Wanted: Cybersecurity Imagery

Eli Sugarman of the Hewlettt Foundation laments about the sorry state of cybersecurity imagery: The state of cybersecurity imagery is, in a word, abysmal. A simple Google Image search for the term proves the point: It's all white men in hoodies hovering menacingly over keyboards, green...

I'm Leaving IBM

Today is my last day at IBM. If you've been following along, IBM bought my startup Resilient Systems in Spring 2016. Since then, I have been with IBM, holding the nicely ambiguous title of "Special Advisor." As of the end of the month, I will be back on my own. I will continue to write and speak,...

Workshop on the Economics of Information Security

Last week, I hosted the eighteenth Workshop on the Economics of Information Security at Harvard. Ross Anderson liveblogged the talks...

Security and Human Behavior (SHB) 2019

Today is the second day of the twelfth Workshop on Security and Human Behavior, which I am hosting at Harvard University. SHB is a small, annual, invitational workshop of people studying various aspects of the human side of security, organized each year by Alessandro Acquisti, Ross Anderson, and...

cervantesobservatorio.fas.harvard.edu Open Redirect vulnerability

Open Bug Bounty ID: OBB-706136 Description| Value ---|--- Affected Website:| cervantesobservatorio.fas.harvard.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| Open Redirect / CWE-601 CVSSv3...

sites.fas.harvard.edu XSS vulnerability

Open Bug Bounty ID: OBB-704310 Description| Value ---|--- Affected Website:| sites.fas.harvard.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

ads.harvard.edu XSS vulnerability

Open Bug Bounty ID: OBB-701722 Description| Value ---|--- Affected Website:| ads.harvard.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

myads.harvard.edu XSS vulnerability

Open Bug Bounty ID: OBB-701717 Description| Value ---|--- Affected Website:| myads.harvard.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidde...

adsabs.harvard.edu XSS vulnerability

Open Bug Bounty ID: OBB-701704 Description| Value ---|--- Affected Website:| adsabs.harvard.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidd...

adswww.harvard.edu XSS vulnerability

Open Bug Bounty ID: OBB-701700 Description| Value ---|--- Affected Website:| adswww.harvard.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidd...

adsbit.harvard.edu XSS vulnerability

Open Bug Bounty ID: OBB-701699 Description| Value ---|--- Affected Website:| adsbit.harvard.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidd...

blogs.harvard.edu Improper Access Control vulnerability

Open Bug Bounty ID: OBB-695396 Description| Value ---|--- Affected Website:| blogs.harvard.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:|...

rc.fas.harvard.edu Improper Access Control vulnerability

Open Bug Bounty ID: OBB-693908 Description| Value ---|--- Affected Website:| rc.fas.harvard.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:|...

jchs.harvard.edu XSS vulnerability

Open Bug Bounty ID: OBB-686532 Description| Value ---|--- Affected Website:| jchs.harvard.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

seas.harvard.edu XSS vulnerability

Open Bug Bounty ID: OBB-677064 Description| Value ---|--- Affected Website:| seas.harvard.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

sites.fas.harvard.edu XSS vulnerability

Open Bug Bounty ID: OBB-676101 Description| Value ---|--- Affected Website:| sites.fas.harvard.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

ads.harvard.edu XSS vulnerability

Open Bug Bounty ID: OBB-671564 Description| Value ---|--- Affected Website:| ads.harvard.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

hugse9.harvard.edu XSS vulnerability

Open Bug Bounty ID: OBB-664767 Description| Value ---|--- Affected Website:| hugse9.harvard.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

evans.rc.fas.harvard.edu XSS vulnerability

Open Bug Bounty ID: OBB-654889 Description| Value ---|--- Affected Website:| evans.rc.fas.harvard.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

pa14.mgh.harvard.edu XSS vulnerability

Open Bug Bounty ID: OBB-654838 Description| Value ---|--- Affected Website:| pa14.mgh.harvard.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...