The Curious Engineer

Schneier on Security

2013–2015

1,400 posts

← 2010–2012 2016–2018 →

2015 453

December 2015

  1. Cory Doctorow on Software Security and the Internet of Things
  2. Another Scandal Resulting from E-mails Gone Public
  3. PayPal Authentication Still Substandard
  4. DMCA and the Internet of Things
  5. NSA/GCHQ Exploits against Juniper Networking Equipment
  6. Friday Squid Blogging: Squid Christmas
  7. Burglary Footage Turned into Commercial
  8. Police Dog Sniffs for Hard Drives
  9. Using Law against Technology
  10. More Writings on the Second Crypto Wars
  11. "The Medieval Origins of Mass Surveillance"
  12. Back Door in Juniper Firewalls
  13. Friday Squid Blogging: Penguins Fight over Squid
  14. GCHQ Holiday Puzzle
  15. 25th Anniversary of the Landmark Unix Security Book
  16. Catalog of Police Surveillance Equipment
  17. User Errors Often Compromise Encryption
  18. DOS Attack Against Los Angeles Schools
  19. Attack Against DNS Root Servers
  20. "Security Theater" Sighting
  21. Good Swatting Story
  22. Friday Squid Blogging: Rare Octopus Squid Video from Hawaii
  23. Resilient Systems News: End-of-Year Trends Webinar
  24. Hit-and-Run Driver Arrested Because Car Reported Accident
  25. How People Learn about Computer Security
  26. Terrifying Technologies
  27. How Israel Regulates Encryption
  28. Forced Authorization Attacks Against Chip-and-Pin Credit Card Terminals
  29. Friday Squid Blogging: North Korean Squid Fisherman Found Dead in Boats
  30. BlackBerry Leaves Pakistan Rather Than Provide a Government Backdoor
  31. The Moral Dimension of Cryptography
  32. Worldwide Cryptographic Products Survey: Edits and Additions Wanted
  33. Security vs. Business Flexibility
  34. Tracking Someone Using LifeLock

November 2015

  1. A History of Privacy
  2. Cryptanalysis of Algebraic Eraser
  3. Friday Squid Blogging: Squid Necklace
  4. Data and Goliath in German
  5. Defending against Actual IT Threats
  6. NSA Lectures on Communications Security from 1973
  7. NSA Collected Americans' E-mails Even After it Stopped Collecting Americans' E-mails
  8. Policy Repercussions of the Paris Terrorist Attacks
  9. Voter Surveillance
  10. Friday Squid Blogging: Squid Spawning in South Australian Waters
  11. Reputation in the Information Age
  12. RFID-Shielded, Ultra-Strong Duffel Bags
  13. Paris Terrorists Used Double ROT-13 Encryption
  14. Ads Surreptitiously Using Sound to Communicate Across Devices
  15. On CISA
  16. Refuse to Be Terrorized
  17. Paris Attacks Blamed on Strong Cryptography and Edward Snowden
  18. Did Carnegie Mellon Attack Tor for the FBI?
  19. Friday Squid Blogging: Squid Fishing Championship
  20. Amazon Chooses Data and Goliath as a Best Book of 2015
  21. Personal Data Sharing by Mobile Apps
  22. Testing the Usability of PGP Encryption Tools
  23. Betting Ticket Forged Based on Selfie
  24. Bypassing the iPhone Activation Lock
  25. Ransomware Is Getting Sophisticated
  26. IT Security Is Still a Great Career Path
  27. Linus Torvalds on Linux Security
  28. Good Article on the Blockchain
  29. Friday Squid Blogging: The Symbiotic Relationship Between Squid and Bacteria
  30. Passwords by Mail
  31. The Effects of Surveillance on the Victims
  32. Analyzing Reshipping Mule Scams
  33. $1M Bounty for iPhone Hack
  34. Australia Is Testing Virtual Passports
  35. The Rise of Political Doxing

October 2015

  1. Friday Squid Blogging: Baby Giant Squid Found
  2. The Onion on the State of IT Security
  3. Weaknesses in the PLAID Protocol
  4. Flash Drive Lock
  5. Tracking Connected Vehicles
  6. Why Is the NSA Moving Away from Elliptic Curve Cryptography?
  7. The Doxing Trend
  8. The Need for Transparency in Surveillance
  9. Ravens Can Identify Cheaters
  10. Microsoft's Brad Smith on the Collapse of Safe Harbor
  11. Friday Squid Blogging: Squid Bed Sheets
  12. Forensic Analysis of Smart Card Fraud
  13. Hacking Fitbit
  14. Police Want Genetic Data from Corporate Repositories
  15. Forgotten Passwords
  16. Security Risks of Unpatched Android Software
  17. How to Commandeer a Store PA System
  18. Friday Squid Blogging: Squid Photos
  19. Mapping FinFisher Users
  20. Breaking Diffie-Hellman with Massive Precomputation (Again)
  21. Problems with DNA Evidence
  22. On Cyber Arms Control Treaties
  23. Obama Administration Not Pursuing a Backdoor to Commercial Encryption
  24. Jamming Wi-Fi
  25. Soviet Spying on US Selectric Typewriters
  26. NSA Patents
  27. Friday Squid Blogging: Japanese Squid Recipe
  28. I'm a Guest on "Adam Ruins Everything"
  29. SHA-1 Freestart Collision
  30. Information in Your Boarding Pass's Bar Code
  31. European Court of Justice Rules Against Safe Harbor
  32. Autonomous Vehicles as Bombs
  33. Automatic Face Recognition and Surveillance
  34. Friday Squid Blogging: Bobtail Squid Keeps Bacteria to Protect Its Eggs
  35. Resilient Systems News
  36. Stealing Fingerprints
  37. Existential Risk and Technological Advancement
  38. Identifying CIA Officers in the Field

September 2015

  1. Spoofing Fitness Trackers
  2. Volkswagen and Cheating Software
  3. How GCHQ Tracks Internet Users
  4. Good Article on the Sony Attack
  5. Friday Squid Blogging: Disney's Minigame Squid Wars
  6. Anti-Alien Security
  7. People Who Need to Pee Are Better at Lying
  8. Living in a Code Yellow World
  9. Hacking the Game Show "Press Your Luck"
  10. Buying an Online Reputation
  11. Bringing Frozen Liquids through Airport Security
  12. SYNful Knock Attack Against Cisco Routers
  13. History of Hacktivism
  14. Friday Squid Blogging: Giant Squid Sculpture at Burning Man
  15. Drone Speedboat
  16. Smart Watch that Monitors Typing
  17. Two Security Companies Battling It Out over Disclosures
  18. Self-Destructing Computer Chip
  19. Anonymous Browsing at the Library
  20. Child Arrested Because Adults Are Stupid
  21. Obama and the Security of the Waldorf Astoria Hotel
  22. Hacking Team, Computer Vulnerabilities, and the NSA
  23. Security Cartoon
  24. Programming Errors Weaken bcrypt Hashes of Ashley Madison Passwords
  25. Friday Squid Blogging: The Chemistry of Squid Camouflage
  26. Wanted: Cryptography Products for Worldwide Survey
  27. Drone Self-Defense and the Law
  28. Cheating News from the Chess World
  29. FBI and Apple's Encryption
  30. Animals vs. Drones
  31. The Security Risks of Third-Party Data
  32. TSA Master Keys
  33. Glenn Greenwald Debates Keith Alexander
  34. Understanding Squid Self-Healing Teeth
  35. I'll be Talking Cyber-Resilience on a Webinar
  36. China's "Great Cannon"
  37. "The Declining Half-Life of Secrets"
  38. History of the L0pht
  39. What Can you Learn from Metadata?

August 2015

  1. Using Samsung's Internet-Enabled Refrigerator for Man-in-the-Middle Attacks
  2. Friday Squid Blogging: Cephalopod Anatomy Class
  3. Mickens on Security
  4. The Benefits of Endpoint Encryption
  5. German BfV – NSA Cooperation
  6. Iranian Phishing
  7. Defending All the Targets Is Impossible
  8. Regularities in Android Lock Patterns
  9. Movie Plot Threat: Terrorists Attacking US Prisons
  10. Are Data Breaches Getting Larger?
  11. Heartbeat as a Biometric
  12. The Advertising Value of Intrusive Tracking
  13. Friday Squid Blogging: Calamari Ripieni Recipe
  14. NSA Plans for a Post-Quantum World
  15. SS7 Phone-Switch Flaw Enabled Surveillance
  16. Snake-Oil Cryptography Competition
  17. No-Fly List Uses Predictive Assessments
  18. Nasty Cisco Attack
  19. AVA: A Social Engineering Vulnerability Scanner
  20. Did Kaspersky Fake Malware?
  21. More on Mail Cover
  22. Data and Goliath Confiscated from Chelsea Manning
  23. Oracle CSO Rant Against Security Experts
  24. NSA's Partnership with AT&T
  25. Friday Squid Blogging: Strawberry Squid
  26. Algorithmic Bias
  27. Cryptography from the 13th Century
  28. Cosa Nostra Dead Drops
  29. Another Salvo in the Second Crypto War (of Words)
  30. Intimidating Military Personnel by Targeting Their Families
  31. Incenting Drug Dealers to Snitch on Each Other
  32. Detecting Betrayal in Diplomacy Games
  33. Friday Squid Blogging: Divers Find Squid Eggs
  34. Meerkats that Look like Bruce Schneier
  35. The Outing of ECHELON
  36. Security for the Rest of Us
  37. Nicholas Weaver on iPhone Security
  38. Face Recognition by Thermal Imaging
  39. Shooting Down Drones
  40. Vulnerabilities in Brink's Smart Safe
  41. Help with Mailing List Hosting
  42. John Mueller on the Overblown ISIS Threat

July 2015

  1. Friday Squid Blogging: Russian Sailors Video Colossal Squid
  2. Schneier Speaking Schedule
  3. HAMMERTOSS: New Russian Malware
  4. Backdoors Won't Solve Comey's Going Dark Problem
  5. Comparing the Security Practices of Experts and Non-Experts
  6. The NSA, Metadata, and the Failure of Stopping 9/11
  7. Fugitive Located by Spotify
  8. Bizarre High-Tech Kidnapping
  9. New RC4 Attack
  10. Stagefright Vulnerability in Android Phones
  11. Michael Chertoff Speaks Out Against Backdoors
  12. Hacking Team's Purchasing of Zero-Day Vulnerabilities
  13. Friday Squid Blogging: How a Squid Changes Color
  14. How an Amazon Worker Stole iPads
  15. Remotely Hacking a Car While It's Driving
  16. Preventing Book Theft in the Middle Ages
  17. Malcolm Gladwell on Competing Security Models
  18. Organizational Doxing of Ashley Madison
  19. Google's Unguessable URLs
  20. Friday Squid Blogging: Squid Giving Birth
  21. Using Secure Chat
  22. ProxyHam Canceled
  23. Crypto-Gram Is Moving
  24. Human and Technology Failures in Nuclear Facilities
  25. NSA Antennas
  26. Friday Squid Blogging: My Little Cephalopod
  27. High-tech Cheating on Exams
  28. Organizational Doxing
  29. The Risks of Mandating Backdoors in Encryption Products
  30. Amazon Is Analyzing the Personal Relationships of Its Reviewers
  31. More on Hacking Team
  32. More about the NSA's XKEYSCORE
  33. Hacking Team Is Hacked
  34. NSA German Intercepts
  35. Friday Squid Blogging: Squid Fishing in the Gulf of Thailand
  36. Rabbit Beating Up Snake
  37. Clever System of Secure Distributed Computation
  38. Details of the NSA's X-KEYSCORE
  39. Evidence Shows Data Breaches Not Increasing
  40. Office of Personnel Management Data Hack

June 2015

  1. Twitter Followers: Please Use the Correct Feed
  2. Tracking the Psychological Effects of the 9/11 Attacks
  3. TEMPEST Attack
  4. Migrating from SHA-1 to SHA-2
  5. Friday Squid Blogging: Classic Gary Larson Squid Cartoon
  6. Other GCHQ News from Snowden
  7. NSA and GCHQ Attacked Antivirus Companies
  8. Yet Another Leaker—with the NSA's French Intercepts
  9. Baseball Hacking: Cardinals vs. Astros
  10. What is the DoD's Position on Backdoors in Security Systems?
  11. Hayden Mocks NSA Reforms
  12. Why We Encrypt
  13. History of the First Crypto War
  14. The Secrecy of the Snowden Documents
  15. Friday Squid Blogging: Squid Salad Servers
  16. Counterfeit Social Media Accounts
  17. Hacking Drug Pumps
  18. Research on The Trade-off Between Free Services and Personal Data
  19. Peter Swire on the USA FREEDOM Act
  20. Encrypting Windows Hard Drives
  21. Eighth Movie-Plot Threat Contest Winner
  22. Friday Squid Blogging: Dancing Zombie Squid
  23. Uh Oh—Robots Are Getting Good with Samurai Swords
  24. The History of Internet Insecurity
  25. Duqu 2.0
  26. Security and Human Behavior (SHB 2015)
  27. Reassessing Airport Security
  28. Should Companies Do Most of Their Computing in the Cloud? (Part 3)
  29. Should Companies Do Most of Their Computing in the Cloud? (Part 2)
  30. Should Companies Do Most of Their Computing in the Cloud? (Part 1)
  31. The Effects of Near Misses on Risk Decision-Making
  32. Surveillance Law and Surveillance Studies
  33. Tracking People By Smart Phone Accelerometers
  34. Friday Squid Blogging: Giant Squid Lore
  35. US Identifies and Destroys ISIS Headquarters Because of "Selfie"
  36. NSA Running a Massive IDS on the Internet Backbone
  37. Yet Another New Biometric: Brainprints
  38. 2015 EPIC Champions of Freedom Dinner
  39. Smart Billboards Recognize Cops
  40. The Onion on NSA Surveillance
  41. TSA Not Detecting Weapons at Security Checkpoints
  42. Fun NSA Surveillance Quizzes
  43. US Also Tried Stuxnet Against North Korea

May 2015

  1. Friday Squid Blogging: Nutty Conspiracy Theory Involving Both the NSA and SQUID
  2. UN Report on the Value of Encryption to Freedom Worldwide
  3. Ransomware as a Service
  4. MOOC on Cybersecurity
  5. Terrorist Risks by City, According to Actual Data
  6. Race Condition Exploit in Starbucks Gift Cards
  7. Stink Bombs for Riot Control
  8. Story of the ZooKeeper Poison-Packet Bug
  9. Friday Squid Blogging: Giant Squid Washes Up in New Zealand
  10. USPS Tracking Queries to Its Package Tracking Website
  11. Why the Current Section 215 Reform Debate Doesn't Matter Much
  12. New Pew Research Report on Americans' Attitudes on Privacy, Security, and Surveillance
  13. The Logjam (and Another) Vulnerability against Diffie-Hellman Key Exchange
  14. Research on Patch Deployment
  15. Spy Dust
  16. More on Chris Roberts and Avionics Security
  17. United Airlines Offers Frequent Flier Miles for Finding Security Vulnerabilities
  18. Friday Squid Blogging: NASA's Squid Rover
  19. Microbe Biometric
  20. Eighth Movie-Plot Threat Contest Semifinalists
  21. In Which I Collide with Admiral Rogers
  22. Admiral Rogers Speaking at the Joint Service Academy Cyber Security Summit
  23. License Plate Scanners Hidden in Fake Cactus
  24. German Cryptanalysis of the M-209
  25. Amateurs Produce Amateur Cryptography
  26. More on the NSA's Capabilities
  27. Friday Squid Blogging: Squid Chair
  28. Cybersecurity Summer Camps
  29. Stealing a Billion
  30. Online Dating Scams
  31. Another Example of Cell Phone Metadata Forensic Surveillance
  32. An Example of Cell Phone Metadata Forensic Surveillance
  33. The NSA's Voice-to-Text Capabilities
  34. Easily Cracking a Master Combination Lock
  35. Detecting QUANTUMINSERT
  36. Friday Squid Blogging: Ceramic Squid Planters
  37. Digital Privacy Public Service Announcement
  38. Ears as a Biometric

April 2015

  1. Measuring the Expertise of Burglars
  2. Protecting Against Google Phishing in Chrome
  3. Remote Proctoring and Surveillance
  4. Shaking Someone Down for His Password
  5. Nice Essay on Security Snake Oil
  6. The History of Lockpicking
  7. The Further Democratization of Stingray
  8. Friday Squid Blogging: The Unique Reproductive Habits of the Vampire Squid
  9. Signed Copies of Data and Goliath
  10. Federal Trade Commissioner Julie Brill on Obscurity
  11. The Further Democratization of QUANTUM
  12. An Incredibly Insecure Voting Machine
  13. "Hinky" in Action
  14. Hacking Airplanes
  15. Hacker Detained by FBI after Tweeting about Airplane Software Vulnerabilities
  16. Counting the US Intelligence Community Leakers
  17. New Top Secret Information on the US's Drone Program
  18. Friday Squid Blogging: Squid Hoodie
  19. The No-Fly List and Due Process
  20. How Many Vulnerabilities Are there in Software?
  21. Metal Detectors at Sports Stadiums
  22. John Oliver Interviews Edward Snowden
  23. Two Thoughtful Essays on the Future of Privacy
  24. China's Great Cannon
  25. Friday Squid Blogging: The Longfin Inshore Squid Regularly Rewrites Its Own DNA
  26. Alternatives to the FBI's Manufacturing of Terrorists
  27. Pepper-Spray Drones
  28. Attacking Researchers Who Expose Voting Vulnerabilities
  29. Lone-Wolf Terrorism
  30. Cell Phone Opsec
  31. Bluetooth Door Lock
  32. Friday Squid Blogging: Giant Squid Video
  33. TrueCrypt Security Audit Completed
  34. Real-Life Remailers in the Warsaw Pact Nations
  35. Ugly Mail: Gmail Extension to Expose E-mail Tracking
  36. The Eighth Movie-Plot Threat Contest

March 2015

  1. Survey of Americans' Privacy Habits Post-Snowden
  2. Chinese CA Issuing Fraudulent Certificates
  3. Australia Outlaws Warrant Canaries
  4. Brute-Forcing iPhone PINs
  5. Friday Squid Blogging: Using Squid Proteins for Commercial Camouflage Products
  6. Yet Another Computer Side Channel
  7. New Zealand's XKEYSCORE Use
  8. Capabilities of Canada's Communications Security Establishment
  9. Reforming the FISA Court
  10. BIOS Hacking
  11. Friday Squid Blogging: Squid Pen
  12. New Paper on Digital Intelligence
  13. Cisco Shipping Equipment to Fake Addresses to Foil NSA Interception
  14. More Data and Goliath News
  15. Understanding the Organizational Failures of Terrorist Organizations
  16. How We Become Habituated to Security Warnings on Computers
  17. Details on Hacking Team Software Used by Ethiopian Government
  18. How the CIA Might Target Apple's XCode
  19. Friday Squid Blogging: Squid Stir-Fry
  20. Fall Seminar on Catastrophic Risk
  21. Threats to Information Integrity
  22. Data and Goliath Makes New York Times Best-Seller List
  23. The Changing Economics of Surveillance
  24. Equation Group Update
  25. Hardware Bit-Flipping Attack
  26. Can the NSA Break Microsoft's BitLocker?
  27. Geotagging Twitter Users by Mining Their Social Graphs
  28. Identifying When Someone Is Operating a Computer Remotely
  29. Attack Attribution and Cyber Conflict
  30. Friday Squid Blogging: Biodegradable Thermoplastic Inspired by Squid Teeth
  31. Data and Goliath 's Big Idea
  32. FREAK: Security Rollback Attack Against SSL
  33. The TSA's FAST Personality Screening Program Violates the Fourth Amendment
  34. Now Corporate Drones are Spying on Cell Phones
  35. Tom Ridge Can Find Terrorists Anywhere
  36. Data and Goliath : Reviews and Excerpts
  37. Google Backs Away from Default Lollipop Encryption
  38. The Democratization of Cyberattack

February 2015

  1. Friday Squid Blogging: Humboldt Squid Communicate by Flashing Each Other
  2. Data and Goliath Book Tour
  3. Everyone Wants You To Have Security, But Not from Them
  4. Snowden-Greenwald-Poitras AMA
  5. "Surreptitiously Weakening Cryptographic Systems"
  6. Twitpic
  7. AT&T Charging Customers to Not Spy on Them
  8. Cell Phones Leak Location Information through Power Usage
  9. Friday Squid Blogging: Squid Can Recode Their Genetic Makeup
  10. Man-in-the-Middle Attacks on Lenovo Computers
  11. NSA/GCHQ Hacks SIM Card Database and Steals Billions of Keys
  12. Database of Ten Million Passwords
  13. The Obsolescence of Submarines
  14. IRS Encourages Poor Cryptography
  15. The Equation Group's Sophisticated Hacking and Exploitation Tools
  16. Co3 Systems Changes Its Name to Resilient Systems
  17. Ford Proud that "Mustang" Is a Common Password
  18. New Book: Data and Goliath
  19. Friday Squid Blogging: Tentacle Utensils
  20. Cryptography for Kids
  21. Samsung Television Spies on Viewers
  22. Programming No-Fly Zones into Drones
  23. Electronic Surveillance Failures Leading up to the 2008 Mumbai Terrorist Attacks
  24. Understanding NSA Malware
  25. National Academies Report on Bulk Intelligence Collection
  26. Friday Squid Blogging: How to Fish for Squid
  27. NSA Using Hacker Research and Results
  28. GPG Financial Difficulties
  29. Tracking Bitcoin Scams
  30. Obama Says Terrorism Is Not an Existential Threat
  31. Texas School Overreaction
  32. Hiding a Morse Code Message in a Pop Song

January 2015

  1. Friday Squid Blogging: Large Squid Washes up on Greek Beach
  2. Co3 Systems Is Expanding into Europe
  3. Operating a Fake Bank
  4. Canada Spies on Internet Downloads
  5. Subconscious Keys
  6. Police Using Radar that Sees Through Walls
  7. The IDEA Encryption Algorithm with a 128-bit Block Length
  8. Basaaly Moalin: The One "Terrorist" Caught by Section 215 Surveillance
  9. My Conversation with Edward Snowden
  10. Friday Squid Blogging: Giggling Squid Restaurant
  11. When Thinking Machines Break the Law
  12. Defending Against Liar Buyer Fraud
  13. Accountability as a Security System
  14. US Law Enforcement Also Conducting Mass Telephone Surveillance
  15. New NSA Documents on Offensive Cyberoperations
  16. Friday Squid Blogging: "Squid Jiggin' Ground"
  17. My Superpower
  18. Common Risks in America: Cars and Guns
  19. 3-1-1 for Encryption
  20. The Security of Data Deletion
  21. Surveillance Detection for Android Phones
  22. Keystroke Logger Disguised as a USB Charger
  23. David Cameron's Plan to Ban Encryption in the UK
  24. The Risk of Unfounded Ebola Fears
  25. Viking Runes as Encryption in the 1500s
  26. How Surveillance Causes Writers to Self-Censor
  27. Friday Squid Blogging: Dumpling Squid and Sex
  28. Smart Pipe
  29. Further Evidence Pointing to North Korea as Sony Hacker
  30. Hacking Attack Causes Physical Damage at German Steel Mill
  31. Attack Attribution in Cyberspace
  32. Attributing the Sony Attack
  33. Fidgeting as Lie Detection
  34. Attributing Cyberattacks
  35. Loitering as a Security System
  36. How Browsers Store Passwords
  37. Friday Squid Blogging: Easy Squid Recipes
  38. Doxing as an Attack

2014 453

December 2014

  1. More Data on Attributing the Sony Attack
  2. Leaked CIA Documents
  3. New Documents on NSA's Cryptanalysis Capabilities
  4. Friday Squid Blogging: Mummers Play Featuring Giant Squid
  5. Merry Christmas from the NSA
  6. "Santa Claus and the Surveillance State"
  7. Did North Korea Really Attack Sony?
  8. Manipulating Juries with PowerPoint
  9. North Korea DDoSed Off the Internet
  10. 2008 Cyberattack Against Turkish Oil Pipeline
  11. Reacting to the Sony Hack
  12. Friday Squid Blogging: Squid Beard
  13. Lessons from the Sony Hack
  14. SS7 Vulnerabilities
  15. ISIS Cyberattacks
  16. The Limits of Police Subterfuge
  17. How the FBI Unmasked Tor Users
  18. Fake Cell Towers Found in Norway
  19. Understanding Zero-Knowledge Proofs
  20. Over 700 Million People Taking Steps to Avoid NSA Surveillance
  21. Friday Squid Blogging: Recreational Squid Fishing in Washington State
  22. Incident Response Webinar on Thursday
  23. Who Might Control Your Telephone Metadata
  24. Comments on the Sony Hack
  25. Not Enough CISOs to Go Around
  26. Effects of Terrorism Fears
  27. NSA Hacking of Cell Phone Networks
  28. Rapiscan Full-Body Scanner for Sale
  29. Regin Malware
  30. Friday Squid Blogging: Squid Poaching off the Coast of Japan
  31. Surveillance Cartoon
  32. Corporations Misusing Our Data
  33. Olfactory Surveillance
  34. Quantum Attack on Public-Key Algorithm
  35. The Future of Auditory Surveillance
  36. Putting NSA/GCHQ Spying Together

November 2014

  1. Friday Squid Blogging: Squid Bikes
  2. Economic Failures of HTTPS Encryption
  3. "Cooperating with the Future"
  4. New Snowden Documents Show GCHQ Paying Cable & Wireless for Access
  5. FBI Agents Pose as Repairmen to Bypass Warrant Process
  6. Regin: Another Military-Grade Malware
  7. The Security Underpinnnings of Cryptography
  8. New Kryptos Clue
  9. Friday Squid Blogging: Cephalopod Cognition
  10. Pre-Snowden Debate About NSA Call-Records Collection Program
  11. Citadel Malware Steals Password Manager Master Passwords
  12. A New Free CA
  13. Whatsapp Is Now End-to-End Encrypted
  14. Snarky 1992 NSA Report on Academic Cryptography
  15. The NSA's Efforts to Ban Cryptographic Research in the 1970s
  16. Friday Squid Blogging: The Story of Inventing the SQUID
  17. The Return of Crypto Export Controls?
  18. Pew Research Survey on Privacy Perceptions
  19. ISPs Blocking TLS Encryption
  20. Narrowly Constructing National Surveillance Law
  21. Hacking Internet Voting from Wireless Routers
  22. Sophisticated Targeted Attack Via Hotel Networks
  23. The Future of Incident Response
  24. Friday Squid Blogging: Dried Squid Sold in Korean Baseball Stadiums
  25. Co3 Systems Is Hiring
  26. Testing for Explosives in the Chicago Subway
  27. Why Hyping Cyber Threats is Counterproductive
  28. How the Internet Affects National Sovereignty
  29. Verizon Tracking Mobile Internet Use
  30. Adam Shostack's Threat Modeling

October 2014

  1. Friday Squid Blogging: Little Squid
  2. Hacking Team Documentation
  3. Enigma Simulator
  4. The Risk of Unfounded Ebola Fears
  5. Adobe Book Reader Surveillance
  6. FDA Guidance on Medical Device Cybersecurity
  7. Survey on What Americans Fear
  8. Apple Copies Your Files Without Your Knowledge or Consent
  9. US Intelligence "Second Leaker" Identified
  10. Authentication Attack Against Credit Card Verification
  11. Spritz: A New RC4-Like Stream Cipher
  12. Friday Squid Blogging: Humboldt Squids Attack Submarine
  13. The Ineffectiveness of Sealing the Border Against Ebola (and Other Viruses)
  14. Analysis of Printer Watermarking Techniques
  15. The NSA's Role in Commercial Cybersecurity
  16. Jumping Air Gaps with All-in-One Printers
  17. Deanonymizing Taxi Passenger and Fare Data
  18. Whisper Tracks Users
  19. More Crypto Wars II
  20. How Did the Feds Identity Dread Pirate Roberts?
  21. Friday Squid Blogging: 1,057 Squid T-Shirts
  22. Hacking a Video Poker Machine
  23. NSA Classification ECI = Exceptionally Controlled Information
  24. DEA Sets Up Fake Facebook Page in Woman's Name
  25. FOXACID Operations Manual
  26. Surveillance in Schools
  27. How James Bamford Came to Write The Puzzle Palace
  28. NSA Has Undercover Operatives in Foreign Companies
  29. Friday Squid Blogging: Flash-Fried Squid Recipe
  30. Online Activism and the Computer Fraud and Abuse Act
  31. Dynamic Encryption for Voice
  32. USB Cufflinks
  33. BadUSB Code Has Been Published
  34. Data and Goliath Is Finished
  35. iPhone Encryption and the Return of the Crypto Wars
  36. Friday Squid Blogging: Squid Burger
  37. William Binney Explains NSA Surveillance Using Snowden's Documents
  38. The NSA's Private Cloud
  39. Firechat
  40. StealthGenie CEO Indicted
  41. Security Theater in China

September 2014

  1. NSA Patents Available for License
  2. Friday Squid Blogging: Squid Fishing Moves North in California
  3. Medical Records Theft and Fraud
  4. Security Trade-offs of Cloud Backup
  5. Nasty Vulnerability found in Bash
  6. Julian Sanchez on the NSA and Surveillance Reform
  7. Detecting Robot Handwriting
  8. Lesson in Successful Disaster Planning
  9. Kill Switches for Weapons
  10. Security for Vehicle-to-Vehicle Communications
  11. Friday Squid Blogging: Colossal Squid Dissected in New Zealand
  12. iOS 8 Security
  13. Fake Cell Phone Towers Across the US
  14. Terrible Article on Vernam Ciphers
  15. The Full Story of Yahoo's Fight Against PRISM
  16. Identifying Dread Pirate Roberts
  17. Tracking People From their Cell Phones with an SS7 Vulnerability
  18. Two New Snowden Stories
  19. Security of the SHA Family of Hash Functions
  20. Friday Squid Blogging: 200-Pound Squid Found in Gulf of Mexico
  21. The Concerted Effort to Remove Data Collection Restrictions
  22. Tabnapping: A New Phishing Attack
  23. WikiLeaks Spy Files
  24. Safeplug Security Analysis
  25. Wi-Fi Jammer
  26. iPhone Payment Security
  27. Friday Squid Blogging: Book by One Squid-Obsessed Person About Another
  28. Security of Password Managers
  29. JackPair Encrypted Phone Add-On
  30. Electromagnetic Weapons
  31. Pencil-and-Paper Codes Used by Central American Criminal Gangs

August 2014

  1. Squid Skin Inspires Eye-Like Photodetector
  2. Cell Phone Kill Switches Mandatory in California
  3. ISIS Threatens US with Terrorism
  4. Hacking Traffic Lights
  5. Security Flaws in Rapiscan Full-Body Scanners
  6. Security by Obscurity at Healthcare.gov Site
  7. Eavesdropping Using Smart Phone Gyroscopes
  8. The Problems with PGP
  9. People Are Not Very Good at Matching Photographs to People
  10. Friday Squid Blogging: Squid Boats Illuminate Bangkok from Space
  11. Chapter 137 of My Surreal Life
  12. The Onion on Passwords
  13. Disguising Exfiltrated Data
  14. US Air Force is Focusing on Cyber Deception
  15. The Security of al Qaeda Encryption Software
  16. QUANTUM Technology Sold by Cyberweapons Arms Manufacturers
  17. NSA/GCHQ/CSEC Infecting Innocent Computers Worldwide
  18. Friday Squid Blogging: Te Papa Museum Gets a Second Colossal Squid
  19. Reverse-Engineering NSA Malware
  20. New Snowden Interview in Wired
  21. Security as Interface Guarantees
  22. Automatic Scanning for Highly Stressed Individuals
  23. Irrational Fear of Risks Against Our Children
  24. Friday Squid Blogging: Squid Proteins and the Brain-Computer Interface
  25. Eavesdropping by Visual Vibrations
  26. Social Engineering a Telemarketer
  27. The US Intelligence Community has a Third Leaker
  28. Over a Billion Passwords Stolen?
  29. Ubiquitous Surveillance in Singapore
  30. SynoLocker Ransomware Demands Bitcoins
  31. Former NSA Director Patenting Computer Security Techniques
  32. Friday Squid Blogging: Squid Nebula
  33. The NSA's Patents

July 2014

  1. The Fundamental Insecurity of USB
  2. Debit Card Override Hack
  3. The Costs of NSA Surveillance
  4. Conference on Deception
  5. Russia Paying for a Tor Break
  6. Friday Squid Blogging: Build a Squid
  7. Building a Legal Botnet in the Cloud
  8. Security Vulnerability in the Tails OS
  9. Securing the Nest Thermostat
  10. Fingerprinting Computers By Making Them Draw Images
  11. Friday Squid Blogging: Squid Dissection
  12. NASDAQ Hack
  13. US National Guard is Getting Into Cyberwar
  14. Hackers Steal Personal Information of US Security-Clearance Holders
  15. Security Against Traffic Analysis of Cloud Data Access
  16. Risks of Keyloggers on Public Computers
  17. Legal Attacks Against Tor
  18. GCHQ Catalog of Exploit Tools
  19. Studying Network Incident Response Teams Using Anthropological Methods
  20. Friday Squid Blogging: This Unmanned Drone Footage Will Blow Your Mind
  21. "Tips For Crafting A Strong Password That Really Pops"
  22. This Leaked NSA Memo Will Restore Your Faith in Humanity
  23. How Google Glass Snoops Steal Your Passcode
  24. This Common Home Appliance Can Compromise Your Entire Security
  25. NSA Spied on Prominent Muslim Americans
  26. Here's How Brazilian Crooks Steal Billions
  27. These Pickpocket Secrets Will Make You Cry
  28. The Simple Trick that Will Keep You Secure from Government Spies
  29. NSA Employee Flees to Hong Kong—You Won't Believe What Happens Next
  30. Friday Squid Blogging: Squid T-Shirt
  31. Web Activity Used in Court to Portray State of Mind
  32. NSA Targets the Privacy-Conscious for Surveillance
  33. Goldman Sachs Demanding E-Mail Be Deleted
  34. Match Fixing in Soccer
  35. How Traffic Shaping Can Help the NSA Evade Legal Oversight

June 2014

  1. Blackphone
  2. Friday Squid Blogging: WTF Evolution Features a Squid
  3. More on Hacking Team's Government Spying Software
  4. Pepper Spray Drones
  5. Risks of Not Understanding a One-Way Function
  6. Could Keith Alexander's Advice Possibly Be Worth $600K a Month?
  7. Defending Against Algorithm Substitution Attacks
  8. Quadrennial Homeland Security Review
  9. Building Retro Reflectors
  10. Friday Squid Blogging: Ruth Reichl Cooks Squid
  11. Co3 Systems Is Hiring
  12. More Details on NSA Tapping the Internet Backbone
  13. Paying People to Infect their Computers
  14. The Democratization of Surveillance
  15. Story of a $10 Million Remote Scam
  16. Use of Social Media by ISIS
  17. The State of Cyberinsurance
  18. Falsifying Evidence on a Smart Phone
  19. Friday Squid Blogging: Antibiotic-Resistant Bacteria Found in Canadian Squid
  20. "Erotica Written By Someone With An Appropriate Sense of Privacy"
  21. Seventh Movie-Plot Threat Contest Winner
  22. Censorship in China
  23. Feedly the Victim of DDoS Blackmail
  24. iOS 8 is Randomizing MAC Addresses
  25. Security Risks from Remote-Controlled Smart Devices
  26. Security and Human Behavior (SHB 2014)
  27. Friday Squid Blogging: Squid Cartoon
  28. GCHQ Intercept Sites in Oman
  29. Edward Snowden Wins EPIC "Champion of Freedom" Award
  30. The Human Side of Heartbleed
  31. Chinese Hacking of the US

May 2014

  1. Friday Squid Blogging: Squid-Shaped Pancakes
  2. Vulnerabilities Found in Law Enforcement Surveillance System
  3. TrueCrypt WTF
  4. Eben Moglen on Snowden and Surveillance
  5. The Economics of Bulk Surveillance
  6. Friday Squid Blogging: Squid Ink Cocktail
  7. Peter Watts on the Harms of Surveillance
  8. Disclosing vs. Hoarding Vulnerabilities
  9. The NSA is Not Made of Magic
  10. Government Policy on Cell Phone Interception Technology
  11. Preplay Attack on Chip and PIN
  12. Advances in Solving the Discrete Log Problem
  13. Pervasive Monitoring as Network Attack
  14. Abusing Power to Shut Down a Twitter Parody Account
  15. Friday Squid Blogging: Fossil Squid
  16. How to Stop an Insider from Stealing All Your Secrets
  17. Forged SSL Certificates Pervasive on the Internet
  18. Is Antivirus Dead?
  19. Seventh Movie-Plot Threat Contest Semifinalists
  20. Espionage vs. Surveillance
  21. New Al Qaeda Encryption Software
  22. Computer Forensics in Fiction
  23. New NSA Snowden Documents
  24. Steganography in Tweets
  25. Internet Subversion
  26. Friday Squid Blogging: The Evolutionary Purpose of Pain
  27. Putin Requires Russian Bloggers to Register with the Government
  28. Retelling of Stories Increases Bias
  29. Correspondence Between the NSA and Google Leaked
  30. Fearing Google
  31. The Economics of Video Game Cheating
  32. Friday Squid Blogging: How Flying Squid Fly
  33. Unusual Electronic Voting Machine Threat Model
  34. Analysis of the FBI's Failure to Stop the Boston Marathon Bombings
  35. Really Weird Keith Alexander Interview
  36. The Federal Reserve System's Cyberdefense Force

April 2014

  1. Tracking People from Smartphone Accelerometers
  2. The Quantified Toilet Hoax
  3. Details of Apple's Fingerprint Recognition
  4. A New Pencil-and-Paper Encryption Algorithm
  5. Friday Squid Blogging: New Squid Exhibit at the Monterey Bay Aquarium.
  6. Is Google Too Big to Trust?
  7. Conversnitch
  8. The Security of Various Programming Languages
  9. Dan Geer on Heartbleed and Software Monocultures
  10. Info on Russian Bulk Surveillance
  11. Friday Squid Blogging: Squid Jigging
  12. Metaphors of Surveillance
  13. Reverse Heartbleed
  14. Overreacting to Risk
  15. Tails
  16. Book Title
  17. Auditing TrueCrypt
  18. Schneier Talks and Interviews
  19. Schneier Speaking Schedule: April–May
  20. GoGo Wireless Adds Surveillance Capabilities for Government
  21. Friday Squid Blogging: Bronze Giant Squid Sculpture
  22. More on Heartbleed
  23. Police Disabling Their Own Voice Recorders
  24. Heartbleed
  25. "Unbreakable" Encryption Almost Certainly Isn't
  26. The Youngest Security Researcher
  27. Friday Squid Blogging: Squid + Security in a Cartoon
  28. Mass Surveillance by Eavesdropping on Web Cookies
  29. Ephemeral Apps
  30. Seventh Movie-Plot Threat Contest

March 2014

  1. The Continuing Public/Private Surveillance Partnership
  2. Friday Squid Blogging: Encounter Between a Submersible Robot and a Giant Squid
  3. Creating Forensic Sketches from DNA
  4. Smarter People are More Trusting
  5. Geolocating Twitter Users
  6. Chilean Drug Trafficker Pencil-and-Paper Code
  7. Password Hashing Competition
  8. NSA Hacks Huawei
  9. An Open Letter to IBM's Open Letter
  10. Friday Squid Blogging: Giant Squid as an Omen
  11. New Book on Data and Power
  12. Liveblogging the Financial Cryptography Conference
  13. Automatic Face-Recognition Software Getting Better
  14. MYSTIC: The NSA's Telephone Call Collection Program
  15. Details of the Target Credit Card Breach
  16. Schneier Speaking Schedule: March–April
  17. Schneier Talks and Interviews
  18. Friday Squid Blogging: Squid Ring
  19. Nicholas Weaver Explains how QUANTUM Works
  20. Security as a Public Health Issue
  21. Metadata = Surveillance
  22. How the NSA Exploits VPN and VoIP Traffic
  23. STELLARWIND Classification Guide
  24. New Information on the NSA's QUANTUM Program
  25. Insurance Companies Pushing for More Cybersecurity
  26. Postmortem: NSA Exploits of the Day
  27. RAGEMASTER: NSA Exploit of the Day
  28. The Security of the Fortuna PRNG
  29. FIREWALK: NSA Exploit of the Day
  30. Computer Network Exploitation vs. Computer Network Attack
  31. Friday Squid Blogging: Being a Jumbo Squid
  32. COTTONMOUTH-III: NSA Exploit of the Day
  33. Academic Paper Spam
  34. COTTONMOUTH-II: NSA Exploit of the Day
  35. Wi-Fi Virus
  36. Scent Biometric
  37. COTTONMOUTH-I: NSA Exploit of the Day
  38. Surveillance by Algorithm
  39. WATERWITCH: NSA Exploit of the Day
  40. How NIST Develops Cryptographic Standards
  41. Co3 Systems News
  42. TYPHON HX: NSA Exploit of the Day
  43. Choosing Secure Passwords

February 2014

  1. Friday Squid Blogging: Bobtail Squid Photos
  2. NEBULA: NSA Exploit of the Day
  3. Decoding the Voynich Manuscript
  4. GENESIS: NSA Exploit of the Day
  5. Was the iOS SSL Flaw Deliberate?
  6. ENTOURAGE: NSA Exploit of the Day
  7. DDoSing a Cell Phone Network
  8. EBSR: NSA Exploit of the Day
  9. Breaking Up the NSA
  10. CYCLONE Hx9: NSA Exploit of the Day
  11. New Results in Software Obfuscation
  12. Friday Squid Blogging: Squid vs. Owlfish
  13. CROSSBEAM: NSA Exploit of the Day
  14. Co3 Systems at the RSA Conference
  15. Building an Online Lie Detector
  16. Brian Krebs
  17. CANDYGRAM: NSA Exploit of the Day
  18. RCS Spyware and Citizen Lab
  19. TOTEGHOSTLY 2.0: NSA Exploit of the Day
  20. Debating Snowden's Actions
  21. TOTECHASER: NSA Exploit of the Day
  22. What Information Are Stun Guns Recording?
  23. PICASSO: NSA Exploit of the Day
  24. US Infosec Researchers Against NSA Surveillance
  25. Who Should Store NSA Surveillance Data
  26. Friday Squid Blogging: Giant Squid TED Talk
  27. MONKEYCALENDAR: NSA Exploit of the Day
  28. My Talk on the NSA
  29. The Insecurity of Secret IT Systems
  30. GOPHERSET: NSA Exploit of the Day
  31. Finding People's Locations Based on Their Activities in Cyberspace
  32. DROPOUTJEEP: NSA Exploit of the Day
  33. DRM and the Law
  34. SURLYSPAWN: NSA Exploit of the Day
  35. "The Mask" Espionage Malware
  36. WISTFULTOLL: NSA Exploit of the Day
  37. NSA/GCHQ Accused of Hacking Belgian Cryptographer
  38. Friday Squid Blogging: Radioactive Giant Squid Washes Ashore in California
  39. TRINITY: NSA Exploit of the Day
  40. Another Fake NSA Codename Generator
  41. SWAP: NSA Exploit of the Day
  42. Dispute Resolution Systems for Security Protocols
  43. SOMBERKNAVE: NSA Exploit of the Day
  44. 1971 Social Engineering Attack
  45. MAESTRO-II: NSA Exploit of the Day
  46. Hacking Airline Lounges for Free Meals
  47. JUNIORMINT: NSA Exploit of the Day
  48. CSEC Surveillance Analysis of IP and User Data

January 2014

  1. Friday Squid Blogging: Squid T-Shirt
  2. IRATEMONK: NSA Exploit of the Day
  3. Another Credit-Card-as-Authentication Hack
  4. HOWLERMONKEY: NSA Exploit of the Day
  5. Side-Channel Attacks on Frog Calls
  6. Catalog of Snowden Revelations
  7. GINSU: NSA Exploit of the Day
  8. Trying to Value Online Privacy
  9. The Politics of Fear
  10. TAWDRYYARD: NSA Exploit of the Day
  11. US Privacy and Civil Liberties Oversight Board (PCLOB) Condemns NSA Mass Surveillance
  12. EU Might Raise Fines for Data Breaches
  13. SPARROW II: NSA Exploit of the Day
  14. New Security Risks for Windows XP Systems
  15. Friday Squid Blogging: Giant Squid Caught by Japanese Fisherman
  16. PHOTOANGLO: NSA Exploit of the Day
  17. Applied Cryptography Available Online
  18. Income Inequality as a Security Issue
  19. NIGHTWATCH: NSA Exploit of the Day
  20. Consumer Manipulation
  21. NIGHTSTAND: NSA Exploit of the Day
  22. Refrigerator Sending Spam Messages?
  23. Questioning the Efficacy of NSA's Bulk-Collection Programs
  24. LOUDAUTO: NSA Exploit of the Day
  25. Adware Vendors Buy and Abuse Chrome Extensions
  26. CTX4000: NSA Exploit of the Day
  27. DDOS Attacks Using NTP
  28. Friday Squid Blogging: Camouflage in Squid Eyes
  29. PowerLocker uses Blowfish
  30. STUCCOMONTANA: NSA Exploit of the Day
  31. NSA-O-Matic
  32. NSA Collects Hundreds of Millions of Text Messages Daily
  33. SIERRAMONTANA: NSA Exploit of the Day
  34. Today I Briefed Congress on the NSA
  35. Edward Elgar's Ciphers
  36. Cell Phone Tracking by Non-State Actors
  37. SCHOOLMONTANA: NSA Exploit of the Day
  38. The Changing Cost of Surveillance
  39. HEADWATER: NSA Exploit of the Day
  40. Debunking the "NSA Mass Surveillance Could Have Stopped 9/11" Myth
  41. SOUFFLETROUGH: NSA Exploit of the Day
  42. How the NSA Threatens National Security
  43. Friday Squid Blogging: Squid New Year
  44. 1971 FBI Burglary
  45. JETPLOW: NSA Exploit of the Day
  46. Security Risks of Embedded Systems
  47. HALLUXWATER: NSA Exploit of the Day
  48. The Failure of Privacy Notices and Consumer Choice
  49. Twitter Users: Please Make Sure You're Following the Right Feed
  50. GOURMETTROUGH: NSA Exploit of the Day
  51. Matt Blaze on TAO's Methods
  52. FEEDTROUGH: NSA Exploit of the Day
  53. I’ve Joined Co3 Systems
  54. Friday Squid Blogging: Squid-Shaped Dog Toy
  55. NSA Documents from the Spiegel Story
  56. IRONCHEF: NSA Exploit of the Day
  57. Cost/Benefit Analysis of NSA's 215 Metadata Collection Program
  58. DEITYBOUNCE: NSA Exploit of the Day
  59. "Military Style" Raid on California Power Station

2013 494

December 2013

  1. More about the NSA's Tailored Access Operations Unit
  2. Joseph Stiglitz on Trust
  3. Friday Squid Blogging: Kim Jong Un Tours Frozen Squid Factory
  4. Operation Vula
  5. Christmas Comic
  6. Report on Syrian Malware
  7. NSA Spying: Whom Do You Believe?
  8. Friday Squid Blogging: "What Does the Squid Say?"
  9. Yes, I'm Leaving BT
  10. Eben Moglen and I Talk about the NSA
  11. Acoustic Cryptanalysis
  12. Tor User Identified by FBI
  13. Security Vulnerabilities of Legacy Code
  14. Attacking Online Poker Players
  15. Friday Squid Blogging: Squid Bow Tie
  16. President Obama and the Intelligence Community
  17. World War II Anecdote about Trust and Security
  18. How the NSA Tracks Mobile Phone Data
  19. NSA Tracks People Using Google Cookies
  20. NSA Spying on Online Gaming Worlds
  21. Bitcoin Explanation
  22. Friday Squid Blogging: Hoax Squid-Like Creature
  23. New Book: Carry On
  24. Bruce Schneier Facts T-Shirts
  25. Telepathwords: A New Password Strength Estimator
  26. Heartwave Biometric
  27. The Problem with EULAs
  28. Evading Airport Security
  29. Keeping Track of All the Snowden Documents
  30. The TQP Patent
  31. How Antivirus Companies Handle State-Sponsored Malware

November 2013

  1. Friday Squid Blogging: Squid Worm Discovered
  2. More on Stuxnet
  3. Tor Appliance
  4. The FBI Might Do More Domestic Surveillance than the NSA
  5. US Working to Kill UN Resolutions to Limit International Surveillance
  6. Surveillance as a Business Model
  7. Friday Squid Blogging: Magnapinna Squid Photo
  8. Reddit "Ask Me Anything"
  9. Rerouting Internet Traffic by Attacking BGP
  10. How to Avoid Getting Arrested
  11. Fokirtor
  12. Explaining and Speculating About QUANTUM
  13. Friday Squid Blogging: Squid Fishermen Seen from Space
  14. Various Schneier Audio and Video Talks and Interviews
  15. Security Tents
  16. A Fraying of the Public/Private Surveillance Partnership
  17. Microsoft Retiring SHA-1 in 2016
  18. Another QUANTUMINSERT Attack Example
  19. Cryptographic Blunders Revealed by Adobe's Password Leak
  20. Bizarre Online Gambling Movie-Plot Threat
  21. Dan Geer Explains the Government Surveillance Mentality
  22. Friday Squid Blogging: Tree Yarn-Bombed
  23. Another Snowden Lesson: People Are the Weak Security Link
  24. Why the Government Should Help Leakers
  25. Risk-Based Authentication
  26. Deception in Fruit Flies
  27. Elliptic Curve Crypto Primer
  28. The Story of the Bomb Squad at the Boston Marathon
  29. More NSA Revelations
  30. badBIOS
  31. Friday Squid Blogging: 8-Foot Giant Squid Pillow
  32. A Template for Reporting Government Surveillance News Stories
  33. Reading Group at Harvard Law School
  34. Close-In Surveillance Using Your Phone's Wi-Fi

October 2013

  1. NSA Eavesdropping on Google and Yahoo Networks
  2. The Battle for Power on the Internet
  3. What the NSA Can and Cannot Do
  4. Arguing for NSA-Level Internet Surveillance
  5. Understanding the Threats in Cyberspace
  6. US Government Monitoring Public Internet in Real Time
  7. Friday Squid Blogging: Dynamic Biophotonics in Squid
  8. Book Review: Cyber War Will Not Take Place
  9. Cognitive Biases About Violence as a Negotiating Tactic
  10. DARPA Contest for Fully Automated Network Defense
  11. Code Names for NSA Exploit Tools
  12. Dry Ice Bombs at LAX
  13. Can I Be Trusted?
  14. Defending Against Crypto Backdoors
  15. The Trajectories of Government and Corporate Surveillance
  16. Friday Squid Blogging: Fiona Apple Wears a Squid as a Hat in New Video
  17. D-Link Router Backdoor
  18. Identifying Cell Phones Through Sensor Imperfections
  19. "A Court Order Is an Insider Attack"
  20. SecureDrop
  21. iPhone Sensor Surveillance
  22. NSA Harvesting Contact Lists
  23. New Secure Smart Phone App
  24. Massive MIMO Cryptosystem
  25. Insecurities in the Linux /dev/random
  26. Fingerprinting Burner Phones
  27. Friday Squid Blogging: 30-Foot Giant Squid Washes Ashore
  28. Stuff I Say
  29. New Low in Election Fraud
  30. Air Gaps
  31. Build Your Own Enigma
  32. Breaking Taiwan's Digital ID
  33. A New Postal Privacy Product
  34. The NSA's New Risk Analysis
  35. Me on Surveillance
  36. Why It's Important to Publish the NSA Programs
  37. Silk Road Author Arrested Due to Bad Operational Security
  38. How the NSA Attacks Tor/Firefox Users With QUANTUM and FOXACID
  39. Friday Squid Blogging: Squid Exhibit at the Monterey Bay Aquarium
  40. "Trust the Math"
  41. Developments in Microphone Technology
  42. Is Cybersecurity a Profession?
  43. On Anonymous
  44. On Secrecy
  45. My TEDx Talk
  46. NSA Storing Internet Data, Social Networking Data, on Pretty Much Everybody
  47. Will Keccak = SHA-3?
  48. WhoIs Privacy and Proxy Service Abuse

September 2013

  1. Senator Feinstein Admits the NSA Taps the Internet Backbone
  2. Friday Squid Blogging: A Squid that Fishes
  3. Another Schneier Interview
  4. 3D-Printed Robot to Break Android PINs
  5. Paradoxes of Big Data
  6. Good Summary of Potential NSA Involvement in a NIST RNG Standard
  7. Apple's iPhone Fingerprint Reader Successfully Hacked
  8. NSA Job Opening
  9. Metadata Equals Surveillance
  10. Friday Squid Blogging: How Bacteria Terraform a Squid
  11. Legally Justifying NSA Surveillance of Americans
  12. Google Knows Every Wi-Fi Password in the World
  13. Yochai Benkler on the NSA
  14. The Limitations of Intelligence
  15. Surreptitiously Tampering with Computer Chips
  16. Tom Tomorrow from 1994
  17. Reforming the NSA
  18. Take Back the Internet
  19. How to Remain Secure Against the NSA
  20. Friday Squid Blogging: Squid Fishing in the Cook Islands
  21. Radio Interviews with Me
  22. New NSA Leak Shows MITM Attacks Against Major Internet Services
  23. Did I Actually Say That?
  24. Ed Felten on the NSA Disclosures
  25. Matthew Green Speculates on How the NSA Defeats Encryption
  26. iPhone Fingerprint Authentication
  27. The TSA Is Legally Allowed to Lie to Us
  28. Government Secrecy and the Generation Gap
  29. Excess Automobile Deaths as a Result of 9/11
  30. My New PGP/GPG and OTR Keys
  31. Friday Squid Blogging: Giant Squid Found Off the Coast of Spain
  32. Another Interview
  33. Conspiracy Theories and the NSA
  34. The NSA's Cryptographic Capabilities
  35. The NSA Is Breaking Most Encryption on the Internet
  36. The Effect of Money on Trust
  37. Journal of Homeland Security and Emergency Management
  38. Human-Machine Trust Failures
  39. SHA-3 Status
  40. Business Opportunities in Cloud Security
  41. Syrian Electronic Army Cyberattacks
  42. Our Newfound Fear of Risk
  43. 1983 Article on the NSA

August 2013

  1. Friday Squid Blogging: Bobtail Squid Photo
  2. Opsec Details of Snowden Meeting with Greenwald and Poitras
  3. More on the NSA Commandeering the Internet
  4. How Many Leakers Came Before Snowden?
  5. The Federal Trade Commission and Privacy
  6. Feds Target Polygraph-Beating Company
  7. Evading Internet Censorship
  8. More on NSA Data Collection
  9. Detaining David Miranda
  10. Protecting Against Leakers
  11. "The Next Generation Communications Privacy Act"
  12. Friday Squid Blogging: New Research in How Squids Change Color
  13. How Security Becomes Banal
  14. Hacking Consumer Devices
  15. Susan Landau Article on the Snowden Documents
  16. Measuring Entropy and its Applications to Encryption
  17. Teens and Privacy
  18. The Cryptopocalypse
  19. Friday Squid Blogging: Squid Ink as Food Coloring
  20. Wired Names "Schneier on Security" to Best Blog List
  21. Management Issues in Terrorist Organizations
  22. The NSA is Commandeering the Internet
  23. Time Magazine Names "Schneier on Security" to Best Blog List
  24. Stories from MI5
  25. Circumventing Communications Blackouts
  26. Book Review: Rise of the Warrior Cop
  27. The 2013 Cryptologic History Symposium
  28. NSA Increasing Security by Firing 90% of Its Sysadmins
  29. Security at Sports Stadiums
  30. Friday Squid Blog: Rickshaw Cart Woodblock Print
  31. Lavabit E-Mail Service Shut Down
  32. Latest Movie-Plot Threat: Explosive-Dipped Clothing
  33. Twitter's Two-Factor Authentication System
  34. Kip Hawley on Fixing the TSA
  35. Restoring Trust in Government and the Internet
  36. Has Tor Been Compromised?
  37. NSA Surveillance and Mission Creep
  38. The Public/Private Surveillance Partnership
  39. Friday Squid Blogging: Squid Watch
  40. XKeyscore
  41. Cryptography Engineering Book Review
  42. False Positives and Ubiquitous Surveillance
  43. Economist Cyberwar Debate
  44. Scientists Banned from Revealing Details of Car-Security Hack

July 2013

  1. Brian Krebs Harassed
  2. Neighborhood Security: Feeling vs. Reality
  3. Really Clever Bank Card Fraud
  4. Obama's Continuing War Against Leakers
  5. Friday Squid Blogging: Squid Song
  6. NSA Cracked the Kryptos Sculpture Years Before the CIA Did
  7. Secret Information Is More Trusted
  8. Details on NSA/FBI Eavesdropping
  9. Poached Eggs
  10. Michael Hayden on the Effects of Snowden's Whistleblowing
  11. NSA Implements Two-Man Control for Sysadmins
  12. How the FISA Court Undermines Trust
  13. Marc Rotenberg on the NSA Supreme Court Suit
  14. Prosecuting Snowden
  15. Violence as a Source of Trust in Criminal Societies
  16. Friday Squid Blogging: Paul Burke Giant Squid Sculpture
  17. TSA Considering Implementing Randomized Security
  18. Counterterrorism Mission Creep
  19. PRISM Q&A
  20. Snowden's Dead Man's Switch
  21. DHS Puts its Head in the Sand
  22. Tapping Undersea Cables
  23. The Value of Breaking the Law
  24. A Problem with the US Privacy and Civil Liberties Oversight Board
  25. Walls Around Nations
  26. My Fellowship at the Berkman Center
  27. Friday Squid Blogging: Squid–Bacteria Symbiotic Relationships
  28. F2P Monetization Tricks
  29. More NSA Code Names
  30. The NSA's Project SHAMROCK
  31. Musing on Secret Languages
  32. The Effectiveness of Privacy Audits
  33. Another Perspective on the Value of Privacy
  34. Big Data Surveillance Results in Bad Policy
  35. Protecting E-Mail from Eavesdropping
  36. Friday Squid Blogging: Giant Origami Squid
  37. How Apple Continues to Make Security Invisible
  38. Sixth Movie-Plot Threat Contest Winner
  39. Is Cryptography Engineering or Science?
  40. The Office of the Director of National Intelligence Defends NSA Surveillance Programs
  41. Privacy Protests
  42. US Department of Defense Censors Snowden Story
  43. Security Analysis of Children
  44. NSA E-Mail Eavesdropping
  45. I've Joined the EFF Board
  46. How the NSA Eavesdrops on Americans
  47. SIMON and SPECK: New NSA Encryption Algorithms

June 2013

  1. Friday Squid Blogging: Man Pulled Under by Squids
  2. Me on EconTalk
  3. My Talk at Google
  4. Preventing Cell Phone Theft through Benefit Denial
  5. Malware that Foils Two-Factor Authentication
  6. Pre-9/11 NSA Thinking
  7. Lessons from Biological Security
  8. Secrecy and Privacy
  9. Cracking the Kryptos Sculpture
  10. MAD in Cyberspace
  11. Spear Phishing Attack Against the Financial Times
  12. The Future of Satellite Surveillance
  13. Friday Squid Blogging: How the Acidification of the Oceans Affects Squid
  14. Me on the Lou Dobbs Show
  15. US Offensive Cyberwar Policy
  16. The Japanese Response to Terrorism
  17. New Details on Skype Eavesdropping
  18. Love Letter to an NSA Agent
  19. The US Uses Vulnerability Data for Offensive Purposes
  20. Petition the NSA to Subject its Surveillance Program to Public Comment
  21. Finding Sociopaths on Facebook
  22. Cost/Benefit Questions NSA Surveillance
  23. Details of NSA Data Requests from US Corporations
  24. NSA Secrecy and Personal Privacy
  25. Evidence that the NSA Is Storing Voice Content, Not Just Metadata
  26. Project C-43: A Final Piece of Public-Key Cryptography History
  27. Blowback from the NSA Surveillance
  28. Friday Squid Blogging: Sperm Consumption in the Southern Bottletail Squid
  29. Sixth Annual Movie-Plot Threat Contest Semifinalists
  30. Ricin as a Terrorist Tool
  31. Trading Privacy for Convenience
  32. More on Feudal Security
  33. Essays Related to NSA Spying Documents
  34. Prosecuting Snowden
  35. The Psychology of Conspiracy Theories
  36. Trust in IT
  37. Tagging and Location Technologies
  38. Government Secrets and the Need for Whistle-blowers
  39. Friday Squid Blogging: Squid Comic
  40. Audio Interview with Me
  41. A Really Good Article on How Easy it Is to Crack Passwords
  42. The Cost of Terrorism in Pakistan
  43. Eugene Spafford Answers Questions on CNN.com
  44. Security and Human Behavior (SHB 2013)
  45. The Problems with CALEA-II
  46. The Security Risks of Unregulated Google Search
  47. The Problems with Managing Privacy by Asking and Giving Consent

May 2013

  1. Friday Squid Blogging: Squid Pronouns
  2. The Rise of Amateurs Recording Events
  3. Why We Lie
  4. Are We Finally Thinking Sensibly About Terrorism?
  5. Nassim Nicholas Taleb on Risk Perception
  6. The Politics of Security in a Democracy
  7. Friday Squid Blogging: Eating Giant Squid
  8. Training Baggage Screeners
  9. New Report on Teens, Social Media, and Privacy
  10. One-Shot vs. Iterated Prisoner's Dilemma
  11. "The Global Cyber Game"
  12. DDOS as Civil Disobedience
  13. Surveillance and the Internet of Things
  14. Security Risks of Too Much Security
  15. Friday Squid Blogging: Striped Pyjama Squid Pet Sculpture
  16. Applied Cryptography on Elementary
  17. Bluetooth-Controlled Door Lock
  18. Transparency and Accountability
  19. 2007 NSA Manual on Internet Hacking
  20. Friday Squid Blogging: Squid Festival in Monterey
  21. The Onion on Browser Security
  22. Mail Cover
  23. The Economist on Guantanamo
  24. Reidentifying Anonymous Data
  25. Evacuation Alerts at the Airport
  26. Is the U.S. Government Recording and Saving All Domestic Telephone Calls?
  27. Intelligence Analysis and the Connect-the-Dots Metaphor
  28. Michael Chertoff on Google Glass
  29. Honeywords
  30. Friday Squid Blogging: Squid Escape Artist
  31. Another WWII Message Decoded
  32. The Public/Private Surveillance Partnership
  33. Risks of Networked Systems
  34. More on FinSpy/FinFisher
  35. Google Pays $31,000 for Three Chrome Vulnerabilities
  36. Details of a Cyberheist

April 2013

  1. The Importance of Backups
  2. Pinging the Entire Internet
  3. More Links on the Boston Terrorist Attacks
  4. Friday Squid Blogging: Lego Giant Squid Model
  5. xkcd on a Bad Threat Model
  6. Tor Needs Bridges
  7. Cryptanalyst on British Postage Stamps
  8. Random Links on the Boston Terrorist Attack
  9. Ellen on Protecting Passwords
  10. More Plant Security Countermeasures
  11. The Police Now Like Amateur Photography
  12. Securing Members of Congress from Transparency
  13. A Discussion of Redaction
  14. About Police Shoot Outs and Spectators
  15. The Boston Marathon Bomber Manhunt
  16. Me at the Berkman Center
  17. Friday Squid Blogging: Giant Squid Bike Rack
  18. NSA Cryptography Course
  19. The Nemim.gen Trojan
  20. Initial Thoughts on the Boston Bombings
  21. FBI and Cell Phone Surveillance
  22. Google Glass Enables New Forms of Cheating
  23. Friday Squid Blogging: Illegal Squid Fishing
  24. Remotely Hijacking an Aircraft
  25. Thieves Use Video Camera to Stake Out Properties
  26. Security Externalities and DDOS Attacks
  27. Last Battle-of-Midway Cryptanalyst
  28. Nice Security Mindset Example
  29. Bitcoins in the Mainstream Media
  30. Elite Panic
  31. Government Use of Hackers as an Object of Fear
  32. Friday Squid Blogging: Nighttime Squid Fishing Seen from Space
  33. Apple's iMessage Encryption Seems to Be Pretty Good
  34. Skein Collision Competition
  35. NSA Acrostic Puzzles
  36. IT for Oppression
  37. Narratives of Secrecy
  38. Sixth Movie-Plot Threat Contest
  39. What I've Been Thinking About

March 2013

  1. Friday Squid Blogging: Bomb Discovered in Squid at Market
  2. The Dangers of Surveillance
  3. New RC4 Attack
  4. Unwitting Drug Smugglers
  5. Security Awareness Training
  6. The NSA's Cryptolog
  7. Identifying People from Mobile Phone Location Data
  8. Our Internet Surveillance State
  9. Friday Squid Blogging: Giant Squid Genetics
  10. Changes to the Blog
  11. FBI Secretly Spying on Cloud Computer Users
  12. Text Message Retention Policies
  13. When Technology Overtakes Security
  14. Lessons From the FBI's Insider Threat Program
  15. Finspy
  16. Gauss
  17. A 1962 Speculative Essay on Computers and Intelligence
  18. Prison Escape
  19. Friday Squid Blogging: WTF, Evolution?
  20. xkcd on PGP
  21. Stuxnet is Much Older than We Thought
  22. On Secrecy
  23. Nationalism on the Internet
  24. Security Theater on the Wells Fargo Website
  25. Hacking Best-seller Lists
  26. Cisco IP Phone Hack
  27. "The Logic of Surveillance"
  28. Dead Drop from the 1870s
  29. Is Software Security a Waste of Money?
  30. Friday Squid Blogging: Squid/Whale Yin-Yang
  31. Ross Anderson's Security Engineering Online
  32. Oxford University Blocks Google Docs
  33. How the FBI Intercepts Cell Phone Data
  34. Browser Security
  35. The NSA's Ragtime Surveillance Program and the Need for Leaks
  36. Al Qaeda Document on Avoiding Drone Strikes
  37. Marketing at the RSA Conference
  38. Technologies of Surveillance
  39. New Internet Porn Scam
  40. Getting Security Incentives Right
  41. Friday Squid Blogging: Another Squid Cartoon
  42. Me on "Virtually Speaking"
  43. Phishing Has Gotten Very Good

February 2013

  1. The Court of Public Opinion
  2. Brazen Physical Thefts
  3. Alan F. Westin Died
  4. How Complex Systems Fail
  5. Security Lessons from the Battle of Hoth
  6. House Hearing: How Well Is the TSA Doing?
  7. Me at the RSA Conference
  8. Another Essay about Liars and Outliers
  9. Friday Squid Blogging: Land Squids
  10. I Was on Inventing the Future
  11. Hacking the Papal Election
  12. All Those Companies that Can't Afford Dedicated Security
  13. More on Chinese Cyberattacks
  14. Age Biases in Perceptions of Trust
  15. Cheating at Chess
  16. Fixing Soccer Matches
  17. 19th-Century Traffic Analysis
  18. Hacking Citation Counts
  19. More State-Sponsored Hacking
  20. Automobile Data Surveillance and the Future of Black Boxes
  21. Friday Squid Blogging: More on Flying Squid
  22. Jacob Appelbaum's 29C3 Keynote Speech
  23. Guessing Smart Phone PINs by Monitoring the Accelerometer
  24. Using the iWatch for Authentication
  25. Anti-Cheating Security in Casinos
  26. Real-World Prisoner's Dilemma from France
  27. New al Qaeda Encryption Tool
  28. Massive Police Shootout in Cleveland Despite Lack of Criminals
  29. Our New Regimes of Trust
  30. Really Clever TLS Attack
  31. Platform Fragmentation as a Security Issue
  32. Friday Squid Blogging: Squid Recipe
  33. I Seem to Be a Physical Security Expert Now
  34. Millennials and Cybersecurity
  35. Inauguration Security
  36. Tide Becomes Drug Currency
  37. Over $3M in Prizes to Hack Google Chrome
  38. Why Is Quantum Computing So Hard?
  39. New York Times Hacked by China
  40. Anti-Drone Clothing
  41. Proactive Defense Papers
  42. Security Seals
  43. Using Imagery to Avoid Censorship
  44. Friday Squid Blogging: Squid Anchor
  45. Pentagon Staffs Up U.S. Cyber Command
  46. Jared Diamond on Common Risks

January 2013

  1. The Eavesdropping System in Your Computer
  2. Power and the Internet
  3. "People, Process, and Technology"
  4. Who Does Skype Let Spy?
  5. Backdoors Built in to Barracuda Networks Equipment
  6. Complexity and Security
  7. Dangerous Security Theater: Scrambling Fighter Jets
  8. Violence as a Contagious Disease
  9. Friday Squid Blogging: USB Squirming Tentacle
  10. Video Interview with Me
  11. Shaming as Punishment for Repeated Drunk Driving
  12. Identifying People from their Writing Style
  13. Identifying People from their DNA
  14. The Security of the Mega File-Sharing Service
  15. Commenting on Aaron Swartz's Death
  16. Google's Authentication Research
  17. Thinking About Obscurity
  18. TSA Removing Rapiscan Full-Body Scanners from U.S. Airports
  19. Friday Squid Blogging: The Search for the Colossal Squid
  20. Essay on FBI-Mandated Backdoors
  21. Man-in-the-Middle Attacks Against Browser Encryption
  22. Cheating at Chess
  23. Lexical Warfare
  24. Anti-Surveillance Clothing
  25. The Origins of War
  26. Friday Squid Blogging: Giant Squid Video
  27. Experimental Results: Liars and Outliers Trust Offer
  28. The Politics and Philosophy of National Security
  29. Denial-of-Service Attack Against Facebook
  30. Cat Smuggler
  31. DHS Gets to Spy on Everyone
  32. Details of an Internet Scam
  33. Friday Squid Blogging: Giant Squid Finally Captured on Video
  34. What Facebook Gives the Police
  35. Classifying a Shape
  36. Apollo Robbins, Pickpocket

← 2010–2012 2016–2018 →