The Dark Reading asked a rhetoric question recently: «When Will End Users Stop Being Fooled By Online Scams?» Well, you probably guessed the answer right away and it is «never». I do not think it is possible to train the whole population of the planet in the intricacies of security. So the social engineering attacks in all of their variety are here ( Read more... )

I came across the «six rules of English language» set forth by George Orwell in his essay «Politics and the English Language» in one of the posts on Jordan Bortz’s Software Architecture Blog. They are:

1. Never use a metaphor, simile, or other figure of speech which you are used to seeing in print.
2. Never use a long word where a short one will do.
3. If it ( Read more... )

An extremely interesting article by Bruce Schneier titled «The Vulnerabilities Market and the Future of Security» is available at Forbes and on his own site. A must-read for anyone even remotely interested in security.

Оригинал: https://

The capacity of people to persist in their delusions never seizes to amaze me.

A yet another researcher is wondering why biometric authentication does not work: «Ten to twenty per cent of utterances collected by voice biometrics systems are not strong identifiers of the individual that spoke them…», says Dr. Clive Summerfield.

There is a serious ( Read more... )

The folks over at École Polytechnique of Lausanne have published a very interesting paper titled « Ron was wrong, Whit is right«. This is not too mathematical for a cryptanalitical paper and understandable even to someone without crypto background. It is more of an investigation into the properties of the public keys available publically on the ( Read more... )

Some people take security seriously by traveling light to China and Russia. An excellent routine is to erase the devices when you travel somewhere at all. Why carry all the important things that can get stolen? Keep it at home and take only the necessary - that is not only for security but a common sense too.

But you can get too paranoid. When the ( Read more... )

What is «security»? Well, not in broad sense, that is, but in software security? What does it mean: to develop secure software? What do we understand to fall into the realm of software security?

I tell you what I mean when I say «software security». For me, the software security means to bring the intent of the original designer to the customer.

( Read more... )