Conclusion: The second invoice is in preparation. (A few portions of this text were drafted and structured with the assistance of Anthropic Claude Fable 5; the ideas, arguments, and final editorial ...

While cybersecurity work is dedicated to protecting people and organizations, it may at times negatively impact them. Poorly implemented protection mechanisms may expose the clients to loss of private ...

I do intend to keep this data up-to-date if people find it interesting, so let me know if you’d like me to do so, or if you’d like to see other types of analysis.

CERIAS is pleased to announce the launch of a new initiative to increase the security of K-12 information systems nationwide. We've developed a comprehensive set of self-paced multimedia training ...

I have continued to update my earlier post about women in cybersecurity. Recent additions include links to some scholarship opportunities offered by ACSA and the (ISC) 2 Foundation. Both scholarship ...

There are several news stories now appearing (e.g., Security News) about a serious flaw in how certificates used in online authentication are validated. Ed Felten gives a nice summary of how this ...

change curl file_support test to recommend upgrading to newest version of PHP rather than disabling support in cURL for ‘file://’ protocol removed =& calls that force pass by reference in PHP4, so as ...

[Update 7/17: Video of the Senator's opening remarks and the panel session (2 parts) are now online at this site. I have also added a few links.] This story (somewhat long) is about Senator Barack ...

Another set of news items, and another set of “nyah nyah” emails to me. This time, the press has been covering a memo out of the OMB directing all Federal agencies to adopt a mandatory baseline ...

Quantum computing poses an imminent threat to classical public-key cryptography, enabling Harvest Now, Decrypt Later (HNDL) attacks in which adversaries store encrypted traffic today to decrypt once ...

The conference is surprisingly huge (6000 people). Virtualization is obviously important to IT now. I am looking forward to the security-related talks (I'll post about them later). Here are a few ...