Errata Security

Someone on Twitter asked for a blogpost on how I'd fix the CFAA, the anti-hacking law. So here is my proposal. The major problem with ...

A typical hacker, according to @Viss President Obama has upped his war on hackers by declaring a " state of emergency ". This ...

I extracted the certificate from the SuperFish adware and cracked the password (" komodia ") that encrypted it. I discuss how dow...

Ha ha. New York Times accidentally posted their employee database to their website: SSN, passwords, and salaries: https://t.co/1dLdUXG2tT ...

Do you stand for principle -- even when it's against your interests? Would you defend the free-speed rights of Nazis, for example? The ...

In order to measure the danger of the bash shellshock vulnerability, I scanned the Internet for it. Many are debating whether this violates ...

Hacker Andrew "weev" Auernheimer, who was unjustly persecuted by the US government and recently freed after a year in jail when th...

Some observations from today’s appeal hearing of Weev  (the notorious case of someone convicted of accessing public info). What was it? ...

Yet again we have an example how the judicial system treats hacking like witchcraft. Lawyers submitting briefs to the court are required to ...

Many of us believe that the conviction of Andrew "weev" Auernheimer proves that the system is corrupt, that the law can be arbitra...

In what's become a disturbing refrain of late, the crazy conspiracy theories of Internet activists have turned out to be right. The case...

A dream team of computer+law geeks have put together an appelant brief in Weev's defense . A major feature is that simply "unwanted...

GoGo Inflight is running a promotion right now giving you free Internet access on airplanes from your Blackberry phone/pad. Even if you ...

The waitress at the bar is telling me she went to jail two years ago for a DUI, on her scooter, even though she passed all the sobriety test...

In the debate over “selling exploits” people haven’t defined what, precisely, an “exploit” is. The only definition is that they “know it whe...

After the #Shmoocon  cybersec conference, a bunch of us were hanging out in the bar playing “ Cards Against Humanity ”. The rules are just l...

I hereby give you complete authorization to access over a network (but not physically) any computer I own. Nothing you do is unauthorized or...

Are you reading this blog? If so, you are committing a crime under 18 USC 1030(a) (better known as the “ Computer Fraud & ...