industry

Google SSL Search

Google has added the ability to access their search engine via SSL.  The interface couldn’t be simpler — you just go to https://www.google.com instead of http://www.google.com.  The news media has been quite favorable to this — after all, search queries are at least semi-private in that you might not want your employer or neighbors to [...]

industry, privacy

BlackHat 2009, Day 2

The Thursday keynote was given by Bob Lentz, a Deputy Assistant Secretary of Defense for the United States. His main point was the paradigm shift from network-centric security to what he called content-centric security, and the fact that this devalues the protections around network perimeters. Static defenses don’t work when all the services being used [...]

anonymity, attacks, crypto, hardware, industry, legal, networks, passwords, risk, society

BlackHat 2009, Day 1

The annual Vegas security conference is upon us again, and there have been plenty of interesting presentations. Last year, it felt like WiFi was the “theme” of the year — this year, the most interesting (and well-attended) briefings were on SSL and mobile devices. The Wednesday keynote was presented by Douglas Merrill, the COO of [...]

attacks, crypto, industry, passwords, risk

Conficker Mostly a Dud

After tons of breathless media coverage about how April 1st might be the latest “cyber-catastrophe,” the date has come and gone and… nothing happened. There was, admittedly, some cause for concern.  With 250,000 known machines infected with Conficker.C (and estimates of the full number of infected machines as high as 15 million before antivirus software [...]

attacks, industry

BlackHat 2008, Day 1

Today was the first day of this year’s BlackHat Briefings in Las Vegas. The biggest security conference of the year, it’s always an interesting place to be and often involves the release of new and previously unknown exploits. The keynote speaker was Ian Angell, of the London School of Economics, who was speaking, ostensibly, about [...]

attacks, hardware, industry, mitigations, SOA/XML