security

The Death of Trust

The tl;dr: Assume that anything you do online is being recorded by the government. I had a conversation this past week with one of my students who was interested in some of the operational aspects of anonymity; he wanted to know to what extent either Tor or a VPN or both would protect his identity […]

I still think WhatsApp has a security problem

Last week The Guardian ran a story that claimed a backdoor was embedded in Facebook’s WhatsApp messaging service. Bloggers went nuts as we do when it looks like there’s some nefarious code lurking in a popular application, and of course Facebook is a favorite target of everybody. I tweeted my disdain for WhatsApp moments after reading […]

What I’m Using for Privacy: Cloud

This post is part of a series on technologies that I’m currently using for privacy, and my reasons for them. You can see the entire list in the first post.  tl;dr: I don’t trust anyone with my data except myself, and neither should you. If you aren’t paying for it, you are the product I think […]

Rethinking PGP encryption

Filippo Valsorda wrote an article recently on ArsTechnica titled I’m Throwing in the Towel on PGP, and I Work in Security that really made me think. Filippo is the real deal when it comes to PGP; few have his bona fides in the security arena, and when he talks, people should listen. The basic message of […]