Category: Security technology

Auto Added by WPeMatico

Security Vulnerabilities in the RCS Texting Protocol

Posted on By infossl
cellphones, encryption, protocols, Security technology, securityengineering, ss7, vulnerabilities

Interesting research: SRLabs founder Karsten Nohl, a researcher with a track record of exposing security flaws in telephony systems, argues that RCS is in many ways no better than SS7, the decades-old phone system carriers still used for calling and texting, which has long been known to be vulnerable to interception and spoofing attacks. While … Read More “Security Vulnerabilities in the RCS Texting Protocol” »

Scaring People into Supporting Backdoors

Posted on By infossl
childpornography, crime, cryptowars, eavesdropping, encryption, fear, lawenforcement, nationalsecuritypolicy, Security technology

Back in 1998, Tim May warned us of the “Four Horsemen of the Infocalypse”: “terrorists, pedophiles, drug dealers, and money launderers.” I tended to cast it slightly differently. This is me from 2005: Beware the Four Horsemen of the Information Apocalypse: terrorists, drug dealers, kidnappers, and child pornographers. Seems like you can scare any public … Read More “Scaring People into Supporting Backdoors” »

Reforming CDA 230

Posted on By infossl
businessofsecurity, censorship, eff, facebook, nationalsecuritypolicy, Security technology

There’s a serous debate on reforming Section 230 of the Communications Decency Act. I am in the process of figuring out what I believe, and this is more a place to put resources and listen to people’s comments. The EFF has written extensively on why it is so important and dismantling it will ben catastrophic … Read More “Reforming CDA 230” »

Andy Ellis on Risk Assessment

Posted on By infossl
psychologyofsecurity, riskassessment, risks, Security technology

Andy Ellis, the CSO of Akamai, gave a great talk about the psychology of risk at the Business of Software conference this year. I’ve written about this before. One quote of mine: “The problem is our brains are intuitively suited to the sorts of risk management decisions endemic to living in small family groups in … Read More “Andy Ellis on Risk Assessment” »

Election Machine Insecurity Story

Posted on By infossl
cybersecurity, Security technology, voting, vulnerabilities

Interesting story of a flawed computer voting machine and a paper ballot available for recount. All ended well, but only because of that paper backup. Vote totals in a Northampton County judge’s race showed one candidate, Abe Kassis, a Democrat, had just 164 votes out of 55,000 ballots across more than 100 precincts. Some machines … Read More “Election Machine Insecurity Story” »