News aggregator

Friday Squid Blogging: Colossal Squid was a Lethargic Blob

Bruce Schneier's Crypto-Gram - Fri, 09/05/2008 - 3:36pm
Fierce deep-sea predator? Not so much: "We are looking at something verging on the incredibly bizarre. As she got older she got shorter and broader and was reduced to a giant gelatinous blob, carrying many thousands of eggs," he says. "Her shape was likely to have affected her behaviour and ability to hunt. I can't imagine her jetting herself around...

Contest: Cory Doctorow's Cipher Wheel Rings

Bruce Schneier's Crypto-Gram - Fri, 09/05/2008 - 11:01am
Cory Doctorow wanted a secret decoder wedding ring, and he asked me to help design it. I wanted something more than the standard secret decoder ring, so this is what I asked for: "I want each wheel to be the alphabet, with each letter having either a dot above, a dot below, or no dot at all. The first wheel...

Using Shredded Checks as Packaging Material

Bruce Schneier's Crypto-Gram - Fri, 09/05/2008 - 5:44am
This seems like a really dumb idea....

Privacy Policies: Perception vs. Reality

Bruce Schneier's Crypto-Gram - Thu, 09/04/2008 - 12:15pm
New paper: "What Californians Understand About Privacy Online," by Chris Jay Hoofnagle and Jennifer King. From the abstract: A gulf exists between California consumers' understanding of online rules and common business practices. For instance, Californians who shop online believe that privacy policies prohibit third-party information sharing. A majority of Californians believes that privacy policies create the right to require a...

Movie Plot Threats in The Guardian

Bruce Schneier's Crypto-Gram - Thu, 09/04/2008 - 4:56am
We spend far more effort defending our countries against specific movie-plot threats, rather than the real, broad threats. In the US during the months after the 9/11 attacks, we feared terrorists with scuba gear, terrorists with crop dusters and terrorists contaminating our milk supply. Both the UK and the US fear terrorists with small bottles of liquid. Our imaginations run...

Diaries Written in Code

Bruce Schneier's Crypto-Gram - Wed, 09/03/2008 - 12:15pm
Many throughout history....

Sucking Data off of Cell Phones

Bruce Schneier's Crypto-Gram - Wed, 09/03/2008 - 5:03am
Don't give someone your phone unless you trust them: There is a new electronic capture device that has been developed primarily for law enforcement, surveillance, and intelligence operations that is also available to the public. It is called the Cellular Seizure Investigation Stick, or CSI Stick as a clever acronym. It is manufactured by a company called Paraben, and is...

Software to Facilitate Retail Tax Fraud

Bruce Schneier's Crypto-Gram - Tue, 09/02/2008 - 11:24am
Interesting: Thanks to a software program called a zapper, even technologically illiterate restaurant and store owners can siphon cash from computer cash registers and cheat tax officials. [...] Zappers alter the electronic sales records in a cash register. To satisfy tax collectors, the tally of food orders, for example, must match the register's final cash total. To hide the removal...

Security ROI

Bruce Schneier's Crypto-Gram - Tue, 09/02/2008 - 5:05am
Return on investment, or ROI, is a big deal in business. Any business venture needs to demonstrate a positive return on investment, and a good one at that, in order to be viable. It's become a big deal in IT security, too. Many corporate customers are demanding ROI models to demonstrate that a particular security investment pays off. And in...

My LA Times Op Ed on Photo ID Checks at Airport

Bruce Schneier's Crypto-Gram - Mon, 09/01/2008 - 4:15am
Opinion The TSA's useless photo ID rules No-fly lists and photo IDs are supposed to help protect the flying public from terrorists. Except that they don't work. By Bruce Schneier August 28, 2008 The TSA is tightening its photo ID rules at airport security. Previously, people with expired IDs or who claimed to have lost their IDs were subjected to...

Friday Squid Blogging: Translucent Squid

Bruce Schneier's Crypto-Gram - Fri, 08/29/2008 - 3:41pm
Photos here....

Another Voting Machine Cartoon

Bruce Schneier's Crypto-Gram - Fri, 08/29/2008 - 1:43pm
You know your industry has problems when mainstream comic strips make fun of you....

A British Bank Bans a Man's Password

Bruce Schneier's Crypto-Gram - Fri, 08/29/2008 - 9:44am
Weird story. Mr Jetley said he first realised his security password had been changed when a call centre staff member told him his code word did not match with the one on the computer. "I thought it was actually quite a funny response," he said. "But what really incensed me was when I was told I could not change it...

Border Gateway Protocol (BGP) Attacks

Bruce Schneier's Crypto-Gram - Fri, 08/29/2008 - 5:40am
This is serious stuff. (Kim Zetter's posts on the topic are excellent; read them.) It's a man-in-the-middle attack. "The Internet's Biggest Security Hole" (the title of that first link) has been that interior relays have always been trusted even though they are not trustworthy....

The TSA Told You That Liquids Are Dangerous

Bruce Schneier's Crypto-Gram - Thu, 08/28/2008 - 11:25am
So weird: A plane was forced to land when a passenger had an extreme allergic reaction to a leaking jar of mushroom soup, it was revealed today. The soup fell on the man from an overhead locker on a Ryanair flight to Dublin from Budapest. He reportedly suffered allergic swelling in his neck and struggled to breathe, forcing staff to...

Diebold Finally Admits its Voting Machines Drop Votes

Bruce Schneier's Crypto-Gram - Thu, 08/28/2008 - 5:38am
Premier Election Solutions, formerly called Diebold Election Systems, has finally admitted that a ten-year-old error has caused votes to be dropped. It's unclear if this error is random or systematic. If it's random -- a small percentage of all votes are dropped -- then it is highly unlikely that this affected the outcome of any election. If it's systematic --...

Virus Infects the Space Station

Bruce Schneier's Crypto-Gram - Wed, 08/27/2008 - 12:27pm
Laptops aboard the International Space Station have been infected with the W32.Gammima.AG worm. And it's not the first time this sort of thing has happened....

Doctoring Photographs without Photoshop

Bruce Schneier's Crypto-Gram - Wed, 08/27/2008 - 6:27am
It's all about the captions: ...doctored photographs are the least of our worries. If you want to trick someone with a photograph, there are lots of easy ways to do it. You don't need Photoshop. You don't need sophisticated digital photo-manipulation. You don't need a computer. All you need to do is change the caption. The photographs presented by Colin...

Full Disclosure and the Boston Farecard Hack

Bruce Schneier's Crypto-Gram - Tue, 08/26/2008 - 5:04am
In eerily similar cases in the Netherlands and the United States, courts have recently grappled with the computer-security norm of "full disclosure," asking whether researchers should be permitted to disclose details of a fare-card vulnerability that allows people to ride the subway for free. The "Oyster card" used on the London Tube was at issue in the Dutch case, and...

Red Light Cameras Don't Work

Bruce Schneier's Crypto-Gram - Mon, 08/25/2008 - 11:19am
Interesting: the solution to one problem causes another. "The rigorous studies clearly show red-light cameras don't work," said lead author Barbara Langland-Orban, professor and chair of health policy and management at the USF College of Public Health. "Instead, they increase crashes and injuries as drivers attempt to abruptly stop at camera intersections." Comprehensive studies from North Carolina, Virginia, and Ontario...
Syndicate content