Bruce Schneier on the Boston Marathon Bombing and the Psychology of Fear

Dennis Fisher talks with Bruce Schneier about the effects of the Boston Marathon bombing, how the psychology of fear plays into people’s reactions to these events and what the political aftermath could be...

SHA-1 Hash Collision Could Be Within Reach of Attackers By 2018

It’s been just a few days since NIST approved Keccak as the winner of the SHA-3 competition, and it likely will be some time before we begin seeing the new hash algorithm popping up in common products and services. However, some in the cryptography community say it may not be a bad idea to start...

Forthcoming SHA-3 Hash Function May Be Unnecessary

For the last five years, NIST, the government body charged with developing new standards for computer security, among other things, has been searching for a new hash function to replace the aging SHA-2 function. Fives years is a long time, but this is the federal government and things move at the...

Bruce Schneier on Liars and Outliers

Dennis Fisher talks with cryptographer and author Bruce Schneier about his new book, Liars and Outliers, the role of trust in society and security, the ways in which technology helps promote trust and how various groups and actors defect the norm and take advantage of that trust. Podcast audio...

Unbreakable Enterprise kernel security and bug fix update

2.6.32-300.3.1.el6uek - proc: fix oops on invalid /proc/ /maps access Linux Torvalds - Revert 'capabilities: do not grant full privs for setuid w/ file caps + no effective caps' Joe Jin - mm: Use MMFCOMPAT instead ia32compat to prevent kabi be broken Joe Jin - proc: enable writing to /proc/pid/me...

How to Beat Evil Governments When Your Internet Turned Off ?

How to Beat Evil Governments When Your Internet Turned Off ? Bruce Sutherland explain at DefCon 19 Conference that "How To Get Your Message Out When Your Government Turns Off The Internet " . Bruce Sutherland is a network systems architect and software developer with Domex Computer Services Inc,...

Derbycon 2011 Videos talks

Derbycon 2011 Videos Talks The idea behind DerbyCon was developed by Dave Kennedy ReL1K, Martin Bos PureHate, and Adrian Crenshaw Irongeek. Their motivation stemmed from a desire to see more of the old-style talks and events of the conventions of the past. DerbyCon was hosted by some specialized...

[Hurry Up] Hacker Halted 2011 Special Offer For The Hacker News Readers

Hurry Up Hacker Halted 2011 Special Offer For The Hacker News Readers Special for all The Hacker News subscribers Offer ends Sep 30, 2011 Attend EC-Council's signature event in Miami - Hacker Halted USA - and Get an iPad 2 + 2 nights hotel + an additional 10% discount, when signing up for the...

Bruce Schneier and the Mirage of Security

Bruce Schneier has been writing, talking and thinking about security for a long time, and in this talk from the TEDxPSU conference sponsored by Penn State, Schneier discusses the realities and the mirages of security and what they mean for real people...

SA-CONTRIB-2011-015 - Translation Management - Multiple Vulnerabilities

This Translation Management module helps to manage the process of translating content on your site. The module has several vulnerabilities. It doesn't sufficiently escape user text when printed to the browser nor when used in database queries resulting in Cross Site Scripting XSS and SQL Injectio...

Digital Affluence Is Making Us Less Secure

Our digital affluence is making us insecure, writes Dan Geer, the CISO at In-Q-Tel. Like addled consumers trying to choose from among 20 different types of toothpaste in the supermarket aisle, IT is paralyzed by an overabundance of security products, unable to decide which products are worth the...

NIST Announces SHA-3 Hash Function Finalists

The National Institute of Standards and Technology has chosen the five finalists for the last round of its competition to find the next hash function standard. The SHA-3 finalists include Skein, developed by a group including Bruce Schneier and Jon Callas. The other four SHA-3 finalists are BLAKE...

Bruce Schneier on Cyber War

In this video of a speech at the Institute of International and European Affairs, Bruce Schneier discusses the current state of cyber war and whether the actual threat has been overhyped and distorted...

Bruce Schneier, BT Counterpane

There’s a certain subset of people who will stop reading this list as soon as they see Schneier’s name. That’s fine, I get it. Schneier is among the more controversial figures in the security industry and has more than his share of both fans and detractors. But this list is people who are...

Q&A: Bruce Schneier

CNet’s Elinor Mills has produced an interesting Q&A interview with security guru Bruce Schneier where the cryptographer pokes fun at the National Cyber Security Month, talks about his background in crypto and working for the U.S. Defense Department, and says he fears privacy invasion more from...

Bruce Schneier On Identification-Based Security

Security expert Bruce Schneier discusses the problems and limitations of identification-based security, from driver’s licenses to national ID cards and the REAL ID program...

The Value of Self-Enforcing Protocols

By Bruce Schneier There are several ways two people can divide a piece of cake in half. One way is to find someone impartial to do it for them. This works, but it requires another person. Another way is for one person to divide the piece, and the other person to complain to the police, a judge, o...

New Attack Against AES-256 a 'Huge Result'

A group of cryptographers has devised a new attack against AES, the de facto standard encryption algorithm, that enables them to recover an encryption key in far less time than had been possible before. The attack can recover an AES-256 key in a small enough amount of time to make the method...

Bruce Schneier on Cryptography, Security Theater and the Psychology of Fear

Dennis Fisher talks with security expert Bruce Schneier about the usefulness of cryptography, the psychology of security and fear and the war on the unexpected after 9/11. Download Subscribe to the Digital Underground podcast on Podcast audio courtesy of George Wood...

Schneier's PasswordSafe password validation flaw

Title : Schneier's PasswordSafe password validation flaw Date : November 16, 2005 Product : PasswordSafe 1.x, 2.x Discovered by : ElcomSoft Co.Ltd. Overview ====================================================================== PasswordSafe is a program originally written by security expert Bruce...