Securology

Anyone who pays any attention to DRM will extrapolate the general principle: You can never prevent an end-user who has physical control of...

Wouldn't it be really scary if physical locks in large planned cities like NYC were designed to use skeleton keys-- master keys that are...

With the news containing stories of malware distributing via compromised Certificate Authorities , it makes sense that some IT Security blo...

Do you have a house/door key lock that you no longer want somebody to have the ability to unlock, but you don't have time to change th...

Breaking into a hotel room with less than $50 in hardware The technical security media has been all abuzz about a recent Black Hat prese...

It should come as no real surprise: MS-CHAPv2 is broken .  It's an ancient scheme.  If you were paying attention, you would have migrate...

Verisign was breached according to an SEC report (Reuters), yet they report almost no details and act like it's no big deal! An exce...

This is a very premature response to what I believe is the single best solution to dangers like SOPA, PIPA, and ACTA: DNSCrypt . To be fa...

Here's another very interesting post on lock-picking, like making a padlock shim out of soda can : How to make your own lock-picking to...

This is a quick, cheap, and simple way to crack open a padlock with a homemade shim from a soda can . Not a new idea, but a well-described ...

The following is a threat model that assumes the RSA SecurID seed records have been stolen by a sophisticated adversary , which is probably ...

RSA Released a new Customer FAQ regarding the RSA SecurID breach. Let's break it down ... Customer FAQ Incident Overview 1. What h...

RSA, the security division of EMC, was breached by a sophisticated adversary who stole something of value pertaining to RSA SecurID two fac...

What's the point of the heavy-duty chain and lock if one of the chain's links is just a zip-tie?

Bruce Schneier just echoed what I wrote back in December 2008 that the encryption key management aspects of PCI 1.2 and earlier are flat-ou...

What an interesting year 2010 is already turning out to be in technology, politics, and life as we know it. More censorship battles are goi...

There have been many attacks on whole disk encryption recently: Cold Boot attacks in which keys hang around in memory a lot longer than m...

NOTE: In the name of "all things security", because this blog is intended to be about physical security, too, not just information...