The way to reduce the chance that someone can crack your computer code is to write better code, and test it faster than the spooks can.
Intelligence Agencies Are Not Here to Defend Your Enterprise
Category: Threat
How Do You Get Good at Incident Response?
The true measure of defensive success is the speed at which you detect, eject and mitigate the actions of your attackers.
Hack the Pentagon: Step Forward or Retrograde Action?
I want to make sure that you understand that I think that the “Hack the Pentagon” project is a great idea. I also want to make it clear that I think it is far too little, far too late. To…
“Cyber MAD” is a Bad Idea. Really Bad.
If the scenario you need to make your theory work in cyberspace is indistinguishable from a James Bond script, you can’t be taken seriously.
Meaningful Ideas
That airline security is largely theater is a given. As has been covered by others, precluding cockpit access by anyone but pilots is the safest and sanest security move post-9/11. The rest of the processes are not ill-intended, just ill-conceived.…
The Lessons of PFC Manning
The tragedy here is not that we were undone by a shit-bird GI who didn’t have his head screwed on straight, it’s that we will ignore what he is teaching us.
Malware Analysis: The Danger of Connecting the Dots
A lot of people fall victim to a number of problems, fallacies and mental traps when they attempt to draw conclusions from data
We’re Not Breaking Up Anything
Ever heard of the steam roller called Internet of Things? Something you should all be aware of: it’s riding on the Internet.
Cybersecurity month history lesson #1,283
Lesson number one when it comes to trying to assess the motivation of hackers: try not to hurt yourself.
You Were Promised Neither Security Nor Privacy
You can still live your life without using TCP/IP or HTTP, you just don’t want to.