-Fraud Trojan
  41. Business Week on The Cyberwar Arms Race
  42. Friday Squid Blogging: Severed Hand is Actually A Dried Squid
  43. XKCD on the CIA Hack
  44. Zodiac Cipher Cracked
  45. German Police Call Airport Full-Body Scanners Useless
  46. Home-Made Wi-Fi Hacking, Phone Snooping, UAV
  47. Hacking Lotteries
  48. New Information on the Inventor of the One-Time Pad
  49. Identifying People by their Writing Style
  50. Developments in Facial Recognition
  51. Attacking PLCs Controlling Prison Doors
  52. Breaking the Xilinx Virtex-II FPGA Bitstream Encryption
  53. Using Science Fiction to Teach Computer Security

July 2011

  1. Friday Squid Blogging: 25-foot Giant Squid Caught in Fishing Net
  2. Luggage Hack
  3. Hacking Apple Laptop Batteries
  4. ShareMeNot
  5. Data Privacy as a Prisoner's Dilemma
  6. Cryptography and Wiretapping
  7. Ars Technica on Liabilities and Computer Security
  8. Duplicating Physical Keys from Photographs (Sneakey)
  9. iPhone Iris Scanning Technology
  10. Revenge Effects of Too-Safe Playground Equipment
  11. Smuggling Drugs in Unwitting People's Car Trunks
  12. Friday Squid Blogging: Glass Squid
  13. Is There a Hacking Epidemic?
  14. Google Detects Malware in its Search Data
  15. Members of "Anonymous" Hacker Group Arrested
  16. Telex Anti-Censorship System
  17. British Phone Hacking Scandal
  18. Friday Squid Blogging: Giant School of Squid
  19. Interview in Infosecurity Magazine
  20. Degree Plans of the Future
  21. My Next Book Title: Liars and Outliers
  22. Physical Key Escrow
  23. Interview with Evgeny Kaspersky
  24. Insurgent Groups Exhibit Learning Curve
  25. History of Stuxnet
  26. Friday Squid Blogging: Giant Squid Egg
  27. Organized Crime in Ireland Evolves As Security Increases
  28. Comparing al Qaeda and the IRA
  29. Man Flies with Someone Else's Ticket and No Legal ID
  30. Research in Secure Chips
  31. Friday Squid Blogging: Giant Squid as an Emblem for Ocean Conservation
  32. TDSS Rootkit
  33. Menwith Hill

June 2011

  1. Chinese Army Developed Online Wargame
  2. Yet Another "People Plug in Strange USB Sticks" Story
  3. Common PINs
  4. Friday Squid Blogging: Eating Humboldt Squid
  5. Selling a Good Reputation on eBay
  6. Assisting a Hostage Taker via Facebook
  7. Protecting Private Information on Smart Phones
  8. NSA Style Manual
  9. Insider Attack Against M&A Information in Document Titles
  10. Did Reason Evolve as a Persuasion Tool?
  11. Firesheep in Use
  12. My Next Book: Title and Cover
  13. The Problem with Cyber-crime Surveys
  14. The Life Cycle of Cryptographic Hash Functions
  15. RAND Corporation on Trusted Traveler
  16. Fourth SHB Workshop
  17. Friday Squid Blogging: Beautiful Deep-Sea Squid Picture
  18. Horse "No Ride" List
  19. Court Ruling on "Reasonable" Electronic Banking Security
  20. The Decline of al Qaeda
  21. Threat Models Colliding at Movie-Theater Projectors
  22. WEIS 2011
  23. Malware in Google's Android
  24. The Non-Anonymity of Bubble Forms
  25. Status Report on the War on Photography
  26. Yet Another Way to Evade TSA's Full-Body Scanners
  27. Why it's So Difficult to Trace Cyber-Attacks
  28. Friday Squid Blogging: Squid Cartoon
  29. Two Good Rants
  30. New Airport Scanning Technology
  31. Spam as a Business
  32. 25% of U.S. Criminal Hackers are Police Informants
  33. Tennessee Makes Password Sharing Illegal
  34. Fighting Terrorism with Cupcakes
  35. Analysis of Redaction Failures
  36. Friday Squid Blogging: LOLCat and Squid Toy
  37. World War II Tunny Cryptanalysis Machine Rebuilt at Bletchley Park
  38. Security vs. Privacy
  39. Open-Source Software Feels Insecure
  40. Spear Phishing Attacks from China Against Gmail Accounts
  41. Man-in-the-Middle Attack Against the MCAT Exam
  42. Three-Volume History of Counterintelligence

May 2011

  1. The U.S. Seems to Have a Secret Stealth Helicopter
  2. Keeping Sensitive Information Out of the Hands of Terrorists Through Self-Restraint
  3. Lockheed Martin Hack Linked to RSA's SecurID Breach
  4. Aggressive Social Engineering Against Consumers
  5. Friday Squid Blogging: Hand-Cut Paper Silhouette
  6. Apple's iOS 4 Hardware Encryption Cracked
  7. U.S. Presidential Limo Defeated by Steep-Grade Parking Ramp
  8. Black Box Records in Automobiles
  9. Blackhole Exploit Kit
  10. New Siemens SCADA Vulnerabilities Kept Secret
  11. Dropbox Security
  12. Friday Squid Blogging: Plush Squid
  13. CDC on the Zombie Apocalypse
  14. The Normalization of Security
  15. Forged Subway Passes in Boston
  16. BIOS Protection
  17. Bin Laden Maintained Computer Security with an Air Gap
  18. Mobile Phone Privacy App Contest
  19. Fingerprint Scanner that Works at a Distance
  20. The Inner Workings of an FBI Surveillance Device
  21. Friday Squid Blogging: Squid Sous Vide
  22. Interview with Me About the Sony Hack
  23. Drugging People and Then Robbing Them
  24. FBI Surveillance Tools
  25. RFID Tags Protecting Hotel Towels
  26. "Resilience of the Internet Interconnection Ecosystem"
  27. Medieval Tally Stick Discovered in Germany
  28. The Era of "Steal Everything"
  29. Vulnerabilities in Online Payment Systems
  30. Status Report: The Dishonest Minority
  31. Friday Squid Blogging: Noise Pollution and Squid
  32. Friday Squid Blogging: Squids in Space
  33. Forged Memory
  34. Stolen Camera Finder
  35. Extreme Authentication
  36. Bin Laden's Death Causes Spike in Suspicious Package Reports
  37. "Operation Pumpkin"
  38. Unintended Security Consequences of the New Pyrex Recipe
  39. Decline in Cursive Writing Leads to Increase in Forgery Risk?
  40. Nikon Image Authentication System Cracked
  41. LiveBlogging the Bin Laden Assassination
  42. Hijacking the Coreflood Botnet

April 2011

  1. Friday Squid Blogging: Giant Squid Eye Preserved in a Jar
  2. TED Talk
  3. The Cyberwar Arms Race
  4. Social Solidarity as an Effect of the 9/11 Terrorist Attacks
  5. Security Risks of Running an Open WiFi Network
  6. Hard-Drive Steganography through Fragmentation
  7. Friday Squid Blogging: Squid Prints
  8. Declassified World War I Security Documents
  9. Large-Scale Food Theft
  10. Costs of Security
  11. Software as Evidence
  12. WikiLeaks Cable about Chinese Hacking of U.S. Networks
  13. Friday Squid Blogging: Omega 3 Oil from Squid
  14. "Schneier's Law"
  15. Unanticipated Security Risk of Keeping Your Money in a Home Safe
  16. Changing Incentives Creates Security Risks
  17. Security Fears of Wi-Fi in London Underground
  18. Euro Coin Recycling Scam
  19. Israel's Counter-Cyberterrorism Unit
  20. How did the CIA and FBI Know that Australian Government Computers were Hacked?
  21. New French Law Reduces Website Security
  22. The CIA and Assassinations
  23. Friday Squid Blogging: A New Book About Squid
  24. Get Your Terrorist Alerts on Facebook and Twitter
  25. Pinpointing a Computer to Within 690 Meters
  26. Detecting Cheaters
  27. Optical Stun Ray
  28. Counterterrorism Security Cost-Benefit Analysis
  29. Epsilon Hack
  30. Reducing Bribery by Legalizing the Giving of Bribes
  31. Ebook Fraud
  32. Friday Squid Blogging: Shower Squid
  33. 34 SCADA Vulnerabilities Published

March 2011

  1. Comodo Group Issues Bogus SSL Certificates
  2. FBI Asks for Cryptanalysis Help
  3. How Peer Review Doesn't Work
  4. Federated Authentication
  5. Detecting Liars
  6. Biliteral Ciphers
  7. Friday Squid Blogging: Squid Fabric Designs
  8. Authenticating the Authenticators
  9. Identifying Tor Users Through Insecure Applications
  10. Detecting Words and Phrases in Encrypted VoIP Calls
  11. Transmitting Data Through Steel
  12. Threats vs. Vulnerabilities
  13. Folk Models in Home Computer Security
  14. Times Square Video Screen Hacked with an iPhone
  15. RSA Security, Inc Hacked
  16. Zombie Fungus
  17. Hacking ATM Users by Gluing Down Keys
  18. Hacking Cars with MP3 Files
  19. Using Language Patterns to Identify Anonymous E-Mail
  20. Video Interview with Me
  21. FBI and the Future of Wiretapping
  22. Full Body Scanners
  23. Malware as Job Security
  24. Criminals Stealing Cars by Calling Tow Trucks
  25. Recently Declassified NSA History Document
  26. Friday Squid Blogging: Giant Squid Washes Ashore
  27. Interesting Research in Using Animals to Detect Substances
  28. Pickpockets are a Dying Breed
  29. NIST SHA-3 News
  30. Erasing Data from Flash Drives

February 2011

  1. Anonymous vs HBGary
  2. Friday Squid Blogging: Squid Tattoo
  3. Interview with Me
  4. HBGary and the Future of the IT Security Industry
  5. Good Article About the Terrorist Non-Threat
  6. Susan Landau on Government Surveillance of the Internet
  7. Terrorist-Catching Con Man
  8. Friday Squid Blogging: Research into Squid Hearing
  9. Biometric Wallet
  10. NIST Defines New Versions of SHA-512
  11. Historical Study of the NSA Scientific Advisory Board
  12. Romanian Hackers
  13. The Seven Types of Hackers
  14. Societal Security
  15. Credit Card Fraud Ring
  16. Friday Squid Blogging: Squid Pheromone
  17. Julian Sanchez on Balancing Privacy and Security
  18. How Feed-Over-Email Circumvents Chinese Censorship
  19. Hacking Scratch Lottery Tickets
  20. Bomb-Sniffing Mice
  21. Micromorts
  22. Scareware: How Crime Pays
  23. Friday Squid Blogging: Reducing Squid Odor
  24. UK Immigration Officer Puts Wife on the No-Fly List
  25. Terrorist Targets of Choice
  26. ATM Skimmer on Bank Door Lock
  27. Hacking HTTP Status Codes
  28. Kip Hawley Comments on the Domodedovo Airport Bombing
  29. Me on Color-Coded Terrorist Threat Levels

January 2011

  1. Jury Says it's Okay to Record the TSA
  2. Trojan Steals Credit Card Numbers
  3. Domodedovo Airport Bombing
  4. $100 to Put a Bomb on an Airplane
  5. Whitelisting vs. Blacklisting
  6. Security Theater, Illustrated
  7. U.S. Strategy to Prevent Leaks is Leaked
  8. Security Theater in the Theater
  9. Unsecured IP Security Cameras
  10. Bioencryption
  11. REAL-ID Implementation
  12. Hacking Tamper-Evident Devices
  13. Brute-Force Safecracking
  14. Blowfish in Good Time Max
  15. Cyberwar is Overhyped
  16. The Legality of the Certificate Authority Trust Model
  17. Cost-Benefit Analysis of Full-Body Scanners
  18. Do Corporations Have a Right to Privacy?
  19. Odd Art Forger
  20. Movie-Plot Threats at the U.S. Capitol
  21. More Stuxnet News
  22. New Revelations in the Mahmoud al-Mabhouh Assassination
  23. Friday Squid Blogging: Deep-Sea Squid Video
  24. Me on Airport Security
  25. Loaded Gun Slips Past TSA
  26. Surviving a Terrorist's Nuclear Attack
  27. Stealing SIM Cards from Traffic Lights
  28. The Security Threat of Forged Law-Enforcement Credentials
  29. Attacking High-Frequency Trading Networks
  30. "Homeland Security Hasn't Made Us Safer"
  31. James Fallows on Political Shootings
  32. Friday Squid Blogging: Biggest Squid Ever
  33. The Social Dynamics of Terror
  34. SMS of Death
  35. Sony PS3 Security Broken
  36. Eavesdropping on GSM Calls
  37. Guard Towers at Walmart
  38. Polar Bears Destroying Hidden Cameras

2010 515

December 2010

  1. Friday Squid Blogging: Research into Squid Skin
  2. Tor Routers
  3. Civil War Message Decoded
  4. TSA Inspecting Thermoses
  5. Terrorism Reading List
  6. An Honest Privacy Policy
  7. This Suspicious Photography Stuff Is Confusing
  8. Garfield Comic
  9. Friday Squid Blogging: Great Flying Squid Photo
  10. Friday Squid Blogging: Squid Nativity
  11. PlugBot
  12. Cyberwar Movie Plot from an Actual Thriller Writer
  13. Proprietary Encryption in Car Immobilizers Cracked
  14. Interview with the European Union Privacy Chief
  15. Interview with TSA Administrator John Pistole
  16. Adam Shostack on TSA Threat Modeling
  17. Recording the Police
  18. Book Review: Cyber War
  19. Computational Forensics
  20. "Architecture of Fear"
  21. Friday Squid Blogging: Prosthetic Tentacle
  22. Hiding PETN from Full-Body Scanners
  23. Did the FBI Plant Backdoors in OpenBSD?
  24. Fake Amazon Receipt Generators
  25. Security in 2020
  26. Open Source Digital Forensics
  27. Realistic Masks
  28. Evan Kohlmann
  29. Sometimes CCTV Cameras Work
  30. CRB Check Backlash
  31. Friday Squid Blogging: Glowing Squid
  32. New TSA Security Test
  33. NIST Announces SHA-3 Finalists (Skein is One of Them)
  34. Alternate Scanning Technologies
  35. Department of Homeland Security Getting a Little too 1984ish
  36. WikiLeaks
  37. Never Let the Terrorists Know How We're Storing Road Salt
  38. Sane Comments on Terrorism
  39. Profiling Lone Terrorists
  40. FTC Privacy Report
  41. Cyberwar and the Future of Cyber Conflict
  42. Friday Squid Blogging: New Species of Squid Discovered
  43. Football Match Fixing
  44. Full Body Scanners: What's Next?
  45. Close the Washington Monument
  46. Brian Snow Sows Cyber Fears
  47. Risk Reduction Strategies on Social Networking Sites
  48. Software Monoculture

November 2010

  1. The Constitutionality of Full-Body Scanners
  2. Mohamed Osman Mohamud
  3. Zoo Security
  4. Causing Terror on the Cheap
  5. Friday Squid Blogging: Studying Squid Hearing
  6. Psychopaths and Security
  7. The Withdrawal of the A5/2 Encryption Algorithm
  8. The DHS is Getting Rid of the Color-Coded Terrorism Alert System
  9. New ATM Skimming Attack
  10. David Kahn Donates his Cryptography Collection to the National Cryptologic Museum
  11. Spoofing Geolocation
  12. Me on Airport Security
  13. Defeating al Qaeda
  14. Stuxnet News
  15. Friday Squid Blogging: Flying Squid
  16. Me on Cyberwar
  17. TSA Backscatter X-ray Backlash
  18. Airplane Terrorism Twenty Years Ago
  19. Unsolicited Terrorism Tips to the U.S. Government
  20. New Biometric
  21. Security Haiku
  22. Term Paper Writing for Hire
  23. Internet Quarantines
  24. Friday Squid Blogging: Tentacle Pot Pie
  25. Albert Gonzalez
  26. Camouflaging Test Cars
  27. Bulletproof Service Providers
  28. Changing Passwords
  29. Removing Belts at Airport Security
  30. Securing the Washington Monument
  31. Crowdsourcing Surveillance
  32. Kahn, Diffie, Clark, and Me at Bletchley Park
  33. Young Man in "Old Man" Mask Boards Plane in Hong Kong
  34. The End of In-Flight Wi-Fi?
  35. Friday Squid Blogging: Squid Costume
  36. "A Social Network Approach to Understanding an Insurgency"
  37. The Business of Botnets
  38. Did the FBI Invent the D.C. Bomb Plot?
  39. Dan Geer on "Cybersecurity and National Policy"
  40. Control Fraud

October 2010

  1. Halloween and the Irrational Fear of Stranger Danger
  2. Cargo Security
  3. Friday Squid Blogging: Dissecting a Giant Squid
  4. Me at TED
  5. The Militarization of the Internet
  6. New Orleans Scrapping Surveillance Cameras
  7. FBI Bugging Embassies in 1940
  8. Firesheep
  9. Seymour Hersh on Cyberwar
  10. Declassified NSA Documents
  11. Friday Squid Blogging: Steganography in the Longfin Inshore Squid
  12. Video Interview with Me from RSA Europe
  13. FaceTime for Mac Security Hole
  14. Electronic Car Lock Denial-of-Service Attack
  15. Workshop on the Economics of Information Security
  16. Predator Software Pirated?
  17. Hiding in Plain Sight
  18. Fingerprinting Telephone Calls
  19. Indian OS
  20. Picking a Single Voice out of a Crowd
  21. Pen-and-Paper SQL Injection Attack Against Swedish Election
  22. The FBI is Tracking Whom?
  23. The Mahmoud al-Mabhouh Assassination
  24. The Economist on Biometrics
  25. Friday Squid Blogging: Squid's Restaurant
  26. The Ineffectiveness of Vague Security Warnings
  27. Hacking Trial Breaks D.C. Internet Voting System
  28. Stuxnet
  29. The Politics of Allocating Homeland Security Money to States
  30. Putting Unique Codes on Objects to Detect Counterfeiting
  31. Analyzing CAPTCHAs
  32. Sky Marshals Flying First Class
  33. Monitoring Employees' Online Behavior
  34. Friday Squid Blogging: Beautiful Squid Sketches
  35. My Recording Debut
  36. Me on Cyberwar
  37. Master's Theses in Homeland Security

September 2010

  1. Wiretapping the Internet
  2. NSA Publications
  3. Stealing Money from a Safe with a Vacuum
  4. Cultural Cognition of Risk
  5. Isolating Terrorist Cells as a Security Countermeasure
  6. New Attack Against ASP.NET
  7. Friday Squid Blogging: "Truck Carrying Squid Crashes In Broccoli Field"
  8. Real-Time NSA Eavesdropping
  9. Evercookies
  10. Details Removed from Book at Request of U.S. Department of Defense
  11. The Stuxnet Worm
  12. Prepaid Electricity Meter Fraud
  13. Haystack
  14. Statistical Distribution of Combat Wounds to the Head
  15. Four Irrefutable Security Laws
  16. Questioning Terrorism Policy
  17. Friday Squid Blogging: Squid Eyes
  18. Master HDCP Key Cracked
  19. Automatic Document Declassification
  20. DHS Still Worried About Terrorists Using Internet Surveillance
  21. Popular Usernames and Passwords
  22. Highway Honeypot
  23. Not Answering Questions at U.S. Customs
  24. Vulnerabilities in US-CERT Network
  25. Kenzero
  26. Friday Squid Blogging: Cephalopod Consciousness
  27. The Onion on National Security
  28. Problems with Twitter's OAuth Authentication System
  29. Orange Balls as an Anti-Robbery Device
  30. New German ID Card Hackable
  31. Parental Fears vs. Realities
  32. Consumerization and Corporate IT Security
  33. Terrorism Entrapment
  34. Friday Squid Blogging: Squid Car
  35. UAE Man-in-the-Middle Attack Against SSL
  36. Successful Attack Against a Quantum Cryptography System
  37. Cyber-Offence is the New Cyber-Defense
  38. Wanted: Skein Hardware Help
  39. More Skein News

August 2010

  1. Eavesdropping on Smart Homes with Distributed Wireless Sensors
  2. High School Teacher Assigns Movie-Plot Threat Contest Problem
  3. Misidentification and the Court System
  4. Security Theater on the Boston T
  5. Friday Squid Blogging: Jewel of the Sea
  6. Me at the EastWest Institute
  7. Is the Whole Country an Airport Security Zone?
  8. Detecting Deception in Conference Calls
  9. Social Steganography
  10. Skeletal Identification
  11. Malware Contributory Cause of Air Crash
  12. Friday Squid Blogging: Flying Squid
  13. Intel Buys McAfee
  14. "The Fear Tax"
  15. Crypto 2010 Proceedings
  16. Hacking Cars Through Wireless Tire-Pressure Sensors
  17. Breaking into a Garage
  18. Friday Squid Blogging: Squid Computer Virus
  19. Cloning Retail Gift Cards
  20. Security Analysis of Smudges on Smart Phone Touch Screens
  21. Late Teens and Facebook Privacy
  22. Friday Squid Blogging: Sir Squid
  23. Apple JailBreakMe Vulnerability
  24. A Revised Taxonomy of Social Networking Data
  25. P ≠ NP?
  26. Ant Warfare
  27. Friday Squid Blogging: Canadian Squid Stamp
  28. Yet Another Way to Sneak Liquids onto an Airplane
  29. More Brain Scans to Detect Future Terrorists
  30. NSA and the National Cryptologic Museum
  31. WikiLeaks Insurance File
  32. UAE to Ban BlackBerrys
  33. Location-Based Quantum Encryption
  34. Eavesdropping Smartphone Apps
  35. Book Review: How Risky Is It, Really?

July 2010

  1. Friday Squid Blogging: Squid Launcher from "Despicable Me"
  2. Doomsday Shelters
  3. Hacking ATMs
  4. Security Vulnerabilities of Smart Electricity Meters
  5. DNSSEC Root Key Split Among Seven People
  6. Pork-Filled Counter-Islamic Bomb Device
  7. WPA Cracking in the Cloud
  8. 1921 Book on Profiling
  9. Technology is Making Life Harder for Spies
  10. Friday Squid Blogging: Squidbillies
  11. The Washington Post on the U.S. Intelligence Industry
  12. Internet Worm Targets SCADA
  13. More Research on the Effectiveness of Terrorist Profiling
  14. Book on GCHQ
  15. EU Counterterrorism Strategy
  16. Economic Considerations of Website Password Policies
  17. New GAO Cybersecurity Report
  18. Violating Terms of Service Possibly a Crime
  19. Embedded Code in U.S. Cyber Command Logo
  20. Friday Squid Blogging: Hawaiian Bobtail Squid
  21. Skype's Cryptography Reverse-Engineered
  22. The NSA's Perfect Citizen
  23. Russian Intelligence Gets Source Code to Windows 7
  24. Random Numbers from Quantum Noise
  25. Burglary Detection through Video Analytics
  26. Caller ID Spoofing on the Android
  27. Hemingway Authentication Scheme
  28. The Chaocipher
  29. Serial Killers Are Now Terrorists
  30. Internet Kill Switch
  31. Friday Squid Blogging: Squid Sex Organs
  32. TSA Blocks Access to Websites with "Controversial Opinions"
  33. Detecting Cheating at Colleges
  34. The Toronto 18
  35. Surveillance and Morality
  36. The Threat of Cyberwar Has Been Grossly Exaggerated
  37. "Don't Commit Crime"
  38. Research Report on Cyberattack Capabilities
  39. Tracking Location Based on Water Isotope Ratios
  40. Friday Squid Blogging: Squid Robots
  41. Secret Stash
  42. Vigilant Citizens: Then vs. Now
  43. Cryptography Failure Story

June 2010

  1. Data at Rest vs. Data in Motion
  2. Cryptography Success Story
  3. Space Terrorism
  4. Baby Terrorists
  5. Third SHB Workshop
  6. Friday Squid Blogging: Vampire Squid
  7. Hacker Scare Story
  8. Security Trade-Offs in Crayfish
  9. TacSat-3 "Hyperspectral" Spy Satellite
  10. WikiLeaks
  11. Popsicle Makers a Security Threat
  12. How Much Counterterrorism Can We Afford?
  13. The Real Risk: Traffic Deaths
  14. Buying an ATM Skimmer
  15. Cheating on Tests, by the Teachers
  16. AT&T's iPad Security Breach
  17. Friday Squid Blogging: LOLSquid
  18. Remote Printing to an E-Mail Address
  19. The Continuing Incompetence of Terrorists
  20. Hot Dog Security
  21. Patrolling the U.S./Canada Border
  22. Filming the Police
  23. Dating Recordings by Power Line Fluctuations
  24. Reading Me
  25. Fifth Annual Movie-Plot Threat Contest Winner
  26. Protecting Cars with The Club
  27. Behavioral Profiling at Airports
  28. Friday Squid Blogging: Polymer Clay Squid Ornament
  29. Security Cartoon
  30. Mainstream Cost-Benefit Security Analysis
  31. Botox as a Terrorist Threat
  32. Ninth Workshop on Economics and Information Security
  33. The "Quake" Simulation and Risk Perception
  34. Hiring Hackers
  35. DARPA Research into Clean-Slate Network Security Redesign
  36. Terrorists Placing Fake Bombs in Public Places
  37. Fear in a Political Ad
  38. Bletchley Park Archives to Go Online
  39. How to Spot a CIA Officer
  40. Friday Squid Blogging: Kid vs. Squid
  41. The Four Stages of Fear
  42. World War II Sabotage Field Manual
  43. Intelligence Can Never Be Perfect
  44. Voluntary Security Inspections
  45. Terrorizing Ourselves

May 2010

  1. Canada Spending $1B on Security for G8/G20 Summit in June
  2. Friday Squid Blogging: 500-Million-Year-Old Squid
  3. Friday Squid Blogging: The Contents of Squid Stomachs
  4. Another Scene from an Airport
  5. Low-Tech Burglars to Get Lighter Sentences in Louisiana
  6. End-to-End Encrypted Cell Phone Calls
  7. If You See Something, Think Twice About Saying Something
  8. Infosec Television Commercial
  9. Scene from an Airport
  10. Alerting Users that Applications are Using Cameras, Microphones, Etc.
  11. Friday Squid Blogging: Squid Desktop
  12. Applications Disclosing Required Authority
  13. Automobile Security Analysis
  14. Detecting Browser History
  15. Militarized Marine Mammals
  16. History of NSA Computers
  17. Outsourcing to an Indian Jail
  18. Insect-Based Terrorism
  19. Software Liabilities in the UK
  20. Friday Squid Blogging: Squid T-Shirts
  21. I Won a CSO Compass Award
  22. New Windows Attack
  23. Fifth Annual Movie-Plot Threat Contest Semi-Finalists
  24. Worst-Case Thinking
  25. "If You See Something, Say Something"
  26. Biometric Wallet
  27. Reflections of a Former U-2 Pilot
  28. SnapScouts
  29. 9/11 Made us Safer?
  30. Friday Squid Blogging: The Colossal Squid isn't a Vicious Predator
  31. I Was Named as One of the Top 10 Science and Technology Writers
  32. Cory Doctorow Gets Phished
  33. WiFi Cracking Kits
  34. Nobody Encrypts their Phone Calls
  35. Why Aren't There More Terrorist Attacks?
  36. Preventing Terrorist Attacks in Crowded Areas
  37. Malcolm Gladwell on Spies
  38. Security Analysis of India's Electronic Voting Machines

April 2010

  1. Friday Squid Blogging: Squid Purity Test
  2. Homeopathic Bomb
  3. Fun with Secret Questions
  4. Hypersonic Cruise Missiles
  5. Frank Furedi on Worst-Case Thinking
  6. Can Safes
  7. Seat Belt Use and Lessons for Security Awareness
  8. Attack Against Apache.org
  9. New York Police Protect Obama from Bicycles
  10. ICPP Pre-Trial Settlement Scam
  11. Punishing Security Breaches
  12. Friday Squid Blogging: SquidSquid.com
  13. Video Interviews with Me
  14. Two Security Cartoons
  15. The Doghouse: Lock My PC
  16. Booby-trapping a PDF File
  17. NIST on Protecting Personally Identifiable Information
  18. Security Fog
  19. Personal Code Ink
  20. Young People, Privacy, and the Internet
  21. The Effectiveness of Political Assassinations
  22. Lt. Gen. Alexander and the U.S. Cyber Command
  23. Life Recorder
  24. Friday Squid Blogging: Tentacle Tie
  25. Fake CCTV Cameras
  26. Guns Painted to Look Like Toys
  27. Security for Implantable Medical Devices
  28. Storing Cryptographic Keys with Invisible Tattoos
  29. Matt Blaze Comments on his 15-Year-Old "Afterword"
  30. Externalities and Identity Theft
  31. Terrorist Attacks and Comparable Risks, Part 2
  32. Terrorist Attacks and Comparable Risks, Part 1
  33. Man-in-the-Middle Attacks Against SSL
  34. Makeup to Fool Face Recognition Software
  35. Friday Squid Blogging: Another Squid T-Shirt
  36. Me in CRN
  37. Schneier on "Security, Privacy, and the Generation Gap"
  38. The Economics of Dueling
  39. Cryptanalysis of the DECT
  40. The Effectiveness of Air Marshals
  41. Cryptography Broken on American Military Attack Video
  42. New York and the Moscow Subway Bombing
  43. Bypassing the Chain on Hotel-Room Doors
  44. Privacy and Control
  45. Detecting Being Watched
  46. "Protecting Europe Against Large-Scale Cyber-Attacks"
  47. Friday Squid Blogging: Squid Confit
  48. iPhone Secret Decoder Ring
  49. DHS Cybersecurity Awareness Campaign Challenge
  50. Explosive Breast Implants—Not an April Fool's Joke
  51. Fifth Annual Movie-Plot Threat Contest

March 2010

  1. Security Cameras in the New York City Subways
  2. Should the Government Stop Outsourcing Code Development?
  3. Leaders Make Better Liars
  4. Jeremy Clarkson on Security Guards
  5. Master Thief
  6. Identifying People by their Bacteria
  7. Friday Squid Blogging: Sexing Squid
  8. Schneier Blogging Template
  9. Hard Drives in Photocopy Machines
  10. Side-Channel Attacks on Encrypted Web Traffic
  11. I'll be in Second Life Tonight
  12. How to Become a Nuclear Power
  13. Natural Language Shellcode
  14. Acrobatic Thieves
  15. Dead on the No-Fly List
  16. New Book: Cryptography Engineering
  17. Electronic Health Record Security Analysis
  18. Back Door in Battery Charger
  19. PDF the Most Common Malware Vector
  20. Even More on the al-Mabhouh Assassination
  21. Friday Squid Blogging: Preserving Your Giant Squid
  22. Bringing Lots of Liquids on a Plane at Schiphol
  23. Security Trade-Offs and Sacred Values
  24. Disabling Cars by Remote Control
  25. Casino Hack
  26. Secret Questions
  27. USB Combination Lock
  28. Typosquatting
  29. Friday Squid Blogging: Cipherlopods
  30. Another Schneier Interview
  31. Why DRM Doesn't Work
  32. More Hollow Coins
  33. Wikibooks Cryptography Textbook
  34. Wanted: Trust Detector
  35. Nose Biometrics
  36. The Limits of Identity Cards
  37. Marc Rotenberg on Google's Italian Privacy Case
  38. Guide to Microsoft Police Forensic Services
  39. Google in The Onion
  40. Eating a Flash Drive
  41. De-Anonymizing Social Network Users
  42. Friday Squid Blogging: Squid Teapot
  43. Another Interview with Me
  44. Mariposa Botnet Shut Down
  45. Comprehensive National Cybersecurity Initiative
  46. Crypto Implementation Failure
  47. Tom Engelhardt on Fear of Terrorism
  48. More on the Al-Mabhouh Assassination
  49. Breaking in to Hotel Rooms

February 2010

  1. Friday Squid Blogging: Squid Homophone Lessons
  2. Me on Surveillance Cameras
  3. Hitler and Cloud Computing
  4. Small Planes and Lone Terrorist Nutcases
  5. Remotely Spying on Kids with School Laptops
  6. NSA Historical Documents
  7. The Doghouse: Demiurge Consulting
  8. Mark Twain on Risk Analysis
  9. TSA Logo Contest Winner
  10. Another Debit Card Skimmer
  11. Friday Squid Blogging: Squid Socks
  12. Cyber Shockwave Test
  13. Al-Mabhouh Assassination
  14. Opening Locks with Foil Impressioning
  15. Bruce Schneier Facebook Page
  16. Botnets Attacking Each Other
  17. Detecting Cheating by Analyzing Erased Answers
  18. James Fallows on the Chinese Cyber Threat
  19. TSA Logo Contest Finalists
  20. Radio Interview
  21. Friday Squid Blogging: Squid Record
  22. Crypto Comic Book
  23. Homebrew Cryptography
  24. Car-Key Copier
  25. Man-in-the-Middle Attack Against Chip and PIN
  26. Interview with a Nigerian Internet Scammer
  27. Terrorists Prohibited from Using iTunes
  28. Dahlia Lithwick on Terrorism Derangement Syndrome
  29. All Subversive Organizations Now Must Register in South Carolina
  30. Outguessing the Terrorists
  31. The Limits of Visual Inspection
  32. More Details on the Chinese Attack Against Google
  33. New Attack on Threefish
  34. Friday Squid Blogging: Squid Cookie
  35. 10 Cartoons about Airport Security
  36. Scaring the Senate Intelligence Committee
  37. World's Largest Data Collector Teams Up With World's Largest Data Collector
  38. Security and Function Creep
  39. Anonymity and the Internet
  40. More Movie Plot Terrorist Threats
  41. Online Credit/Debit Card Security Failure

January 2010

  1. Friday Squid Blogging: Harrowgate's 1886 Giant Squid
  2. Deconfliction
  3. Tracking your Browser Without Cookies
  4. World Privacy Day and the Madrid Privacy Declaration
  5. Scanning Cargo for Nuclear Material and Conventional Explosives
  6. More Surveillance in the UK
  7. Penny Shooter Business Card
  8. The Abdulmutallab Dots that Should Have Been Connected
  9. Me on Chinese Hacking and Enabling Surveillance
  10. Friday Squid Blogging: Stuffed Giant Squid
  11. Transport Canada on its New Security Regulations
  12. German TV on the Failure of Full-Body Scanners
  13. Web Security
  14. ATM Skimmer
  15. Wrasse Punish Cheaters
  16. The Problems of Profiling at Security Checkpoints
  17. Google vs. China
  18. Privacy Violations by Facebook Employees
  19. Eavesdropping in the Former Soviet Union
  20. Security vs. Sustainability in Building Construction
  21. Prison Escape Artist
  22. Fixing Intelligence Failures
  23. Loretta Napoleoni on the Economics of Terrorism
  24. Ray McGovern on Intelligence Failures
  25. $3.2 Million Jewelry Store Theft
  26. Body Cavity Scanners
  27. Airplane Security Commentary
  28. Op-ed on CIA's National Clandestine Service
  29. The Power Law of Terrorism
  30. The Comparative Risk of Terrorism
  31. My Second CNN.com Essay on the Underwear Bomber
  32. 768-bit Number Factored
  33. Friday Squid Blogging: Squid Quilt
  34. Cybersecurity Theater at FOSE
  35. FIPS 140-2 Level 2 Certified USB Memory Stick Cracked
  36. Connecting the Dots
  37. Post-Underwear-Bomber Airport Security
  38. Another Contest: Fixing Airport Security
  39. Gift Cards and Employee Retail Theft
  40. Nate Silver on the Risks of Airplane Terrorism
  41. David Brooks on Resilience in the Face of Security Imperfection
  42. TSA Logo Contest
  43. Breaching the Secure Area in Airports
  44. Me on Airport Security Profiling
  45. Matt Blaze on the New "Unpredictable" TSA Screening Measures
  46. Adopting the Israeli Airport Security Model
  47. Vatican Admits Perfect Security is Both Impossible and Undesirable
  48. Christmas Bomber: Where Airport Security Worked
  49. Friday Squid Blogging: Squid Ski Mask

← 2008–2009 2013–2015 →