The Curious Engineer

Schneier on Security

2016–2018

1,158 posts

← 2013–2015 2019–2022 →

2018 351

December 2018

  1. China's APT10
  2. Friday Squid Blogging: Squid-Focused Menus in Croatia
  3. Click Here to Kill Everybody Available as an Audiobook
  4. Massive Ad Fraud Scheme Relied on BGP Hijacking
  5. Stealing Nativity Displays
  6. Human Rights by Design
  7. Glitter Bomb against Package Thieves
  8. MD5 and SHA-1 Still Used in 2018
  9. Friday Squid Blogging: Illegal North Korean Squid Fishing
  10. Drone Denial-of-Service Attack against Gatwick Airport
  11. Fraudulent Tactics on Amazon Marketplace
  12. Congressional Report on the 2017 Equifax Data Breach
  13. Teaching Cybersecurity Policy
  14. New Shamoon Variant
  15. Real-Time Attacks Against Two-Factor Authentication
  16. Friday Squid Blogging: More Problems with the Squid Emoji
  17. Marriott Hack Reported as Chinese State-Sponsored
  18. New Australian Backdoor Law
  19. 2018 Annual Report from AI Now
  20. Friday Squid Blogging: Problems with the Squid Emoji
  21. Back Issues of the NSA's Cryptolog
  22. Banks Attacked through Malicious Hardware Connected to the Local Network
  23. Your Personal Data is Already Stolen
  24. Security Risks of Chatbots
  25. Bad Consumer Security Advice
  26. The DoJ's Secret Legal Arguments to Break Cryptography

November 2018

  1. Friday Squid Blogging: Japanese Squid-Fishing Towns in Decline
  2. Click Here to Kill Everybody News
  3. Three-Rotor Enigma Machine Up for Auction Today
  4. That Bloomberg Supply-Chain-Hack Story
  5. FBI Takes Down a Massive Advertising Fraud Ring
  6. Distributing Malware By Becoming an Admin on an Open-Source Project
  7. Propaganda and the Weakening of Trust in Government
  8. How Surveillance Inhibits Freedom of Expression
  9. Friday Squid Blogging: Good Squid Fishing in the Exmouth Gulf
  10. Using Machine Learning to Create Fake Fingerprints
  11. Information Attacks against Democracies
  12. The PCLOB Needs a Director
  13. What Happened to Cyber 9/11?
  14. Worst-Case Thinking Breeds Fear and Irrationality
  15. Israeli Surveillance Gear
  16. Friday Squid Blogging: Squid Sculptures
  17. Mailing Tech Support a Bomb
  18. Hidden Cameras in Streetlights
  19. Chip Cards Fail to Reduce Credit Card Fraud in the US
  20. More Spectre/Meltdown-Like Attacks
  21. Upcoming Speaking Engagements
  22. Oracle and "Responsible Disclosure"
  23. New IoT Security Regulations
  24. Hiding Secret Messages in Fingerprints
  25. Friday Squid Blogging: Australian Fisherman Gets Inked
  26. The Pentagon Is Publishing Foreign Nation-State Malware
  27. Privacy and Security of Data at Universities
  28. iOS 12.1 Vulnerability
  29. Consumer Reports Reviews Wireless Home-Security Cameras
  30. Security of Solid-State-Drive Encryption
  31. Troy Hunt on Passwords
  32. Friday Squid Blogging: Eating More Squid
  33. How to Punish Cybercriminals
  34. Buying Used Voting Machines on eBay

October 2018

  1. Was the Triton Malware Attack Russian in Origin?
  2. ID Systems Throughout the 50 States
  3. Cell Phone Security and Heads of State
  4. More on the Supermicro Spying Story
  5. Security Vulnerability in Internet-Connected Construction Cranes
  6. Friday Squid Blogging: Squid Falsely Labeled as Octopus
  7. Detecting Fake Videos
  8. Android Ad-Fraud Scheme
  9. China's Hacking of the Border Gateway Protocol
  10. On Disguise
  11. Are the Police Using Smart-Home IoT Devices to Spy on People?
  12. Friday Squid Blogging: Roasted Squid with Tomatillo Salsa
  13. West Virginia Using Internet Voting
  14. Government Perspective on Supply Chain Security
  15. Privacy for Tigers
  16. How DNA Databases Violate Everyone's Privacy
  17. Upcoming Speaking Engagements
  18. Friday Squid Blogging: Eat Less Squid
  19. Security in a World of Physically Capable Computers
  20. Another Bloomberg Story about Supply-Chain Hardware Attacks from China
  21. Security Vulnerabilities in US Weapons Systems
  22. Access Now Is Looking for a Chief Security Officer
  23. The US National Cyber Strategy
  24. Defeating the "Deal or No Deal" Arcade Game
  25. Friday Squid Blogging: Watch Squid Change Colors
  26. Detecting Credit Card Skimmers
  27. Conspiracy Theories around the "Presidential Alert"
  28. Chinese Supply Chain Hardware Attack
  29. Helen Nissenbaum on Data Privacy and Consent
  30. The Effects of GDPR's 72-Hour Notification Rule
  31. Terahertz Millimeter-Wave Scanners
  32. Sophisticated Voice Phishing Scams
  33. Facebook Is Using Your Two-Factor Authentication Phone Number to Target Advertising
  34. More on the Five Eyes Statement on Encryption and Backdoors

September 2018

  1. Friday Squid Blogging: Squid Protein Used in Variable Thermal Conductivity Material
  2. Major Tech Companies Finally Endorse Federal Privacy Regulation
  3. Yet Another IoT Cybersecurity Document
  4. Counting People through a Wall with Wi-Fi
  5. Evidence for the Security of PKCS #1 Digital Signatures
  6. New Variants of Cold-Boot Attack
  7. Friday Squid Blogging: British Columbia "Squid Run" Is a Tourist Attraction
  8. New Findings About Prime Number Distribution Almost Certainly Irrelevant to Cryptography
  9. AES Resulted in a $250-Billion Economic Benefit
  10. Security Vulnerability in ESS ExpressVote Touchscreen Voting Computer
  11. Pegasus Spyware Used in 45 Countries
  12. Public Shaming of Companies for Bad Security
  13. NSA Attacks Against Virtual Private Networks
  14. Friday Squid Blogging: Dissecting a Giant Squid
  15. Click Here to Kill Everybody Reviews and Press Mentions
  16. Quantum Computing and Cryptography
  17. Security Risks of Government Hacking
  18. Security Vulnerability in Smart Electric Outlets
  19. Using Hacked IoT Devices to Disrupt the Power Grid
  20. Friday Squid Blogging: 100-kg Squid Caught Off the Coast of Madeira
  21. Reddit AMA
  22. Five-Eyes Intelligence Services Choose Surveillance Over Security
  23. Using a Smartphone's Microphone and Speakers to Eavesdrop on Passwords
  24. New Book Announcement: Click Here to Kill Everybody

August 2018

  1. Friday Squid Blogging: Giant Squid Washes up on Wellington Beach
  2. I'm Doing a Reddit AMA
  3. Upcoming Speaking Engagements
  4. Eavesdropping on Computer Screens through the Webcam Mic
  5. Cheating in Bird Racing
  6. CIA Network Exposed through Insecure Communications System
  7. NotPetya
  8. Future Cyberwar
  9. Friday Squid Blogging: Clubhook Squid Washes Up on Oregon Beach
  10. John Mueller and Mark Stewart on the Risks of Terrorism
  11. Good Primer on Two-Factor Authentication Security
  12. "Two Stage" BMW Theft Attempt
  13. James Mickens on the Current State of Computer Security
  14. Friday Squid Blogging: Firefly Squid Museum
  15. New Ways to Track Internet Browsing
  16. Speculation Attack Against Intel's SGX
  17. Hacking Police Bodycams
  18. Google Tracks Its Users Even If They Opt Out of Tracking
  19. Identifying Programmers by Their Coding Style
  20. Friday Squid Blogging: New Tool for Grabbing Squid and other Fragile Sea Creatures
  21. xkcd on Voting Computers
  22. Don't Fear the TSA Cutting Airport Security. Be Glad That They're Talking about It.
  23. Detecting Phishing Sites with Machine Learning
  24. SpiderOak's Warrant Canary Died
  25. Measuring the Rationality of Security Decisions
  26. Hacking the McDonald's Monopoly Sweepstakes
  27. Friday Squid Blogging: Calamari Squid Catching Prey
  28. Three of My Books Are Available in DRM-Free E-Book Format
  29. How the US Military Can Better Keep Hackers
  30. Using In-Game Purchases to Launder Money
  31. GCHQ on Quantum Key Distribution
  32. Backdoors in Cisco Routers

July 2018

  1. Hacking a Robot Vacuum
  2. The Poor Cybersecurity of US Space Assets
  3. Identifying People by Metadata
  4. Friday Squid Blogging: Squid Deception
  5. New Report on Police Digital Forensics Techniques
  6. Third Annual Cybercrime Conference
  7. Google Employees Use a Physical Token as Their Second Authentication Factor
  8. DARPA Wants Research into Resilient Anonymous Communications
  9. Major Bluetooth Vulnerability
  10. On Financial Fraud
  11. Nicholas Weaver on Cryptocurrencies
  12. 1Password's Travel Mode
  13. Friday Squid Blogging: Dead Squid on Prince Edward Island
  14. New Report on Chinese Intelligence Cyber-Operations
  15. Suing South Carolina Because Its Election Machines Are Insecure
  16. Defeating the iPhone Restricted Mode
  17. Installing a Credit Card Skimmer on a POS Terminal
  18. Reasonably Clever Extortion E-mail Based on Password Theft
  19. Gas Pump Hack
  20. Friday Squid Blogging: Antifungal Squid-Egg Coating
  21. Wpa3
  22. Department of Commerce Report on the Botnet Threat
  23. Recovering Keyboard Inputs through Thermal Imaging
  24. PROPagate Code Injection Seen in the Wild
  25. Friday Squid Blogging: Squid Unexpectedly Playing a Part in US/China Trade War
  26. The NSA's Domestic Surveillance Centers
  27. Beating Facial Recognition Software with Face Makeup
  28. California Passes New Privacy Law
  29. Traffic Analysis of the LTE Mobile Standard

June 2018

  1. Friday Squid Blogging: Fried Squid with Turmeric
  2. Conservation of Threat
  3. Manipulative Social Media Practices
  4. IEEE Statement on Strong Encryption vs. Backdoors
  5. Bypassing Passcodes in iOS
  6. Secure Speculative Execution
  7. Friday Squid Blogging: Capturing the Giant Squid on Video
  8. The Effects of Iran's Telegram Ban
  9. Domain Name Stealing at Gunpoint
  10. Algeria Shut Down the Internet to Prevent Students from Cheating on Exams
  11. Perverse Vulnerability from Interaction between 2-Factor Authentication and iOS AutoFill
  12. Are Free Societies at a Disadvantage in National Cybersecurity
  13. Ridiculously Insecure Smart Lock
  14. Friday Squid Blogging: Cephalopod Week on Science Friday
  15. Thomas Dullien on Complexity and Security
  16. Russian Censorship of Telegram
  17. New iPhone OS May Include Device-Unlocking Security
  18. Router Vulnerability and the VPNFilter Botnet
  19. Friday Squid Blogging: Extinct Relatives of Squid
  20. New Data Privacy Regulations
  21. An Example of Deterrence in Cyberspace
  22. The Habituation of Security Warnings
  23. Regulating Bitcoin
  24. E-Mail Vulnerabilities and Disclosure
  25. Friday Squid Blogging: Do Cephalopods Contain Alien DNA?
  26. Damaging Hard Drives with an Ultrasonic Attack

May 2018

  1. 1834: The First Cyberattack
  2. Numbers Stations
  3. Kidnapping Fraud
  4. Friday Squid Blogging: Squid Comic
  5. Security and Human Behavior (SHB 2018)
  6. Detecting Lies through Mouse Movements
  7. Font Steganography
  8. Supermarket Shoplifting
  9. Another Spectre-Like CPU Vulnerability
  10. Japan's Directorate for Signals Intelligence
  11. Friday Squid Blogging: Flying Squid
  12. Maliciously Changing Someone's Address
  13. White House Eliminates Cybersecurity Position
  14. Accessing Cell Phone Location Information
  15. Sending Inaudible Commands to Voice Assistants
  16. Details on a New PGP Vulnerability
  17. Critical PGP Vulnerability
  18. Friday Squid Blogging: How the Squid Lost Its Shell
  19. Airline Ticket Fraud
  20. Supply-Chain Security
  21. Virginia Beach Police Want Encrypted Radios
  22. The US Is Unprepared for Election-Related Hacking in 2018
  23. Ray Ozzie's Encryption Backdoor
  24. Friday Squid Blogging: US Army Developing 3D-Printable Battlefield Robot Squid
  25. Detecting Laptop Tampering
  26. LC4: Another Pen-and-Paper Cipher
  27. NIST Issues Call for "Lightweight Cryptography" Algorithms
  28. IoT Inspector Tool from Princeton

April 2018

  1. Security Vulnerabilities in VingCard Electronic Locks
  2. Friday Squid Blogging: Bizarre Contorted Squid
  3. TSB Bank Disaster
  4. New NSA/Cyber Command Head Confirmed by Senate
  5. Two NSA Algorithms Rejected by the ISO
  6. Baseball Code
  7. Computer Alarm that Triggers When Lid Is Opened
  8. Russia is Banning Telegram
  9. Yet Another Biometric: Ear Shape
  10. Friday Squid Blogging: Squid Prices Rise as Catch Decreases
  11. Securing Elections
  12. Lifting a Fingerprint from a Photo
  13. Oblivious DNS
  14. Hijacking Emergency Sirens
  15. The DMCA and its Chilling Effects on Research
  16. Friday Squid Blogging: Eating Firefly Squid
  17. COPPA Compliance
  18. Cybersecurity Insurance
  19. The Digital Security Exchange Is Live
  20. DARPA Funding in AI-Assisted Cybersecurity
  21. Obscure E-Mail Vulnerability
  22. Friday Squid Blogging: Sake Decanters Made of Dried Squid
  23. Subverting Backdoored Encryption
  24. Public Hearing on IoT Risks
  25. Musical Ciphers

March 2018

  1. Friday Squid Blogging: Market Squid in Alaskan Waters
  2. Unlocking iPhones with Dead People's Fingerprints
  3. Facebook and Cambridge Analytica
  4. Another Branch Prediction Attack
  5. Breaking the Anonymity in the Cryptocurrency Monero
  6. Tracing Stolen Bitcoin
  7. Fooling Face Recognition with Infrared Light
  8. Adding Backdoors at the Chip Level
  9. Friday Squid Blogging: Giant Squid Stealing Food from Each Other
  10. Zeynep Tufekci on Facebook and Cambridge Analytica
  11. GreyKey iPhone Unlocker
  12. Reverse Engineering the Cuban Sonic Weapon
  13. Hijacking Computers for Cryptocurrency Mining
  14. Dan Geer on the Dangers of Computer-Only Systems
  15. Israeli Security Company Attacks AMD by Publishing Zero-Day Exploits
  16. Friday Squid Blogging: New Squid Species Discovered in Australia
  17. Interesting Article on Marcus Hutchins
  18. Artificial Intelligence and the Attack/Defense Balance
  19. The 600+ Companies PayPal Shares Your Data With
  20. E-Mailing Private HTTPS Keys
  21. Greyshift Sells Phone Unlocking Services
  22. Two New Papers on the Encryption Debate
  23. Friday Squid Blogging: Interesting Interview
  24. OURSA Conference
  25. History of the US Army Security Agency
  26. New DDoS Reflection-Attack Variant
  27. Security Vulnerabilities in Smart Contracts
  28. Intimate Partner Threat
  29. Extracting Secrets from Machine Learning Systems
  30. Friday Squid Blogging: Searching for Humboldt Squid with Electronic Bait
  31. Malware from Space
  32. Russians Hacked the Olympics

February 2018

  1. Apple to Store Encryption Keys in China
  2. Cellebrite Unlocks iPhones for the US Government
  3. E-Mail Leaves an Evidence Trail
  4. Friday Squid Blogging: The Symbiotic Relationship Between the Bobtail Squid and a Particular Microbe
  5. Election Security
  6. Harassment By Package Delivery
  7. New Spectre/Meltdown Variants
  8. Facebook Will Verify the Physical Location of Ad Buyers with Paper Postcards
  9. On the Security of Walls
  10. Friday Squid Blogging: Squid Pin
  11. New National Academies Report on Crypto Policy
  12. Election Security
  13. Can Consumers' Online Data Be Protected?
  14. Jumping Air Gaps
  15. Internet Security Threats at the Olympics
  16. Calling Squid "Calamari" Makes It More Appetizing
  17. Living in a Smart Home
  18. Water Utility Infected by Cryptocurrency Mining Software
  19. Cabinet of Secret Documents from Australia
  20. Poor Security at the UK National Health Service
  21. Sensitive Super Bowl Security Documents Left on an Airplane
  22. Chip Credit Cards Are Harder to Forge
  23. Friday Squid Blogging: Kraken Pie
  24. Signed Malware
  25. Jackpotting Attacks Against US ATMs

January 2018

  1. Israeli Scientists Accidentally Reveal Classified Information
  2. After Section 702 Reauthorization
  3. Subway Elevators and Movie-Plot Threats
  4. Locating Secret Military Bases via Fitness Data
  5. Estimating the Cost of Internet Insecurity
  6. Friday Squid Blogging: Squid that Mate, Die, and Then Sink
  7. The Effects of the Spectre and Meltdown Vulnerabilities
  8. WhatsApp Vulnerability
  9. Detecting Drone Surveillance with Traffic Analysis
  10. New Malware Hijacks Cryptocurrency Mining
  11. Skygofree: New Government Malware for Android
  12. Dark Caracal: Global Espionage Malware from Lebanon
  13. Friday Squid Blogging: Te Papa Colossal Squid Exhibition Is Being Renovated
  14. Security Breaches Don't Affect Stock Price
  15. Student Cracks Inca Knot Code
  16. Article from a Former Chinese PLA General on Cyber Sovereignty
  17. Jim Risen Writes about Reporting Government Secrets
  18. Fighting Ransomware
  19. Friday Squid Blogging: Japanese "Dude Food" Includes Squid
  20. XKCD's Smartphone Security System
  21. Facial Recognition Is Coming to Retail
  22. Fingerprinting Digital Documents
  23. Yet Another FBI Proposal for Insecure Communications
  24. Susan Landau's New Book: Listening In
  25. Cybersecurity and the 2017 US National Security Strategy
  26. Daniel Miessler on My Writings about IoT Security
  27. NSA Morale
  28. Tourist Scams
  29. Friday Squid Blogging: How the Optic Lobe Controls Squid Camouflage
  30. Spectre and Meltdown Attacks against Microprocessors
  31. New Book Coming in September: "Click Here to Kill Everybody"
  32. Detecting Adblocker Blockers
  33. Spectre and Meltdown Attacks
  34. Tamper-Detection App for Android
  35. Fake Santa Surveillance Camera
  36. Security Vulnerabilities in Star Wars

2017 373

December 2017

  1. Friday Squid Blogging: Squid Populations Are Exploding
  2. Profile of Reality Winner
  3. The "Extended Random" Feature in the BSAFE Crypto Library
  4. Post-Quantum Algorithms
  5. Acoustical Attacks against Hard Drives
  6. "Santa Claus is Coming to Town" Parody
  7. Friday Squid Blogging: Gonatus Squid Eating a Dragonfish
  8. Amazon's Door Lock Is Amazon's Bid to Control Your Home
  9. Security Vulnerability in Apple's HomeKit
  10. Details on the Mirai Botnet Authors
  11. GCHQ Found—and Disclosed—a Windows 10 Vulnerability
  12. Lessons Learned from the Estonian National ID Security Flaw
  13. Friday Squid Blogging: Baby Sea Otters Prefer Shrimp to Squid
  14. Tracking People Without GPS
  15. Security Planner
  16. E-Mail Tracking
  17. Remote Hack of a Boeing 757
  18. Surveillance inside the Body
  19. Friday Squid Blogging: Squid Embryos Coming to Life
  20. Security Vulnerabilities in Certificate Pinning
  21. Germany Preparing Backdoor Law
  22. Matt Blaze on Securing Voting Machines
  23. "Crypto" Is Being Redefined as Cryptocurrencies
  24. Friday Squid Blogging: Research into Squid-Eating Beaked Whales
  25. Needless Panic Over a Wi-FI Network Name

November 2017

  1. NSA "Red Disk" Data Leak
  2. Warrant Protections against Police Searches of Our Data
  3. Man-in-the-Middle Attack against Electronic Car-Door Openers
  4. Uber Data Hack
  5. Friday Squid Blogging: Fake Squid Seized in Cambodia
  6. Mozilla's Guide to Privacy-Aware Christmas Shopping
  7. Websites Use Session-Replay Scripts to Eavesdrop on Every Keystroke and Mouse Movement
  8. Amazon Creates Classified US Cloud
  9. Vulnerability in Amazon Key
  10. Friday Squid Blogging: Peru and Chile Address Squid Overfishing
  11. New White House Announcement on the Vulnerability Equities Process
  12. Motherboard Digital Security Guide
  13. Apple FaceID Hacked
  14. Long Article on NSA and the Shadow Brokers
  15. Google's Data on Login Thefts
  16. Friday Squid Blogging: Squid Season May Start Earlier Next Year
  17. New Research in Invisible Inks
  18. Hacking a Fingerprint Biometric
  19. Facebook Fingerprinting Photos to Prevent Revenge Porn
  20. Me on the Equifax Breach
  21. Cybercriminals Infiltrating E-Mail Networks to Divert Large Customer Payments
  22. Daphne Caruana Galizia's Murder and the Security of WhatsApp
  23. Friday Squid Blogging: Squid Product Recall
  24. Fraud Detection in Pokémon Go
  25. Heart Size: Yet Another Biometric

October 2017

  1. Attack on Old ANSI Random Number Generator
  2. Google Login Security for High-Risk Users
  3. Friday Squid Blogging: Steel Mesh Giant Squid Used as Artificial Reef
  4. FBI Increases Its Anti-Encryption Rhetoric
  5. The Science of Interrogation
  6. CSE Releases Malware Analysis Tool
  7. Reaper Botnet
  8. Hacking Back
  9. Friday Squid Blogging: "How the Squid Lost Its Shell"
  10. Wondermark on Security
  11. Denuvo DRM Cracked within a Day of Release
  12. Security Flaws in Children's Smart Watches
  13. IoT Cybersecurity: What's Plan B?
  14. Security Flaw in Infineon Smart Cards and TPMs
  15. New KRACK Attack Against Wi-Fi Encryption
  16. Friday Squid Blogging: International Squid Awareness Day
  17. My Blogging
  18. Technology to Out Sex Workers
  19. Impersonating iOS Password Prompts
  20. More on Kaspersky and the Stolen NSA Attack Tools
  21. Changes in Password Best Practices
  22. White House Chief of Staff John Kelly's Cell Phone was Tapped
  23. Friday Squid Blogging: Baby Ichthyosaurus Fed on Squid
  24. Yet Another Russian Hack of the NSA—This Time with Kaspersky's Help
  25. Replacing Social Security Numbers
  26. HP Shared ArcSight Source Code with Russians
  27. E-Mail Tracking
  28. Remote Malware Attacks on ATMs

September 2017

  1. Friday Squid Blogging: Squid Empire Is a New Book
  2. Deloitte Hacked
  3. New Internet Explorer Bug
  4. Department of Homeland Security to Collect Social Media of Immigrants and Citizens
  5. The Data Tinder Collects, Saves, and Uses
  6. GPS Spoofing Attacks
  7. Friday Squid Blogging: Using Squid Ink to Detect Gum Disease
  8. Boston Red Sox Caught Using Technology to Steal Signs
  9. ISO Rejects NSA Encryption Algorithms
  10. What the NSA Collects via 702
  11. Apple's FaceID
  12. Bluetooth Vulnerabilities
  13. Friday Squid Blogging: Another Giant Squid Caught off the Coast of Kerry
  14. Another iPhone Change to Frustrate the Police
  15. Hacking Robots
  16. On the Equifax Data Breach
  17. Hacking Voice Assistant Systems with Inaudible Voice Commands
  18. Securing a Raspberry Pi
  19. A Hardware Privacy Monitor for iPhones
  20. Friday Squid Blogging: Make-Your-Own Squid Candy
  21. ShadowBrokers Releases NSA UNITEDRAKE Manual
  22. Research on What Motivates ISIS—and Other—Fighters
  23. Security Vulnerabilities in AT&T Routers
  24. Security Flaw in Estonian National ID Card
  25. New Techniques in Fake Reviews
  26. Friday Squid Blogging: Bioluminescent Squid
  27. Russian Hacking Tools Codenamed WhiteBear Exposed

August 2017

  1. Journalists Generally Do Not Use Secure Communication
  2. A Framework for Cyber Security Insurance
  3. Proof that HMAC-DRBG has No Back Doors
  4. The NSA's 2014 Media Engagement and Outreach Plan
  5. Ross Anderson on the History of the Crypto Wars in the UK
  6. Hacking a Phone Through a Replacement Touchscreen
  7. Friday Squid Blogging: Prehistoric Dolphins that Ate Squid
  8. Military Robots as a Nature Analog
  9. Massive Government Data Leak in Sweden
  10. Your Personal Bodycam
  11. Insider Attack on Lottery Software
  12. iOS 11 Allows Users to Disable Touch ID
  13. Friday Squid Blogging: Brittle Star Catches a Squid
  14. More on My LinkedIn Account
  15. Unfixable Automobile Computer Security Vulnerability
  16. Do the Police Need a Search Warrant to Access Cell Phone Location Data?
  17. Hacking a Gene Sequencer by Encoding Malware in a DNA Strand
  18. Bank Robbery Tactic
  19. Friday Squid Blogging: Squid Eyeballs
  20. I Seem to Have a LinkedIn Account
  21. Confusing Self-Driving Cars by Altering Road Signs
  22. Turning an Amazon Echo into an Eavesdropping Device
  23. More on the Vulnerabilities Equities Process
  24. Uber Drivers Hacking the System to Cause Surge Pricing
  25. Hacking Slot Machines by Reverse-Engineering the Random Number Generators
  26. Friday Squid Blogging: Squid Fake News
  27. Penetrating a Casino's Network through an Internet-Connected Fish Tank
  28. Splitting the NSA and US Cyber Command
  29. Voting Machine Security
  30. Detecting Stingrays
  31. NSA Collects MS Windows Error Information
  32. Vulnerabilities in Car Washes

July 2017

  1. Robot Safecracking
  2. Measuring Vulnerability Rediscovery
  3. Friday Squid Blogging: Giant Squids Have Small Brains
  4. Me on Restaurant Surveillance Technology
  5. Zero-Day Vulnerabilities against Windows in the NSA Tools Released by the Shadow Brokers
  6. Firing a Locked Smart Gun
  7. Roombas will Spy on You
  8. Alternatives to Government-Mandated Encryption Backdoors
  9. US Army Researching Bot Swarms
  10. Friday Squid Blogging: Giant Squid Caught Off the Coast of Ireland
  11. Hacking a Segway
  12. Ethereum Hacks
  13. Password Masking
  14. Many of My E-Books for Cheap
  15. Australia Considering New Law Weakening Encryption
  16. Friday Squid Blogging: Eyeball Collector Wants a Giant-Squid Eyeball
  17. Book Review: Twitter and Tear Gas , by Zeynep Tufekci
  18. Forged Documents and Microsoft Fonts
  19. Tomato-Plant Security
  20. More on the NSA's Use of Traffic Shaping
  21. Hacking Spotify
  22. The Future of Forgeries
  23. Friday Squid Blogging: Why It's Hard to Track the Squid Population
  24. An Assassin's Teapot
  25. DNI Wants Research into Secure Multiparty Computation
  26. Now It's Easier than Ever to Steal Someone's Keys
  27. Dubai Deploying Autonomous Robotic Police Cars
  28. Commentary on US Election Security
  29. GoldenEye Malware
  30. A Man-in-the-Middle Attack against a Password Reset System

June 2017

  1. Friday Squid Blogging: Food Supplier Passes Squid Off as Octopus
  2. Details from the 2017 Workshop on Economics and Information Security
  3. Good Article About Google's Project Zero
  4. The Women of Bletchley Park
  5. Websites Grabbing User-Form Data Before It's Submitted
  6. Girl Scouts to Offer Merit Badges in Cybersecurity
  7. CIA Exploits Against Wireless Routers
  8. Article on the DAO Ethereum Hack
  9. Fighting Leakers at Apple
  10. Separating the Paranoid from the Hacked
  11. The FAA Is Arguing for Security by Obscurity
  12. Friday Squid Blogging: Injured Giant Squid Video
  13. The Secret Code of Beatrix Potter
  14. Amazon Patents Measures to Prevent In-Store Comparison Shopping
  15. NSA Insider Security Post-Snowden
  16. Is Continuing to Patch Windows XP a Mistake?
  17. The Dangers of Secret Law
  18. Ceramic Knife Used in Israel Stabbing
  19. New Technique to Hijack Social Media Accounts
  20. Friday Squid Blogging: Squids from Space Video Game
  21. NSA Links WannaCry to North Korea
  22. Gaming Google News
  23. Millennials and Secret Leaking
  24. Data vs. Analysis in Counterterrorism
  25. The grugq on Reality Winner, the Intercept , and OPSEC
  26. Security Flaws in 4G VoLTE
  27. Chelsea Manning Profiled in New York Times Magazine
  28. Healthcare Industry Cybersecurity Report
  29. Friday Squid Blogging: Sex Is Traumatic for the Female Dumpling Squid
  30. NSA Document Outlining Russian Attempts to Hack Voter Rolls
  31. Safety and Security and the Internet of Things
  32. Surveillance Intermediaries
  33. Spear Phishing Attacks
  34. CIA's Pandemic Toolkit
  35. Friday Squid Blogging: Squid as Prey
  36. WannaCry and Vulnerabilities
  37. Passwords at the Border

May 2017

  1. Post-Quantum RSA
  2. Inmates Secretly Build and Network Computers while in Prison
  3. Who Are the Shadow Brokers?
  4. Tainted Leaks
  5. Friday Squid Blogging: Squid and Chips
  6. Forbes Names Beyond Fear as One of the "13 Books Technology Executives Should Have On Their Shelves"
  7. Hacking the Galaxy S8's Iris Biometric
  8. Security and Human Behavior (SHB 2017)
  9. Ransomware and the Internet of Things
  10. Hacking Fingerprint Readers with Master Prints
  11. ICE is Using Stingray to Track Illegal Immigrants
  12. The Future of Ransomware
  13. North Korean Cyberwar Capabilities
  14. Extending the Airplane Laptop Ban
  15. Friday Squid Blogging: Giant Squid Caught Off the Coast of Ireland
  16. NSA Abandons "About" Searches
  17. WannaCry Ransomware
  18. Human Rights Watch Needs an Information Security Director
  19. The US Senate Is Using Signal
  20. Keylogger Found in HP Laptop Audio Drivers
  21. Did North Korea Write WannaCry?
  22. NSA Brute-Force Keysearch Machine
  23. Using Wi-Fi to Get 3D Images of Surrounding Location
  24. The Quick vs. the Strong: Commentary on Cory Doctorow's Walkaway
  25. Yacht Security
  26. Stealing Voice Prints
  27. Interview with Ross Anderson
  28. Securing Elections
  29. Criminals are Now Exploiting SS7 Flaws to Hack Smartphone Two-Factor Authentication Systems
  30. Facebook's Observations on Information Operations and the 2016 US Election
  31. Using Ultrasonic Beacons to Track Users
  32. Friday Squid Blogging: Squid Communications
  33. Why Is the TSA Scanning Paper?
  34. Forging Voice
  35. Security of St. Jude Pacemakers
  36. Fitbit Evidence Used in Murder Investigation
  37. Who is Publishing NSA and CIA Secrets, and Why?

April 2017

  1. Friday Squid Blogging: Live Squid Washes up on North Carolina Beach
  2. Jumping Airgaps with a Laser and a Scanner
  3. Stealing Browsing History Using Your Phone's Ambient Light Sensor
  4. Reading Analytics and Privacy
  5. Analyzing Cyber Insurance Policies
  6. Advances in Ad Blocking
  7. Faking Domain Names with Unicode Characters
  8. Friday Squid Blogging: Video of Squid Attacking Another Squid
  9. Tracing Spam from E-mail Headers
  10. The DEA Is Buying Cyberweapons from Hacking Team
  11. Smart TV Hack via the Broadcast Signal
  12. Covert Channel via Two VMs
  13. Surveillance and Our Insecure Infrastructure
  14. Friday Squid Blogging: Chilean Squid Producer Diversifies
  15. New C++ Secure Coding Standard
  16. 2017 Security Protocols Workshop
  17. Attack vs. Defense in Nation-State Cyber Operations
  18. Research on Tech-Support Scams
  19. New Destructive Malware Bricks IoT Devices
  20. Fourth WikiLeaks CIA Attack Tool Dump
  21. Shadow Brokers Releases the Rest of Their NSA Hacking Tools
  22. Friday Squid Blogging: Squid Can Edit Their Own RNA
  23. Incident Response as "Hand-to-Hand Combat"
  24. Hacking a Brazilian Bank
  25. Many Android Phones Vulnerable to Attacks Over Malicious Wi-Fi Networks
  26. APT10 and Cloud Hopper
  27. Clever Physical ATM Attack
  28. Encryption Policy and Freedom of the Press
  29. Acoustic Attack Against Accelerometers
  30. Soon You'll Be Able to Hijack Weaponized Police Drones in Connecticut

March 2017

  1. Friday Squid Blogging: 1887 Animal-Combat Print with Giant Squid
  2. Finding FBI Director James Comey's Twitter Account
  3. Congress Removes FCC Privacy Protections on Your Internet Usage
  4. Security Orchestration and Incident Response
  5. Kalyna Block Cipher
  6. The TSA's Selective Laptop Ban
  7. Friday Squid Blogging: Squid from Utensils
  8. Commenting Policy for This Blog
  9. Second WikiLeaks Dump of CIA Documents
  10. Hackers Threaten to Erase Apple Customer Data
  11. NSA Best Scientific Cybersecurity Paper Competition
  12. New Paper on Encryption Workarounds
  13. NSA Documents from before 1930
  14. WikiLeaks Not Disclosing CIA-Hoarded Vulnerabilities to Companies
  15. Friedman Comments on Yardley
  16. Security Vulnerabilities in Mobile MAC Randomization
  17. Friday Squid Blogging: Squid Catches Down in Argentina
  18. New Gmail Phishing Scam
  19. History of US Information Warfare
  20. Using Intel's SGX to Attack Itself
  21. IoT Teddy Bear Leaked Personal Audio Recordings
  22. France Abandons Plans for Internet Voting
  23. Digital Security Exchange: Security for High-Risk Communities
  24. Ransomware for Sale
  25. The CIA's "Development Tradecraft DOs and DON'Ts"
  26. FBI's Exploit Against Tor
  27. Friday Squid Blogging: Squid Cooking Techniques
  28. Podcast Interview with Me
  29. Defense against Doxing
  30. Google Discloses Details of an Unpatched Microsoft Vulnerability
  31. More on the CIA Document Leak
  32. The US Has Been Conducting Offensive Cyberattacks against North Korea
  33. WikiLeaks Releases CIA Hacking Tools
  34. Building Smarter Ransomware
  35. Howard Schmidt
  36. Uber Uses Ubiquitous Surveillance to Identify and Block Regulators
  37. Friday Squid Blogging: When Squid Evolved
  38. Me at the RSA Conference
  39. Hacking Marconi's Wireless in 1903
  40. Jumping Air Gaps with Blinking Lights and Drones
  41. Buzzword Watch: Prosilience
  42. Botnets
  43. "Proof Mode" for your Smartphone Camera

February 2017

  1. EU Still Concerned about Windows 10 Privacy Settings
  2. Adm. Rogers Talks about Buying Cyberweapons
  3. A Survey of Propaganda
  4. Friday Squid Blogging: Squid Short Story
  5. My TEDMED Talk on Medical Data Privacy
  6. Palantir and the NSA
  7. SHA-1 Collision Found
  8. NSA Using Cyberattack for Defense
  9. German Government Classifies Doll as Illegal Spyware
  10. Friday Squid Blogging: The Strawberry Squid's Lopsided Eyes
  11. IoT Attack Against a University Network
  12. Duqu Malware Techniques Used by Cybercriminals
  13. Research into the Root Causes of Terrorism
  14. Survey Data on Americans and Cybersecurity
  15. Hacking Back
  16. Friday Squid Blogging: Squid Communication through Skin Patterns
  17. CSIS's Cybersecurity Agenda
  18. De-Anonymizing Browser History Using Social-Network Data
  19. Security and Privacy Guidelines for the Internet of Things
  20. Do-It-Yourself Online Privacy/Safety Guide
  21. Predicting a Slot Machine's PRNG
  22. Profile of Citizen Lab and Ron Diebert
  23. Cryptkeeper Bug
  24. Hacker Leaks Cellebrite's Phone-Hacking Tools
  25. Friday Squid Blogging: Whale Mistakes Plastic Bags for Squid
  26. How the US Secret Service Breaks into Smartphones
  27. Pacemaker Data Used in Arson Conviction
  28. Security and the Internet of Things

January 2017

  1. IoT Ransomware against Austrian Hotel
  2. New Rules on Data Privacy for Non-US Citizens
  3. Friday Squid Blogging: Squid Fossils from the Early Jurassic
  4. Research into Twitter Bots
  5. Duress Codes for Fingerprint Access Control
  6. Security Risks of the President's Android Phone
  7. Capturing Pattern-Lock Authentication
  8. How the Media Influences Our Fear of Terrorism
  9. Obama's Legacy in Internet Security
  10. Friday Squid Blogging: Know Your Cephalopods
  11. New White House Privacy Report
  12. Heartbeat as Biometric Password
  13. Brian Krebs Uncovers Mirai Botnet Author
  14. WhatsApp Security Vulnerability
  15. Cloudflare's Experience with a National Security Letter
  16. Friday Squid Blogging: 1874 Giant Squid Attack
  17. A Comment on the Trump Dossier
  18. Internet Filtering in Authoritarian Regimes
  19. NSA Given More Ability to Share Raw Intelligence Data
  20. Twofish Power Analysis Attack
  21. Law Enforcement Access to IoT Data
  22. FDA Recommendations on Medical-Device Cybersecurity
  23. Classifying Elections as "Critical Infrastructure"
  24. Attributing the DNC Hacks to Russia
  25. Friday Squid Blogging: Simple Grilled Squid Recipe
  26. The Effect of Real Names on Online Behavior
  27. Cryptographic Capabilities of the Barbie Typewriter
  28. An SQL Injection Attack Is a Legal Company Name in the UK
  29. Are We Becoming More Moral Faster Than We're Becoming More Dangerous?
  30. Class Breaks
  31. Photocopier Security

2016 434

December 2016

  1. Friday Squid Blogging: Will Fish and Chips Become Squid and Chips?
  2. Effects of the 2011 DigiNotar Attack
  3. How Signal Is Evading Censorship
  4. Security Risks of TSA PreCheck
  5. Friday Squid Blogging: Squidmas Cards
  6. Russian Military Using Smartphones to Track Troop Movements
  7. NIST is Continuing to Work on Post-Quantum-Computing Cryptography Standards
  8. The Future of Faking Audio and Video
  9. The Pro-PGP Position
  10. Encryption Working Group Annual Report from the US House of Representatives
  11. Google Releases Crypto Test Suite
  12. Smartphone Spying as Art
  13. UN Considering Killer Robot Ban
  14. Friday Squid Blogging: Woman Throws Squid at Her Boyfriend
  15. Giving Up on PGP
  16. Impressive Social Engineering Display
  17. My Priorities for the Next Four Years
  18. Let's Encrypt Is Making Web Encryption Easier
  19. Hiding Information in Silver and Carbon Ink
  20. Ransomware Meets Multi-level Marketing
  21. Cybersecurity Fantasy Role-playing Game
  22. Friday Squid Blogging: Electronic Screens Inspired by Squid
  23. Enigma Machine Sold for Almost Half a Million Dollars
  24. New NSA Stories
  25. WWW Malware Hides in Images
  26. International Phone Fraud Tactics
  27. Voynich Manuscript Facsimile Published
  28. Guessing Credit Card Security Details
  29. A 50-Foot Squid Has Not been Found in New Zealand
  30. Auditing Elections for Signs of Hacking
  31. Analyzing WeChat

November 2016

  1. DigiTally
  2. You, Too, Can Rent the Mirai Botnet
  3. San Francisco Transit System Target of Ransomware
  4. Friday Squid Blogging: Striped Pyjama Squid
  5. Hacking and the 2016 Presidential Election
  6. Securing Communications in a Trump Administration
  7. Headphones as Microphones
  8. Government Propaganda on Social Media
  9. "Security for the High-Risk User"
  10. Dumb Security Survey Questions
  11. Friday Squid Blogging: Peruvian Squid Fishermen Are Trying to Diversify
  12. Smartphone Secretly Sends Private Data to China
  13. Using Wi-Fi to Detect Hand Motions and Steal Passwords
  14. Hacking Password-Protected Computers via the USB Port
  15. Mass Spectrometry for Surveillance
  16. Election Security
  17. Fake HP Printer That's Actually a Cellular Eavesdropping Device
  18. Fake Fingerprint Stickers for Gloves
  19. Friday Squid Blogging: 3D-Printed Underwater Autonomous "Squid"
  20. Automatically Identifying Government Secrets
  21. Fooling Facial Recognition Systems
  22. Ultrasonic Hacking
  23. Regulation of the Internet of Things
  24. Whistleblower Investigative Report on NSA Suite B Cryptography
  25. Self-Propagating Smart Light Bulb Worm
  26. Election-Day Humor
  27. Lessons From the Dyn DDoS Attack
  28. Firefox Removing Battery Status API
  29. Research into IoT Security Is Finally Legal
  30. Friday Squid Blogging: Whale Hunts Squid
  31. Hacking in the Movies
  32. Google Linking Anonymous Browser Tracking with Identifiable Tracking
  33. Teaching a Neural Network to Encrypt
  34. Free Cybersecurity MOOC from F-Secure and the University of Helsinki
  35. Edward Snowden's Boss at Booz Allen Hamilton Speaks
  36. Another Shadow Brokers Leak
  37. Card Game Based on the Iterated Prisoner's Dilemma

October 2016

  1. How to Avoid Kidnapping Children on Halloween
  2. A High-End Card-Reading Device
  3. Friday Squid Blogging: Squid Nebula
  4. Eavesdropping on Typing Over Voice-Over-IP
  5. Hardware Bit-Flipping Attacks in Practice
  6. How Powell's and Podesta's E-mail Accounts Were Hacked
  7. OPM Attack
  8. Malicious AI
  9. UK Admitting "Offensive Cyber" Against ISIS/Daesh
  10. How Different Stakeholders Frame Security
  11. DDoS Attacks against Dyn
  12. Friday Squid Blogging: Which Squid Can I Eat?
  13. Privacy Makes Workers More Productive
  14. President Obama Talks About AI Risk, Cybersecurity, and More
  15. Bypassing Intel's ASLR
  16. Security Lessons from a Power Saw
  17. Intelligence Oversight and How It Can Fail
  18. Virtual Kidnapping
  19. Friday Squid Blogging: Barramundi with Squid Ink Risotto
  20. Cybersecurity Issues for the Next Administration
  21. The Psychology of Bad Password Habits
  22. Free Online Cybersecurity Economics Course
  23. The Psychological Impact of Doing Classified Intelligence Work
  24. Indiana's Voter Registration Data Is Frighteningly Insecure
  25. Murder Is a Relatively Recent Evolutionary Strategy
  26. Security Economics of the Internet of Things
  27. Friday Squid Blogging: Squid Are Colorblind
  28. NSA Contractor Arrested for Stealing Classified Information
  29. Yahoo Scanned Everyone's E-mails for the NSA
  30. Quantum Tokens for Digital Signatures
  31. Credit Cards with Changing CVVs
  32. Is WhatsApp Hacked?
  33. US and China in Cyberspace
  34. The Culture of Cybersecurity
  35. Security Design: Stop Trying to Fix the User

September 2016

  1. Friday Squid Blogging: Cannibal Squid
  2. The Hacking of Yahoo
  3. The Cost of Cyberattacks Is Less than You Might Think
  4. Malware Tries to Detect Test Environment
  5. Using Neural Networks to Identify Blurred Faces
  6. Brian Krebs DDoS
  7. Friday Squid Blogging: Space Kraken
  8. iPhone 7 Jailbreak
  9. Amtrak Security Awareness
  10. Tesla Model S Hack
  11. Two Good Essays on the NSA's "Upstream" Data Collection under Section 702
  12. More on the Equities Debate
  13. Periscope ATM Skimmers
  14. Friday Squid Blogging: Giant Squid on Japanese Television
  15. Hacking Bridge-Hand Generation Software
  16. Hacking Wireless Tire-Pressure Monitoring System
  17. Recovering an iPhone 5c Passcode
  18. Organizational Doxing and Disinformation
  19. Someone Is Learning How to Take Down the Internet
  20. Leaked Stingray Manuals
  21. USB Kill Stick
  22. Malware Infects Network Hard Drives
  23. Friday Squid Blogging: More Research Inspired by Squid Skin
  24. Leaked Product Demo from RCS Labs
  25. DDOS for Profit
  26. Apple's Cloud Key Vault
  27. Talk by the Former Head of French SIGINT
  28. Internet Disinformation Service for Hire
  29. Spy Equipment from Cobham
  30. Friday Squid Blogging: Korean Spicy Grilled Squid
  31. Cybercrime as a Tax on the Internet Economy

August 2016

  1. NSO Group
  2. Using Wi-Fi Signals to Identify People by Body Shape
  3. Keystroke Recognition from Wi-Fi Distortion
  4. iPhone Zero-Day Used by UAE Government
  5. Apple Patents Collecting Biometric Information Based on Unauthorized Device Use
  6. Friday Squid Blogging: Self-Repairing Fabrics Based on Squid Teeth
  7. Collision Attacks Against 64-Bit Block Ciphers
  8. The NSA Is Hoarding Vulnerabilities
  9. Confusing Security Risks with Moral Judgments
  10. Interesting Internet-Based Investigative Techniques
  11. Privacy Implications of Windows 10
  12. Research on the Timing of Security Warnings
  13. Windows 10 Update Breaks Most Webcams
  14. Friday Squid Blogging: Stubby Squid
  15. Terrorist False Alarm at JFK Airport Demonstrates How Unprepared We Really Are
  16. Unintentional DOS Attack against Car-Door Openers
  17. More on Election Security
  18. Prisoner's Dilemma Experiment Illustrates Four Basic Phenotypes
  19. Major NSA/Equation Group Leak
  20. Powerful Bit-Flipping Attack
  21. Yet Another Government-Sponsored Malware
  22. Microsoft Accidentally Leaks Key to Windows Backdoor
  23. Friday Squid Blogging: Squid Not Killing New Zealand Sea Lions
  24. Cyberattacks via Submarine
  25. Hacking Electronic Safes
  26. Hacking Your Computer Monitor
  27. Hackers Stealing Cars
  28. Scott Atran on Why People Become Terrorists
  29. Hacking the Internet of Things: Locks and Thermostats
  30. Malware from Kazakhstan
  31. How the Iranian Government Hacks Dissidents
  32. More on Voting Machine Security
  33. Friday Squid Blogging: Squid Ink Soda
  34. Reddit "Ask Me Anything"
  35. Hacking Trucks
  36. Frequent Password Changes Is a Bad Security Idea
  37. GPS Spoofing
  38. More on the Vulnerabilities Equities Process
  39. NIST is No Longer Recommending Two-Factor Authentication Using SMS
  40. New Presidential Directive on Incident Response
  41. Security Vulnerabilities in Wireless Keyboards
  42. Hacking the Vote

July 2016

  1. Friday Squid Blogging: Glow-in-the-Dark Finger Tentacles
  2. How Altruism Might Have Evolved
  3. The Security of Our Election Systems
  4. Real-World Security and the Internet of Things
  5. Detecting When a Smartphone Has Been Compromised
  6. The NSA and "Intelligence Legalism"
  7. Russian Hack of the DNC
  8. Tracking the Owner of Kickass Torrents
  9. Decoded , by Mai Jia
  10. The Economist on Hacking the Financial System
  11. Friday Squid Blogging: Sperm Whale Eats Squid
  12. Cyberweapons vs. Nuclear Weapons
  13. DARPA Document: "On Countering Strategic Deception"
  14. Detecting Spoofed Messages Using Clock Skew
  15. Stealing Money from ISPs Through Premium Rate Calls
  16. Futuristic Cyberattack Scenario
  17. Friday Squid Blogging: Stuffed Squid with Chard and Potatoes
  18. I Have Joined the Board of Directors of the Tor Project
  19. Security Effectiveness of the Israeli West Bank Barrier
  20. Visiting a Website against the Owner's Wishes Is Now a Federal Crime
  21. Password Sharing Is Now a Crime
  22. Google's Post-Quantum Cryptography
  23. Report on the Vulnerabilities Equities Process
  24. Anonymization and the Law
  25. Dallas Police Use a Robot to Kill a Person
  26. Friday Squid Blogging: How Squids See Color Despite Black-and-White Vision
  27. I'm on an "Adam Ruins Everything" Podcast
  28. Researchers Discover Tor Nodes Designed to Spy on Hidden Services
  29. Hijacking Someone's Facebook Account with a Fake Passport Copy
  30. The Difficulty of Routing around Internet Surveillance States
  31. Good Article on Airport Security
  32. Intellectual Property as National Security
  33. "Dogs Raise Fireworks Threat Level to 'Gray'"
  34. Friday Squid Blogging: Squid-Ink Cocktails
  35. Anti-Paparazzi Scarf

June 2016

  1. Interview with an NSA Hacker
  2. Security Analysis of TSA PreCheck
  3. Facebook Using Physical Location to Suggest Friends
  4. Crowdsourcing a Database of Hotel Rooms
  5. Friday Squid Blogging: Bioluminescence as Camouflage
  6. Using Social Media to Discover Hidden Wealth
  7. Comparing Messaging Apps
  8. Fraudsters are Buying IPv4 Addresses
  9. Issues Regarding Lone-Wolf Terrorism Prevention
  10. Situational Awareness and Crime Prevention
  11. Security Behavior of Pro-ISIS Groups on Social Media
  12. CIA Director John Brennan Pretends Foreign Cryptography Doesn't Exist
  13. Nude Photos as Loan Collateral
  14. Friday Squid Blogging: Not Finding a Giant Squid on Google Earth
  15. xkcd Phishing Cartoon
  16. Computer Science Education Is Security Education
  17. Apple's Differential Privacy
  18. Infecting Systems by Typosquatting Programming Language Libraries
  19. Russians Hacking DNC Computers
  20. NSA Using Insecure Word Macros
  21. Friday Squid Blogging: Beautiful Squid Sculpture
  22. Financial Cyber Risk Is Not Systemic Risk
  23. 1944 OSS Sabotage Manual
  24. Waze Data Poisoning
  25. Inherent Bias in Recidivism Algorithm
  26. Long Article on Snowden's Attempts to Raise His Concerns Inside the NSA
  27. Another Side-Channel Attack on PC Encryption
  28. Hijacking the PC Update Process
  29. Friday Squid Blogging: Giant Mechanical Squid
  30. Security and Human Behavior (SHB 2016)
  31. Stuxnet-Like Malware Discovered
  32. Lockpicking Competitions in the 1850s
  33. Stealth Falcon: New Malware from (Probably) the UAE

May 2016

  1. The Fallibility of DNA Evidence
  2. Arresting People for Walking Away from Airport Security
  3. Identifying People from their Driving Patterns
  4. Friday Squid Blogging: More Squids
  5. Skein in FreeBSD
  6. The Unfalsifiability of Security Claims
  7. Suckfly
  8. Companies Not Saving Your Data
  9. Should You Be Allowed to Prevent Drones from Flying Over Your Property?
  10. GCHQ Discloses Two OS X Vulnerabilities to Apple
  11. Google Moving Forward on Automatic Logins
  12. State of Online Tracking
  13. Friday Squid Blogging: Squid Kite
  14. Detecting Explosives
  15. Identifying People from Their Metadata
  16. Primitive Food Crops and Security
  17. More NSA Documents from the Snowden Archive
  18. Unforeseen Costs of Security Training
  19. Defeating a Tamper-Proof Bottle
  20. Friday Squid Blogging: Counterfeit Squid
  21. Scam or Satire?
  22. More on the Going Dark Debate
  23. Hacking Gesture-Based Security
  24. FTC Investigating Android Patching Practices
  25. New Credit Card Scam
  26. Children of Spies
  27. Economist Detained for Doing Math on an Airplane
  28. NIST Starts Planning for Post-Quantum Cryptography
  29. Friday Squid Blogging: Firefly Squid in the News
  30. Dilbert on Electronic Voting Machines
  31. White House Report on Big Data Discrimination
  32. Own a Pair of Clipper Chips
  33. $7 Million Social Media Privacy Mistake
  34. Credential Stealing as an Attack Vector
  35. Julian Sanchez on the Feinstein-Burr Bill
  36. Fake Security Conferences
  37. Vulnerabilities in Samsung's SmartThings

April 2016

  1. Friday Squid Blogging: Global Squid Shortage
  2. I’m Writing a Book on Security
  3. Documenting the Chilling Effects of NSA Surveillance
  4. Amazon Unlimited Fraud
  5. Two Good Readings on the Encryption "Going Dark" Debate
  6. People Trust Robots, Even When They Don't Inspire Trust
  7. Graffiti by Drone
  8. BlackBerry's Global Encryption Key
  9. Friday Squid Blogging: My Little Cephalopod
  10. Encryption Backdoor Cartoons
  11. Cheating in Bicycle Races with Tiny Hidden Motors
  12. How Hacking Team Got Hacked
  13. Helen Nissenbaum on Regulating Data Collection and Use
  14. GCHQ Gets Involved in Mundane Surveillance Matters
  15. Details about Juniper's Firewall Backdoor
  16. Kuwaiti Government will DNA Test Everyone
  17. Security Risks of Shortened URLs
  18. Friday Squid Blogging: Replicating Reflecting Squid Tissue
  19. IRS Security
  20. Cheating in Marathon Running
  21. Smartphone Forensics to Detect Distraction
  22. Hacking Lottery Machines
  23. 2016 Protocols Workshop
  24. Scams from the 1800s
  25. Friday Squid Blogging: Cooking with Squid Ink
  26. Security Lessons from the Game of Werewolf
  27. Breaking Semantic Image CAPTCHAs
  28. Bypassing Phone Security through Social Engineering
  29. IBM Officially Owns Resilient Systems
  30. Coniks
  31. WhatsApp is Now End-to-End Encrypted
  32. Data and Goliath Sale
  33. Smart Essay on the Limitations of Anti-Terrorism Security
  34. Friday Squid Blogging: Composite Materials Based on Squid Beaks
  35. Reddit's Warrant Canary Just Died
  36. Hacking Elections in Latin America

March 2016

  1. ISIS Encryption Opsec
  2. Lawful Hacking and Continuing Vulnerabilities
  3. Mass Surveillance Silences Minority Opinions
  4. A 1976 Congressional Report on Surveillance
  5. Power on the Internet
  6. Friday Squid Blogging: President Squid
  7. Memphis Airport Inadvertently Gets Security Right
  8. Interesting Lottery Terminal Hack
  9. FBI vs. Apple: Who Is Helping the FBI?
  10. Cryptography Is Harder Than It Looks
  11. FBI's Cyber Most Wanted List
  12. 1981 US Document on Encryption Policy
  13. Observations on the Surveillance that Resulted in the Capture of Salah Abdeslam
  14. iMessage Encryption Flaw Found and Fixed
  15. Brennan Center Report on NSA Overseas Spying and Executive Order 12333
  16. Friday Squid Blogging: Braised Squid With Harissa and Olives
  17. I'm a Wall Street Journal Acrostic Answer
  18. Companies Handing Source Code Over to Governments
  19. New NIST Encryption Guidelines
  20. Another FBI Filing on the San Bernardino iPhone Case
  21. Financial Cryptography 2016
  22. Possible Government Demand for WhatsApp Backdoor
  23. Punishment and Trust
  24. Analysis of Yemeni Cell Phone Metadata
  25. Friday Squid Blogging: Squid Scientists on Tumblr
  26. Leaked ISIS Documents
  27. Espionage Tactics Against Tibetans
  28. Hidden Credit Card Skimmers
  29. Plagiarism in Crossword Puzzles
  30. Hacking Ukraine's Power Grid
  31. Pirates Hack into Shipping Company's Database
  32. Cheating at Professional Bridge
  33. Interesting Research on the Economics of Privacy
  34. Friday Squid Blogging: Whale Mistaken for Squid
  35. Sabotaging Bicycle Racks
  36. Data Is a Toxic Asset
  37. DROWN Attack
  38. Security Vulnerabilities in Wireless Keyboards
  39. The Mathematics of Conspiracy
  40. Company Tracks Iowa Caucusgoers by their Cell Phones
  41. WikiLeaks Publishes NSA Target List
  42. Lots More Writing about the FBI vs. Apple

February 2016

  1. Resilient Systems News: IBM to Buy Resilient Systems
  2. More on the "Data as Exhaust" Metaphor
  3. Friday Squid Blogging: Energy Converter Inspired by Squid
  4. Notice and Consent
  5. Thinking about Intimate Surveillance
  6. Simultaneous Discovery of Vulnerabilities
  7. The Importance of Strong Encryption to Security
  8. Eavesdropping by the Foscam Security Camera
  9. Research on Balancing Privacy with Surveillance
  10. The Ads vs. Ad Blockers Arms Race
  11. Practical TEMPEST Attack
  12. Security Vulnerability in glibc DNS
  13. Decrypting an iPhone for the FBI
  14. Friday Squid Blogging: Up Close and Personal with a Giant Squid
  15. Security Implications of Cash
  16. Underage Hacker Is behind Attacks against US Government
  17. Judge Demands that Apple Backdoor an iPhone
  18. Enabling Trust by Consensus
  19. Using Eagles to Intercept Drones
  20. Fear and Anxiety
  21. Survey of the Dark Web
  22. Friday Squid Blogging : Pajama Squid
  23. Fitbit Data Reveals Pregnancy
  24. Determining Physical Location on the Internet
  25. Worldwide Encryption Products Survey
  26. Make Privacy a 2016 Election Issue
  27. AT&T Does Not Care about Your Privacy
  28. 10,000-Year-Old Warfare
  29. The 2016 National Threat Assessment
  30. Large-Scale FBI Hacking
  31. Data and Goliath Published in Paperback
  32. Exploiting Google Maps for Fraud
  33. Friday Squid Blogging: Squid Knitting Pattern
  34. NSA Reorganizing
  35. Tracking Anonymous Web Users
  36. The Internet of Things Will Be the World's Biggest Robot
  37. Security vs. Surveillance
  38. Paper on the Going Dark Debate
  39. More Details on the NSA Switching to Quantum-Resistant Cryptography
  40. NSA and GCHQ Hacked Israeli Drone Feeds
  41. NSA's TAO Head on Internet Offense and Defense

January 2016

  1. Friday Squid Blogging: Polynesian Squid Hook
  2. Encryption Backdoor Comic
  3. Integrity and Availability Threats
  4. Psychological Model of Selfishness
  5. Horrible Story of Digital Harassment
  6. Data-Driven Policing
  7. Shodan Lets You Browse Insecure Webcams
  8. Friday Squid Blogging: North Coast Squid
  9. UK Government Promoting Backdoor-Enabled Voice Encryption Protocol
  10. Security Trade-offs in the Longbow vs. Crossbow Decision
  11. El Chapo's Opsec
  12. France Rejects Backdoors in Encryption Products
  13. Reverse-Engineering a Zero-Day Exploit from the Hacking Team Data Dump
  14. Counterfeit Theater Tickets in New York
  15. Match Fixing in Tennis
  16. Should We Allow Bulk Searching of Cloud Archives?
  17. Spamming Someone from PayPal
  18. Fighting DRM in the W3C
  19. Sean Penn's Opsec
  20. The Internet of Things that Talk About You Behind Your Back
  21. Michael Hayden and the Dutch Government Are against Crypto Backdoors
  22. Mac OS X, iOS, and Flash Had the Most Discovered Vulnerabilities in 2015
  23. IT Security and the Normalization of Deviance
  24. Friday Squid Blogging: Squid Ink Pasta
  25. Podcast Interview with Me
  26. "How Stories Deceive"
  27. Replacing Judgment with Algorithms
  28. Straight Talk about Terrorism
  29. How the US Is Playing Both Ends on Data Privacy
  30. 1981 CIA Report on Deception
  31. NSA Spies on Israeli Prime Minister
  32. Windows 10 Whole-Disk Encryption without Key Escrow
  33. De-Anonymizing Users from their Coding Styles
  34. Friday Squid Blogging: Video of Live Giant Squid

← 2013–2015 2019–2022 →