Securology

Stanford University has a free online Cryptography Course . Looks very interesting for someone who wants to peel back the layers of the oni...

Some content providers, like Hulu , have restrictions on certain content to make it only available in specific countries. They implement t...

Having just caught up on the positive achievements of Alex Halderman, we have discovered that another promising young mind has been lost for...

Computer Science Professor J. Alex Halderman is an upcoming academic star that we at Securology have been watching for awhile now , since ...

This is a creative implementation that discovers several information flow theory violations. The end result is a website that is not part o...

PCI Regulations allow merchants to store the first 6 digits plus the last 4 digits of a customer's credit card number. Ever wonder jus...

This sounds exciting, like intrigue for spy fiction : When Kenneth G. Lieberthal, a China expert at the Brookings Institution, travel...

Do It Yourself Surveillance Drone Aircraft . Why? Because you still can. Adjust your one-liner: "if guns drones are outlawed, then...

John Nash (inspiration for A Beautiful Mind ) wrote letters to the US Government in the 1950s which have recently been de classified and r...

Verisign was breached according to an SEC report (Reuters), yet they report almost no details and act like it's no big deal! An exce...

This is a very premature response to what I believe is the single best solution to dangers like SOPA, PIPA, and ACTA: DNSCrypt . To be fa...

Here's another very interesting post on lock-picking, like making a padlock shim out of soda can : How to make your own lock-picking to...

This is a quick, cheap, and simple way to crack open a padlock with a homemade shim from a soda can . Not a new idea, but a well-described ...

The following is a threat model that assumes the RSA SecurID seed records have been stolen by a sophisticated adversary , which is probably ...

RSA Released a new Customer FAQ regarding the RSA SecurID breach. Let's break it down ... Customer FAQ Incident Overview 1. What h...

RSA, the security division of EMC, was breached by a sophisticated adversary who stole something of value pertaining to RSA SecurID two fac...

This could also be titled "Taxonomies are Difficult". ... Roger Grimes at InfoWorld has a Seven Types of Hackers article. Ta...

What's the point of the heavy-duty chain and lock if one of the chain's links is just a zip-tie?

Bruce Schneier just echoed what I wrote back in December 2008 that the encryption key management aspects of PCI 1.2 and earlier are flat-ou...