Errata Security

This is the one year anniversary of NotPetya. It was probably the most expensive single hacker attack in history (so far), with FedEx estima...

My Internet-scale port scanner, masscan , supports "banner checking", grabbing basic information from a service after it connects ...

Former president Bill Clinton has contributed to a cyberthriller "The President is Missing", the plot of which is that the preside...

First Lady Melania Trump announced a guide to help children go online  safely. It has problems. Melania's guide is full of outdated, i...

Classic Bond villain, Elon Musk, has a new plan to create a website dedicated to measuring the credibility and adherence to "core truth...

I'm in danger of contradicting myself, after previously pointing out that x86 machine code is a high-level language , but this article c...

One of the more useful features of masscan  is the " --banners " check, which connects to the TCP port, sends some request, and ge...

I've been busy trying to replicate the "eFail" PGP/SMIME bug. I thought I'd write up some notes. PGP and S/MIME encrypt ...

Spencer Ackerman has this interesting story about a guy assigned to crack down on unauthorized White House leaks . It's necessarily ligh...

According to this Wired article, Ray Ozzie may have a solution to the crypto backdoor problem. No, he hasn't. He's only solving the...

This article, pointed out by @TheGrugq, is stupid enough that it's worth rebutting. “The views and opinions expressed are those of t...

I want to sniff the packets for IoT devices. There are a number of ways of doing this, but one straightforward mechanism is configuring a &q...

April 16, 2018 Office of the Governor 206 Washington Street 111 State Capitol Atlanta, Georgia 30334 Re: SB 315 Dear Governor Deal...

Picture from EFF -- CC-BY license Near the top of most security recommendations is to use "strong passwords". We need to stop ...

Crypto-backdoors for law enforcement is a reasonable position, but the side that argues for it adds things that are either outright lies or ...

In the news, Boeing (an aircraft maker) has been "targeted by a WannaCry virus attack". Phrased this way, it's implausible. Th...

John Oliver covered bitcoin/cryptocurrencies last night. I thought I'd describe a bunch of things he gets wrong.

I thought I'd write up some notes on the memcached  DDoS. Specifically, I describe how many I found scanning the Internet with masscan ,...

On Twitter, somebody asked this question: @ErrataRob comments? — E. Harding🇸🇾, друг народа (anti-Russia=block) (@Enopoletus) March 1,...

Former FBI agent Asha Rangappa  @AshaRangappa_ has a smart post debunking the Nunes Memo , then takes it all back again with an op-ed on th...