News aggregator

FBI's New Cryptanalysis Contest

Schneier on Security - Mon, 01/05/2009 - 20:56
From their website....
Categories: Security

Trends in Counterfeit Currency

Schneier on Security - Mon, 01/05/2009 - 12:34
It's getting worse: More counterfeiters are using today's ink-jet printers, computers and copiers to make money that's just good enough to pass, he said, even though their product is awful. In the past, he said, the best American counterfeiters were skilled printers who used heavy offset presses to turn out decent 20s, 50s and 100s. Now that kind of work...
Categories: Security

Friday Squid Blogging: Climate Change Affects Squids

Schneier on Security - Fri, 01/02/2009 - 22:49
No surprise, really....
Categories: Security

Friday Squid Blogging: Squid Attacks ROV

Schneier on Security - Fri, 01/02/2009 - 22:08
Video. Looks like a Humboldt squid....
Categories: Security

Another Recently Released NSA Document

Schneier on Security - Fri, 01/02/2009 - 18:17
American Cryptology during the Cold War, 1945-1989, by Thomas R. Johnson: documents 1, 2, 3, 4, 5, and 6. In response to a declassification request by the National Security Archive, the secretive National Security Agency has declassified large portions of a four-part "top-secret Umbra" study, American Cryptology during the Cold War. Despite major redactions, this history discloses much new information...
Categories: Security

Software Security

Schneier on Security - Fri, 01/02/2009 - 12:42
Real-world data on software security programs....
Categories: Security

Schneier on Twitter

Schneier on Security - Wed, 12/31/2008 - 20:33
This account, "bruceschneier," is not me. This account, "schneier," is me. I have never posted; I don't promise that I ever will....
Categories: Security

Forging SSL Certificates

Schneier on Security - Wed, 12/31/2008 - 19:39
We already knew that MD5 is a broken hash function. Now researchers have successfully forged MD5-signed certificates: Molnar, Appelbaum, and Sotirov joined forces with the European MD5 research team in mid-2008, along with Swiss cryptographer Dag Arne Osvik. They realized that the co-construction technique could be used to simultaneously generate one normal SSL certificate and one forged certificate, which could...
Categories: Security

CDC Bioterrorism Readiness Plan

Schneier on Security - Wed, 12/31/2008 - 11:44
From 1999. (It's a PDF.)...
Categories: Security

NSA Patent on Network Tampering Detection

Schneier on Security - Tue, 12/30/2008 - 18:07
The NSA has patented a technique to detect network tampering: The NSA's software does this by measuring the amount of time the network takes to send different types of data from one computer to another and raising a red flag if something takes too long, according to the patent filing. Other researchers have looked into this problem in the past...
Categories: Security

Matthew Alexander on Torture

Schneier on Security - Tue, 12/30/2008 - 12:37
Alexander is a former Special Operations interrogator who worked in Iraq in 2006. His op-ed is worth reading: I learned in Iraq that the No. 1 reason foreign fighters flocked there to fight were the abuses carried out at Abu Ghraib and Guantanamo. Our policy of torture was directly and swiftly recruiting fighters for al-Qaeda in Iraq. The large majority...
Categories: Security

Shoplifting on the Rise in Bad Economy

Schneier on Security - Mon, 12/29/2008 - 20:52
From the New York Times: Police departments across the country say that shoplifting arrests are 10 percent to 20 percent higher this year than last. The problem is probably even greater than arrest records indicate since shoplifters are often banned from stores rather than arrested. Much of the increase has come from first-time offenders like Mr. Johnson making rash decisions...
Categories: Security

Gunpowder Is Okay to Bring on an Airplane

Schneier on Security - Mon, 12/29/2008 - 13:05
Putting it in a clear plastic baggie magically makes it safe: Mind you, I had packed the stuff safely. It was in three separate jars: one of charcoal, one of sulphur, and one of saltpetre (potassium nitrate). Each jar was labeled: Charcoal, Sulphur, Saltpetre. I had also thoroughly wet down each powder with tap water. No ignition was possible. As...
Categories: Security

Friday Squid Blogging: Vandals Wreck Giant Squid Collection

Schneier on Security - Fri, 12/26/2008 - 22:41
Sad squid news. ...vandals got in by taking advantage of a temporary door, smashed windows and broke display cases containing male and female giant squids each measuring ten metres long as well as skeletons of whales, tortoises, marine birds and fossils. Where was the security?...
Categories: Security

Friday Squid Blogging: Me Eating Squid

Schneier on Security - Fri, 12/26/2008 - 22:08
Me eating grilled squid in Wuxi, China, earlier this month....
Categories: Security

Interview with Me

Schneier on Security - Fri, 12/26/2008 - 16:38
Another one....
Categories: Security

CCTV Cameras Going Unmonitored

Schneier on Security - Fri, 12/26/2008 - 13:09
This is not surprising at all; when money is scarce, these sorts of things go unfunded. Perhaps the biggest surprise is that people thought the cameras were ever monitored -- generally, they're not....
Categories: Security

Securing Cyberspace for the 44th Presidency

Schneier on Security - Wed, 12/24/2008 - 19:31
"Securing Cyberspace for the 44th Presidency," by the Center for Strategic and International Studies....
Categories: Security

U.S. COMSEC History from 1973

Schneier on Security - Wed, 12/24/2008 - 17:03
Just declassified, this document -- A History of U.S. Communications Security (Volumes I and II); the David G. Boak Lectures, National Security Agency (NSA), 1973 -- is definitely worth reading. The first sections are highly redacted, but the remainder is fascinating....
Categories: Security

Comparing the Security of Electronic Slot Machines and Electronic Voting Machines

Schneier on Security - Wed, 12/24/2008 - 12:02
From the Washington Post. Other important differences: Slot machine are used every day, 24 hours a day. Electronic voting machines are used, at most, twice a year -- often less frequently. Slot machines involve money. Electronic voting machines involve something much more abstract. Slot machine accuracy is a non-partisan issue. For some reason I can't fathom, electronic voting machine accuracy...
Categories: Security
Syndicate content