Security

• Ios Clients Not Vulnerable To Heartbleed What Does The Source Say

  17 Apr 2014 • 2 min read • security apple ios mobile post

  Apple’s language in their assertion that they are not vulnerable to heartbleed on iOS are troubling as they specifically say (via ReCode), “IOS and OS X never incorporated the vulnerable …

• Using VNC to securely connect to OSX without exposing an unlocked console

  13 Apr 2014 • 3 min read • security apple post

  I couldn’t believe how supremely difficult it is to securely use VNC to access an OSX mac remotely. Turns out that by default, using a standard VNC client (as opposed to an Apple Remote Desktop …

• I Get An Irs Scam Voice Mail

  13 Apr 2014 • 2 min read • scam security post

  Had to share this hilarious voice-mail I received from an IRS scammer (happened to come in with Unknown caller ID – I read online that others had been spoofing US phone numbers for caller ID in …

• Information Warfare Via Url Shorteners

  18 Sep 2013 • 4 min read • security post

  As I’ve used Twitter more, I’ve noticed how many of the shared URLs are shortened. And to think that the Library of Congress is archiving all US tweets, how many will actually be usable at …

• Seattle Infosec calendar

  11 Jul 2013 • 1 min read • security post

  I searched and didn’t find a Seattle-specific Information Security calendar showing not only conferences, but smaller security events. So I created a new public one. And I guess that means now …

• What can we learn from the ZRTPCPP / Silent Circle debacle?

  2 Jul 2013 • 6 min read • security post

  07:00 As a way of background, Phil Zimmerman’s company Silent Circle became wildly successful recently after Snowden’s disclosures of extensive NSA data collection of telephony …

• SONY compromised?

  26 Nov 2007 • 1 min read • technology security spam post

  I noticed that one of the throw-away email addresses I registered years ago for sony style product registration and accessories is now receiving spam. Was sony compromised or did they have an insider …

• Seattle City Light Billing Scam Warning

  14 May 2007 • 2 min read • security post

  This kind of thing was going on long before “phishing” was coined. It’s the same thing in a different technology medium. FOR IMMEDIATE RELEASE CONTACT: Scott Thomsen April 25, 2007 …

• Craigslist Hoax Lures People To Destroy Woman'S House

  10 Apr 2007 • 1 min read • security post

  Boing Boing: Craigslist hoax ad leads to destroyed home This happened in Washington. I couldn’t believe it when I heard about it and now it’s made it to Boing Boing. Scary.

• Notable Security Quote Does Your Company Suffer From Employee Infallability Syndrome

  10 Mar 2007 • 1 min read • security quote post

  I will say that any government (or other) program which assumes the honesty of employees and contractors is fundamentally flawed, and any associated risk analysis is either incompetent, or in failing …