Collaborate Disseminate
Occasionally (in cryptography and elsewhere), the need arises to represent arbitrary binary data (such as hashes or private keys) in a way that humans can process/memorize more easily than for example hexdumps.
I am aware of three such sc… Continue reading What standardized schemes exist for representing binary data in a human-readable manner?
In the last months I very often was in a position where I needed to send an email attachments with sensitive content to someone whom I didn’t know well personally (so that I could talk to them how set up encryption), but about whom I knew … Continue reading Secure way of sending an email attachment in a user-friendly manner
SIM hijacking — or SIM swapping — is an attack where a fraudster contacts your cell phone provider and convinces them to switch your account to a phone that they control. Since your smartphone often serves as a security measure or backup verification… Continue reading SIM Hijacking
SIM hijacking — or SIM swapping — is an attack where a fraudster contacts your cell phone provider and convinces them to switch your account to a phone that they control. Since your smartphone often serves as a security measure or backup verification system, this allows the fraudster to take over other accounts of yours. Sometimes this involves people inside… Continue reading SIM Hijacking
If you have multiple products/sites under a common domain, what are the advantages and disadvantages, from user convenience to security, of having a common login page? For example, this site uses https://security.stackexchange.com/users/lo… Continue reading What are the tradeoffs between a common login site and login-per-site?
Signal, the encrypted messaging platform, is planning to launch an upgraded secure group messaging and communities function. Signal’s groups are private, meaning that the service itself doesn’t keep a record of a user’s group membersh… Continue reading Signal Tests Upgraded Cryptography for Groups Function
What if your device gets locked down for a long while because you cannot remember the password? Well, that used to be a rare case.. because people used to use their device’s passwords to access them frequently and the chances… Continue reading The usability drawback of using biometrics for device authentication but not for device decryption after reboot?
Using NAC, organizations no longer have to choose between security or usability on their networks It’s easy to assume that making something more secure automatically makes it more difficult to use. After all, if you add a lock to a door, that’s one mo… Continue reading NAC: Usability and Security for Users
I was online chatting at a web site to repair my lawn tractor. Once I finished, I said, “So you’re a chatbot. Cool.” I’m sure I was talking to a chatbot program and not a human. The reply was a brief but emphatic “No!̶… Continue reading Ethics and Chatbots
Really interesting first-hand experience from Maciej Cegłowski…. Continue reading Lessons Learned Trying to Secure Congressional Campaigns