Collaborate Disseminate
Here is a phishing email I received today. These almost always land in my junk mail (hooray!). This particular one encourages me to click on a Microsoft Word file claiming to contain an invoice I should pay. I also received a couple with “.xps… Continue reading Invoice Phishing Campaign
Here is a phishing email I received today. These almost always land in my junk mail (hooray!). This particular one encourages me to click on a Microsoft Word file claiming to contain an invoice I should pay. I also received a couple with “.xps… Continue reading Invoice Phishing Campaign
While researching my next edition of Elementary Information Security I came a this posting from last January. It comes from the “netmux” web site and describes a $5,000 design for a password hash cracker. It also links to other state o… Continue reading State of the Art Password Cracking
In June, 1999, Senator John McCain had started his presidential bid and was visiting companies in Silicon Valley, including Secure Computing Corporation, where I worked. He was there to discuss government policies on several tech topics, including the … Continue reading Sen. John McCain, 1936-2018
I received an impressive email scam recently. My response was to forward it to the email provider’s abuse contact (abuse@outlook.com) and file a complaint with the Internet Crime Complaint Center (ic3.gov). I’ll include the whole email late… Continue reading Interesting Email Scam I Recieved
I’ve signed on to do a Coursera course on cloud security. I’ll share more details as production progresses. This post contains a few notes on organizing video clips for a large project. The video almost always consists of two synchron… Continue reading Organizing Video Clips for an Online Course
There is no way to verify an email’s contents except through cryptography. Until every email client includes encryption and reliable authentication, we should always doubt an email’s source. We can increase our confidence in an email a litt… Continue reading How to Trace an Email Message
I receive thousands of emails every month. I do a lot of (for me) critical activities online. I never receive legitimate emails demanding a suspicious online action any more. Except from HR departments. IT security people know this is a problem. T… Continue reading HR and Phishing
My textbook talks about attacks on computers and computer networks using specific categories. A successful attack goes through many phases. These categories focus on an attack’s lasting impact: how does it affect the target’s assets an… Continue reading The Six Types of Cyberattacks
Quantum computing gives us a way in theory to quickly crack certain types of cryptography. Well-funded startups are working on prototype quantum circuits, as are big guns like Intel, Microsoft, and IBM. Success could render a lot of today’s encry… Continue reading Quantum Skepticism