Tag Archives: Security

Moxie Marlinspike

Posted on 2015-07-18 by jcs

I’ve written many times about the need to make email encryption accessible to Aunt Millie (see here, here, and here for example). Sadly, it’s a really hard problem. Now, maybe there’s some hope. The Wall Street Journal has an interesting … Continue reading →

Posted in General | Tagged , | Leave a comment

There is No Internet of Things

Posted on 2015-07-16 by jcs

A useful corollary to There is No Cloud. There is no Internet of Things, only other people's computers in your house. — Jacob H-A (@j4cob) July 15, 2015 In many ways, this is worse. Who knows what all those computers … Continue reading →

Posted in General | Tagged | Leave a comment

Flash and Security

Posted on 2015-07-02 by jcs

In an editor’s note to the SANS Newsbites piece on Flash being used as a vector for the ransomware CryptoWall, William Hugh Murray speaks the uncomfortable truth on what Flash tells us about security.

Posted in General | Tagged | Leave a comment

Schneier on Why We Encrypt

Posted on 2015-06-28 by jcs

Bruce Schneier has a nice post on Why We Encrypt. Encryption maintains our privacy, keeps our money safe, and, sometimes, saves our lives. Most Irreal readers will be familiar with these reasons but here’s another that we hear about less … Continue reading →

Posted in General | Tagged | Leave a comment

There is No Cloud

Posted on 2015-06-23 by jcs

A handy reminder from vierito5 (via Karl Voit): Periodic reminder: There is no Cloud. It's just someone else's computer. pic.twitter.com/v4MxtTHR0f — vierito5 (@vierito5) June 15, 2015

Posted in General | Tagged , | Leave a comment

Computer Security and the U.S. Government

Posted on 2015-06-20 by jcs

If you’re interested in security, you really should subscribe to the semiweekly SANS Newsbites newsletter. The subscription is free except for the occasional email notifications of SANS courses and events. Each letter comprises a series of short (typically a paragraph … Continue reading →

Posted in General | Tagged | Leave a comment

The TSA and Airport Security

Posted on 2015-06-13 by jcs

Bruce Schneier talks sense on the TSA and airport security. After recent reports that the TSA missed 96% of Red Team attempts to smuggle simulated guns and bombs through the check points many are asking why we even have a … Continue reading →

Posted in General | Tagged | Leave a comment

Why You Shouldn’t Use the Cloud

Posted on 2015-06-06 by jcs

Karl Voit has a nice post that tells us why we shouldn’t trust or use the cloud. There are lots of reasons why we might want to use the cloud and most of us are familiar with them: lots of … Continue reading →

Posted in General | Tagged , | Leave a comment

The Gift That Keeps On Giving

Posted on 2015-05-24 by jcs

One of the major beefs that many of us have with the NSA is that they keep doing things that make us less secure. Their latest project is trying to convince Congress to mandate back doors in crypto applications. It’s … Continue reading →

Posted in General | Tagged , | Leave a comment

Diceware as a Pipeline

Posted on 2015-04-25 by jcs

If you’re interested in picking a passphrase using the Diceware method but don’t want to bother with compiling a program for what is most likely a one-off use, you’re in luck. Dr. Drang over at And now it’s all this … Continue reading →

Posted in General | Tagged | Leave a comment