Seen in a comments thread about paper deadline extensions:

"If people don't like randomly distributed unequal treatment, then why do they keep submitting papers to security research conferences?"

Via Nate Lawson's blog, TEMPEST: A Signal Problem is a recently declassified NSA document on the history of "compromising radiations from communications and Comsec equipment." Unfortunately, big chunks are still redacted, but there are still a couple pages worth of interesting reading there.

I, and a great many people I know, think like this.

I wanted to chase some references from "My Botnet is Bigger than Yours," so I started typing the title into the search bar. After getting through "my botnet", Google helpfully suggested "my botnet brings all the feds to my yard". I can't even begin to imagine how that phrase got sufficiently popular to be returned by the suggestion engine...

A Pilot on Airline Security, by David Mackett, the president of the Airline Pilots Security Alliance. Good reading. Link courtesy of Schneier.

... That is, progress in exhausting all the ways to not finish my paper.

WOOT CFP: A hacker workshop with real peer review! The program committee is pretty impressive.

MSDN Security Development Lifecycle Blog: The first contentful post, a Monday-morning-quarterbacking of the ANI bug, is certainly interesting, not least because it contains "We may ( Read more... )

InqTana Through the eyes of Dr. Frankenstein, or "Ways to subvert processes on OSX."

By KF, of MOAB fame. Link courtesy of Thomas Ptacek, in the comments on one of the posts in the current round of Matasano vs Mac fanboys (and fangirls).

Presentation from the current NANOG meeting about the attack on the DNS roots. Attacking the roots seems like such a ridiculous strategy. There are 13 of them, and this attack managed real denial of service at only two (though degradation of service at others); they're individually overprovisioned and highly distributed (go go gadget anycast); and ( Read more... )

MIT Technology Review's Top 35 Young Innovators lists five people whose contributions are security-related. (Argyris, Dingledine, Kohler, Raghunathan, and Singh.) This makes me happy.

"Holy... mother of... ebbeh... whoa." The cause of such mumblings? The author's summary of his soon-to-be-published paper "Hot or Not: Revealing Hidden Services by their Clock Skew." That, my friends, is a remote side-channel attack.