Tag Archives: Privacy

What Happens When You Build In Backdoors?

Posted on 2015-03-07 by jcs

They end up biting you in the butt. Matt Green’s post is a nice explanation of the FREAK exploit. You can read his post for the technical details, which, really, aren’t that interesting except that they show how making it … Continue reading →

Posted in General | Tagged , | Leave a comment

Just When You Thought It Couldn’t Get Worse

Posted on 2015-02-28 by jcs

What could make the Lenovo/SuperFish scandal worse than it already is? This could: .@iblametom @Forbes @kristamonster May I rephrase? “$250,000 is all it takes for Lenovo to sell its customers out.” — Reginald Braithwaite (@raganwald) February 27, 2015 If true and … Continue reading →

Posted in General | Tagged , | Leave a comment

Act While You Can

Posted on 2015-02-28 by jcs

Gabriel Weinberg, the founder and CEO of DuckDuckGo has an impassioned plea to all of us to take a stand in the coming debate over Internet privacy. “Internet privacy” is a large and complex subject that includes abuses by the … Continue reading →

Posted in General | Tagged | 2 Comments

A New Stock Photo for a Hacker

Posted on 2015-02-25 by jcs

Christopher Soghoian has an excellent suggestion New rule: Instead of a stock photo of masked-man at a keyboard to show hackers, use the NSA director. More accurate. pic.twitter.com/DjziAmzptq — Christopher Soghoian (@csoghoian) February 23, 2015 If that picture isn’t scary … Continue reading →

Posted in General | Tagged | Leave a comment

And So It Begins

Posted on 2015-02-23 by jcs

The lawyers will be happy.

Posted in General | Tagged , | Leave a comment

Everybody Wants Ta Get Inta Da Act

Posted on 2015-02-23 by jcs

Apologies to Jimmy Durante but everyone, it seems, is waging man-in-the-middle attacks. The latest perpetrator is the provider of in-flight WiFi, Gogo. Google security engineer Adrienne Porter Felt, while on a flight, discovered that Gogo was serving up fake SSL … Continue reading →

Posted in General | Tagged , | Leave a comment

Lenovo Denies Security Problems

Posted on 2015-02-22 by jcs

It’s infuriating that Lenovo continues to deny that SuperFish is a security threat. They keep saying that they’ve stopped installing it but that in any case SuperFish didn’t collect or store any private information. Doubtless that’s true but it’s a … Continue reading →

Posted in General | Tagged , | Leave a comment

MITM Coming to a Job Near You

Posted on 2015-02-21 by jcs

Just in case you think that man-in-the-middle attacks are just for the victims of Lenovo’s shenanigans, there’s this .@mountain_ghosts Such as this lovely device, which goes by the Orwellian name of an "SSL Visibility Appliance": https://t.co/TEmLfOTZnt — Nick Stenning (@nickstenning) … Continue reading →

Posted in General | Tagged , | Leave a comment

Lenovo

Posted on 2015-02-21 by jcs

You’ve almost certainly heard about the astoundingly stupid actions on the part of Lenovo. Forget about the security implications for a minute. What this boils down to is that Lenovo sold out their customers for a few pieces of silver … Continue reading →

Posted in General | Tagged , | Leave a comment

Privacy or Security

Posted on 2015-02-20 by jcs

The government and others are fond of telling us that we must give up some privacy to ensure our security. Paul Downey reminds us of a truth worth remembering. "Anyone who makes you choose between privacy and security wants you … Continue reading →

Posted in General | Tagged | Leave a comment