Tag Archives: Security

Decouple Your Phone from Sensitive Accounts

Posted on 2017-07-09 by jcs

Laura Shin over at Forbes.com offers some excellent advice for safeguarding your sensitive accounts such as bank accounts, Dropbox, cloud storage, and the like. Some of it is the usual sensible advice such as using a password manager that generates … Continue reading →

Posted in General | Tagged | Leave a comment

If You’re Looking for Another Reason to Despise Journalists…

Posted on 2017-05-15 by jcs

Here you go.

Posted in General | Tagged , | Leave a comment

The Past Comes Due

Posted on 2017-05-15 by jcs

Irreal oldtimers know that I have often railed about the activities of the NSA and their domestic spying and about the ever more shrill demands by law enforcement that they be given a back door into our cell phones. As … Continue reading →

Posted in General | Tagged , | Leave a comment

Storing Secrets

Posted on 2017-05-04 by jcs

In my never ending crusade to move as many functions as possible into Emacs, I’ve lately been dealing with functions that require a user name and password. For example, part of the mbsync configuration that downloads my emails requires a … Continue reading →

Posted in General | Tagged , , | 4 Comments

Comments on the Thompson Hack

Posted on 2017-03-28 by jcs

I’ve written several times (1, 2, 3) about Ken Thompson’s beautiful if terrifying hack that invisibly inserted a back door into all programs generated with the C compiler. “Invisibly” here means that there’s nothing in the C compiler’s source code … Continue reading →

Posted in General | Tagged , | Leave a comment

A Security PSA

Posted on 2017-02-15 by jcs

|￣￣￣￣￣￣ || STOP ||INSTALLING ||SOFTWARE || VIA || CURL | SH || ＿＿＿＿＿＿|(\__/) ||(•ㅅ•) ||/ 　 づ — postmodern (@postmodern_mod3) November 6, 2016 Who would do this? Even worse is when they ask you to put sudo in front of … Continue reading →

Posted in General | Tagged | 1 Comment

Dangerous Phishing Attack

Posted on 2017-01-18 by jcs

There is a dangerous phishing attack being targeted (mostly) at Google Mail. It’s clever enough that it has fooled even sophisticated technical users. What happens is that you get an email from someone you know that includes a clickable image. … Continue reading →

Posted in General | Tagged | Leave a comment

Another of Life’s Little IQ Tests

Posted on 2016-11-24 by jcs

If you follow security at all, you’re always seeing stupid things. Often it’s stupidity on the part of users but not always. Here’s an example from a vendor that’s so outrageous it takes your breath away. MWave Australia is asking … Continue reading →

Posted in General | Tagged | Leave a comment

How to Get Started in Security

Posted on 2016-07-29 by jcs

Parisa Tabriz has a nice post on how to get started as a security engineer. She does mention some resources but the post is not really a check list of things you should do and sites you should visit. Rather, … Continue reading →

Posted in General | Tagged | Leave a comment

Overturning Section 1201

Posted on 2016-07-21 by jcs

Bunnie Huang, Matt Green, and the EFF are suing the U.S. Government over §1201 of the Digital Millennium Copyright Act. That’s the part of the act that prohibits bypassing software restrictions on copyrighted material. The original intent was to prevent … Continue reading →

Posted in General | Tagged | Leave a comment