Why zero trust “hype” gets under my skin

Peter Neumann once famously said,”If you think cryptography will solve your problem, then you don’t understand cryptography and you don’t understand your problem.”  I guess his exact construction was maybe a little different (in at least one...

Who exactly is regulating cryptocurrency anyway?

In an interesting turn of events, I read this morning that the North Dakota Securities Commissioner has decided to intervene in a few different ICO’s.  The first thing I thought on reading it was thanks to “l33tdawg” over at Hack in the Box for...

Hey you: stop breaking TLS sessions

I came across this article today about how people continue to break TLS sessions for monitoring purposes.  Like, in exactly the way that US-CERT warned everybody not to do last year. As background, there are essentially two ways in common usage to do monitoring from a...

Ranting about cybersecurity month (and sausages)

What do sausage and cybersecurity have in common?  The answer apparently is “October.”  October is cybersecurity awareness month; it’s also national sausage month. One would assume that’s coincidence, but who knows what dark forces (with...