Tag Archives: Security

The Dangers of the Digital Life

Posted on 2014-02-01 by jcs

I’ve written before about how I’ve embraced the digital life and pretty much given up dealing with paper, pens, and all the rest of the traditional record keeping methods. Almost everything happens on-line and whatever paper documents I get are … Continue reading →

Posted in General | Tagged | Leave a comment

OS Security Appraisals

Posted on 2014-01-31 by jcs

The United Kingdom’s CESG has published an appraisal the security of various operating systems. The TL;DR is that Ubuntu Linux is the “most secure” but Ubuntu is probably a proxy for Linux (no other Linux distros were profiled). Happily, the … Continue reading →

Posted in General | Tagged | Leave a comment

Passwords in 2013

Posted on 2014-01-28 by jcs

PC World in reporting on the 25 worst passwords of 2013. As it does every year, Splashdata, a security firm, has compiled a list of the most common passwords culled from stolen password lists. Everything is depressingly normal. All our … Continue reading →

Posted in General | Tagged | Leave a comment

Java and Security

Posted on 2014-01-24 by jcs

With respect to Java, I’m pretty much in the same boat as Paul Graham: I’ve never used it but it does seem to have an unpleasant odor. One thing for sure, it’s a major exploit vector and, as a result, … Continue reading →

Posted in General | Tagged | Leave a comment

FIDO

Posted on 2014-01-05 by jcs

Ars Technica is reporting that Microsoft has joined the FIDO alliance. The FIDO, Fast IDentity Online, alliance is an industry group that is developing protocols to replace the passwords for access to Web sites. The idea is to use public … Continue reading →

Posted in General | Tagged | Leave a comment

Progress on the Discrete Logarithm Problem

Posted on 2013-12-29 by jcs

A team of French mathematicians and computer scientists have developed a new algorithm that makes substantial progress on certain types of discrete logarithms. The general discrete log problem is given a and b from a finite field find n also … Continue reading →

Posted in General | Tagged | Leave a comment

Tor Best Practices

Posted on 2013-12-24 by jcs

Over at Digital Era there’s a nice post on Tor best practices. While the Tor protocol and software are reasonably secure, you can’t use them blindly. The most recent example of what happens when you do is demonstrated by Eldo … Continue reading →

Posted in General | Tagged , | Leave a comment

Phone Tracking

Posted on 2013-12-21 by jcs

Matt Blaze over at Exhaustive Search has an interesting post on how law enforcement agencies track phone calls. Blaze is discussing law enforcement targeting individuals in support of criminal investigations not the wholesale dragnet surveillance of the type that the … Continue reading →

Posted in General | Tagged , | Leave a comment

SSL and the NSA

Posted on 2013-12-08 by jcs

If you’re a crypto-nerd or even have a passing interest, you might enjoy Matthew Green‘s post speculating on how the NSA breaks SSL. We know, courtesy of Edward Snowden’s leaked documents, that they’ve had some sort of success with SSL … Continue reading →

Posted in General | Tagged , | Leave a comment

GPG/PGP Best Practices

Posted on 2013-11-20 by jcs

The Privacy and Authenticity Outreach Workgroup of we.riseup.net have published an excellent list of OpenPGP Best Practices. Most Irreal readers, I trust, have already installed and configured GPG/PGP even if most of their usual correspondents haven’t. I’ve written before that … Continue reading →

Posted in General | Tagged | Leave a comment