Tag Archives: Security

The TSA and Airport Security

Posted on 2015-06-13 by jcs

Bruce Schneier talks sense on the TSA and airport security. After recent reports that the TSA missed 96% of Red Team attempts to smuggle simulated guns and bombs through the check points many are asking why we even have a … Continue reading →

Posted in General | Tagged | Leave a comment

Why You Shouldn’t Use the Cloud

Posted on 2015-06-06 by jcs

Karl Voit has a nice post that tells us why we shouldn’t trust or use the cloud. There are lots of reasons why we might want to use the cloud and most of us are familiar with them: lots of … Continue reading →

Posted in General | Tagged , | Leave a comment

The Gift That Keeps On Giving

Posted on 2015-05-24 by jcs

One of the major beefs that many of us have with the NSA is that they keep doing things that make us less secure. Their latest project is trying to convince Congress to mandate back doors in crypto applications. It’s … Continue reading →

Posted in General | Tagged , | Leave a comment

Diceware as a Pipeline

Posted on 2015-04-25 by jcs

If you’re interested in picking a passphrase using the Diceware method but don’t want to bother with compiling a program for what is most likely a one-off use, you’re in luck. Dr. Drang over at And now it’s all this … Continue reading →

Posted in General | Tagged | Leave a comment

The Setup Interview Bruce Schneier

Posted on 2015-04-19 by jcs

The Setup has posted an interview with Bruce Schneier. Their interviews always ask just four questions: Who are you, and what do you do? What hardware do you use? And what software? What would be your dream setup? It’s interesting … Continue reading →

Posted in General | Tagged | Leave a comment

The//Intercept on Choosing Passwords

Posted on 2015-04-08 by jcs

The//Intercept has an excellent article on how to choose secure passwords that are (relatively) easy to remember. The problem with passwords is that they are almost never secure. Most people choose stupid ones (password, 123456, \(\dots\)) and even those of … Continue reading →

Posted in General | Tagged | Leave a comment

HTTP/2 and TLS

Posted on 2015-03-25 by jcs

Speaking of nosy Parkers, the Open Web Alliance is annoyed that HTTP/2 will make it harder for them to spy on you and is lobbying against mandatory encryption in HTTP/2. Sadly, they’ve won the first round. The Open Web Alliance … Continue reading →

Posted in General | Tagged , | Leave a comment

The Difference Between Malware and Adware

Posted on 2015-03-16 by jcs

Infosec Taylor Swift has a clarification for Lenovo, other computer manufacturers, and the journalists who report on them: Journalists: "Adware" is malware with a legal team. — InfoSec Taylor Swift (@SwiftOnSecurity) February 19, 2015

Posted in General | Tagged | Leave a comment

Do As I Say…

Posted on 2015-03-07 by jcs

An almost too delicious piece of hypocrisy.

Posted in General | Tagged , | Leave a comment

What Happens When You Build In Backdoors?

Posted on 2015-03-07 by jcs

They end up biting you in the butt. Matt Green’s post is a nice explanation of the FREAK exploit. You can read his post for the technical details, which, really, aren’t that interesting except that they show how making it … Continue reading →

Posted in General | Tagged , | Leave a comment