Data Safety and Information Security

What is decentralized identity and why is it important? My attempt at a simple explanation.

An unknown threat actor with equally unknown motives forces ISP to replace routers.

Neatnik Notes

ALSO: online adoption cyberstalker nabbed; Tesla trade secrets thief pleads guilty; and a critical ASUS Wi-Fi vuln

Corporate scraping of personal websites has exceeded the Ripley Threshold.

Here’s how I’m blocking “artificial intelligence” bots, crawlers, and scrapers.

What's going on Internet? This is my homepage. I write about the web and stuff.

Two years ago, something very strange happened to me while working from my home network. I was exploiting a blind XXE vulnerability that required an external HTTP server to smuggle out files, so I spun up an AWS box and ran a simple Python webserver to receive the traffic from the vulnerable server.

Learn how to automatically upgrade existing, password-based accounts to use passkeys. We'll share why and how to improve account security...

Semantics, semantic security, security.

Fraud detection involves finding patterns in data. In this blog post we will build an AI/ML model for fraud detection

Here we go through some of the essential protocols required for robust API security.

Head’s up: This is a blog post about applied cryptography, with a focus on web and cloud applications that encrypt data at rest in a database or filesystem. While the lessons can be broadly a…

In session after session, attendees at EIC are hearing the message that decentralized identity is the answer to their identity problems.

David A. Wheeler's Page on Countering 'Trusting Trust' through Diverse Double-Compiling (DDC) - Countering Trojan Horse attacks on Compilers

When I started this blog over a decade ago, my understanding of postmodernism arose from my college studies of art history and aesthetics. Like Camille Paglia, I was not a fan of the movement or th…

The U.S. Department of the Treasury today unveiled sanctions against three Chinese nationals for allegedly operating 911 S5, an online anonymity service that for many years was the easiest and cheapest way to route one's Web traffic through malware-infected computers…

Law enforcement agencies in the United States and Europe today announced Operation Endgame, a coordinated action against some of the most popular cybercrime platforms for delivering ransomware and data-stealing malware. Dubbed "the largest ever operation against botnets," the international effort…

The U.S. Department of Justice (DOJ) today said they arrested the alleged operator of 911 S5, a ten-year-old online anonymity service that was powered by what the director of the FBI called "likely the world's largest botnet ever." The arrest…

Plus: A whistleblower claims the Biden administration falsified a report on Gaza, “Operation Endgame” disrupts the botnet ecosystem, and more.

musings on tech, politics, music, and more

Unlock the Power of Zero Knowledge Proofs with our Comprehensive Guide. Learn How to Implement and Utilize this Cutting-Edge Technology Today

Learn about Zero Knowledge claims and how they can help in securing your Identity.

Zero-knowledge proofs are probabilistic assessments that take efficiency of portable digital identity solutions to the next level.

We discuss the impact of API gateways on API management and security, helping you to make the right choices in your integration journey.

Zero-knowledge proofs (ZKPs) have emerged as a pivotal cryptographic innovation representing a paradigm shift replacing the need to trust with the ability to verify. This comprehensive exploration will shed light on how ZKPs are reshaping privacy and security paradigms across various sectors. By the end of this article, policymakers will have gained a nuanced understanding of ZKPs' potential to improve security while maintaining privacy across a wide range of use cases and why they are indispensable in today’s digital ecosystem.

In the digital age, confirming our age has become a routine part of our online interactions. Whether it’s accessing social media platforms…

On June 13, 2023, the Ethics and Public Policy Center and the Institute for Family Studies released a new legislative...

Introduction