By now it is obvious what the Russian strategy was in 2016. Hurting Clinton (and thereby helping Trump) was only part of a larger plan to infect our discourse and society with chaos by exploiting fractures that already existed in our society. Whether it involved attempts to create armed…

I fear we will never robustly stop phishing, as much because we seem to insist on training users to be phished. Even generic phishing has a tendency to work, and I just received a particularly nice one that is worth examining in detail.

The “Weak Diffie-Hellman” paper is almost certainly correct in the implication that this is how the NSA is breaking a large amount of cryptography. Simply because the NSA’s architecture for IPsec, a popular VPN protocol, only makes sense if they are using large-scale…

Brian Krebs recently identified a significant party of interest in the Ashley-Madison case, “Thadeus Zu”, and located the associated Twitter account and FaceBook Profile (although the profile photos are bogus, as those are of model Rob Evans). Although there is no concrete evidence, there is…

At the recent Usenix Security, Kyle Soska and Nicolas Christian presented their detailed survey of the on-line drug markets that followed Silk Road. Among the interesting takeaways from their work is that the market is now generally stable in daily volume, market…