Collected Postings

Risk, Fraud, Exploits, Threats, Vulnerabilities

aadsmail.htm#variations variations on your account-authority model (small clarification)

aadsmail.htm#complex AADS/CADS complexity issue

aadsmail.htm#parsim parsimonious

aadsmail.htm#fraud Human Nature ... a little cross-posting

aadsmail.htm#mfraud AADS, X9.59, security, flaws, privacy

aadsmail.htm#liability AADS & X9.59 performance and algorithm key sizes

aadsmail.htm#vbank Statistical Attack Against Virtual Banks (fwd)

aadsm2.htm#risk another characteristic of online validation

aadsm2.htm#integrity Scale (and the SRV record)

aadsm2.htm#account A different architecture? (was Re: certificate path

aadsm2.htm#privacy Identification and Privacy are not Antinomies

aadsm2.htm#stall EU digital signature initiative stalled

aadsm2.htm#straw AADS Strawman

aadsm2.htm#strawm3 AADS Strawman

aadsm2.htm#keylength On leaving the 56-bit key length limitation

aadsm3.htm#cstech3 cardtech/securetech & CA PKI

aadsm3.htm#cstech4 cardtech/securetech & CA PKI

aadsm3.htm#cstech5 cardtech/securetech & CA PKI

aadsm3.htm#cstech6 cardtech/securetech & CA PKI

aadsm3.htm#cstech7 cardtech/securetech & CA PKI

aadsm3.htm#cstech8 cardtech/securetech & CA PKI

aadsm3.htm#cstech9 cardtech/securetech & CA PKI

aadsm3.htm#cstech10 cardtech/securetech & CA PKI

aadsm3.htm#cstech12 cardtech/securetech & CA PKI

aadsm3.htm#cstech13 cardtech/securetech & CA PKI

aadsm3.htm#kiss2 Common misconceptions, was Re: KISS for PKIX. (Was: RE: ASN.1 vs XML (used to be RE: I-D ACTION :draft-ietf-pkix-scvp-00.txt))

aadsm3.htm#kiss8 KISS for PKIX

aadsm3.htm#kiss9 KISS for PKIX .... password/digital signature

aadsm4.htm#2 Public Key Infrastructure: An Artifact

aadsm4.htm#4 Public Key Infrastructure: An Artifact

aadsm4.htm#9 Thin PKI won - You lost

aadsm5.htm#epaym "e-payments" email discussion list is now "Internet-payments"

aadsm5.htm#shock revised Shocking Truth about Digital Signatures

aadsm5.htm#shock2 revised Shocking Truth about Digital Signatures

aadsm5.htm#encryp Encryption article

aadsm5.htm#liex509 Lie in X.BlaBla

aadsm5.htm#pkimort PKI: Evolve or Die

aadsm5.htm#pkimort2 problem with the death of X.509 PKI

ansiepay.htm#privacy more on privacy

ansiepay.htm#x959pkni Ellison/Schneier article on Risks of PKI ... fyi

ansiepay.htm#cardsteal Stealing cards easy as Web browsing

ansiepay.htm#breach Security breach raises questions about Internet shopping

ansiepay.htm#theory Security breach raises questions about Internet shopping

ansiepay.htm#scaads X9.59 related press release at smartcard forum

ansiepay.htm#ifraud Internet Fraud

aepay2.htm#fed Federal CP model and financial transactions

aepay2.htm#cadis disaster recovery cross-posting

aepay2.htm#aadsx959 Account Authority Digital Signatures ... in support of x9.59

aepay2.htm#aadspriv Account Authority Digital Signatures ... in support of x9.59

aepay3.htm#riskm The Thread Between Risk Management and Information Security

aepay3.htm#aadsrel1 AADS related information

aepay3.htm#aadsrel1 AADS related information

aepay3.htm#aadsrel1 AADS related information

aepay3.htm#aadsrel1 AADS related information

aepay3.htm#aadsrel1 AADS related information

aepay3.htm#x959risk1 Risk Management in AA / draft X9.59

aepay3.htm#x959risk2 Risk Management in AA / draft X9.59

aepay3.htm#x959risk3 Risk Management in AA / draft X9.59

aepay3.htm#x959risk4 Risk Management in AA / draft X9.59

aepay3.htm#smrtcrd Smart Cards with Chips encouraged ... fyi

aepay4.htm#privis privacy issues

aepay4.htm#dnsinteg1 Domain Name integrity problem

aepay4.htm#visaset2 Visa Delicately Gives Hook to SET Standard

aepay5.htm#pkiillfit Some PKI references from yesterday's SlashDot

aepay5.htm#crackegg hackers crack egghead.com

aepay6.htm#fraud Online Card Fraud Thirty Times That Offline

aepay6.htm#x959b X9.59 Electronic Payment standard issue

aepay6.htm#docstore ANSI X9 Electronic Standards "store"

aepay6.htm#vouc implementations of "XML Voucher: Generic Voucher Language"?

aepay6.htm#harvest harvesting of credit card numbers

aepay6.htm#erictalk Announce: Eric Hughes giving Stanford EE380 talk this

aepay6.htm#ccfraud latest credit scam puts plastic in peril ... is your credit card being cloned?

98.html#41 AADS, X9.59, & privacy

99.html#85 Perfect Code

99.html#136 checks (was S/390 on PowerPC?)

99.html#156 checks (was S/390 on PowerPC?)

99.html#163 IBM Assembler 101

99.html#167 checks (was S/390 on PowerPC?)

99.html#168 checks (was S/390 on PowerPC?)

99.html#170 checks (was S/390 on PowerPC?)

99.html#171 checks (was S/390 on PowerPC?)

99.html#172 checks (was S/390 on PowerPC?)

99.html#189 Internet Credit Card Security

99.html#228 Attacks on a PKI

99.html#235 Attacks on a PKI

99.html#238 Attacks on a PKI

99.html#240 Attacks on a PKI

2000.html#25 Computer of the century

2000.html#28 Homework: Negative side of MVS?

2000.html#32 Homework: Negative side of MVS?

2000.html#36 "Trusted" CA - Oxymoron?

2000.html#42 "Trusted" CA - Oxymoron?

2000.html#46 question about PKI

2000.html#57 RealNames hacked. Firewall issues

2000.html#60 RealNames hacked. Firewall issues

2000b.html#17 ooh, a real flamewar :)

2000b.html#22 ooh, a real flamewar :)

2000c.html#40 Domainatrix - the final word

2000e.html#44 Why trust root CAs?

2000e.html#45 IBM's Workplace OS (Was: .. Pink)

2000f.html#1 Why trust root CAs?

2000f.html#4 Why trust root CAs?

2000f.html#14 Why trust root CAs?

2000f.html#22 Why trust root CAs?

2000f.html#50 Al Gore and the Internet (Part 2 of 2)

2000f.html#64 Cryptogram Newsletter is off the wall?

2000f.html#69 TSS ancient history, was X86 ultimate CISC? designs)

2000f.html#72 SET; was Re: Why trust root CAs?

2000g.html#33 does CA need the proof of acceptance of key binding?

2000g.html#35 does CA need the proof of acceptance of key binding?

2000g.html#41 Egghead cracked, MS IIS again

2001b.html#58 Checkpoint better than PIX or vice versa???

2001c.html#15 OS/360 (was LINUS for S/390)

2001c.html#30 PKI and Non-repudiation practicalities

2001c.html#32 How Commercial-Off-The-Shelf Systems make society vulnerable

2001c.html#38 How Commercial-Off-The-Shelf Systems make society vulnerable

2001c.html#41 PKI and Non-repudiation practicalities

2001c.html#42 PKI and Non-repudiation practicalities

2001c.html#44 PKI and Non-repudiation practicalities

2001c.html#45 PKI and Non-repudiation practicalities

2001c.html#46 PKI and Non-repudiation practicalities

2001c.html#47 PKI and Non-repudiation practicalities

2001c.html#50 PKI and Non-repudiation practicalities

2001c.html#51 PKI and Non-repudiation practicalities

2001c.html#54 PKI and Non-repudiation practicalities

2001c.html#58 PKI and Non-repudiation practicalities

2001c.html#59 PKI and Non-repudiation practicalities

2001c.html#61 Risk management vs security policy

2001c.html#73 PKI and Non-repudiation practicalities

2001d.html#1 SSL question

2001d.html#19 [Newbie] Authentication vs. Authorisation?

2001d.html#41 solicit advice on purchase of digital certificate

2001d.html#56 Pentium 4 Prefetch engine?

2001d.html#58 Very CISC Instuctions (Was: why the machine word size ...)

2001d.html#62 OT Re: A beautiful morning in AFM

2001e.html#37 Can I create my own SSL key?

2001e.html#39 Can I create my own SSL key?

2001e.html#48 Where are IBM z390 SPECint2000 results?

2001e.html#77 Apology to Cloakware (open letter)

2001e.html#82 The Mind of War: John Boyd and American Security

2001f.html#15 Medical data confidentiality on network comms

2001f.html#24 Question about credit card number

2001f.html#25 Question about credit card number

2001f.html#31 Remove the name from credit cards!

2001f.html#33 IBM's "VM for the PC" c.1984??

2001f.html#35 Security Concerns in the Financial Services Industry

2001f.html#40 Remove the name from credit cards!

aepay6.htm#ccfraud2 "out of control credit card fraud"

aepay6.htm#ccfraud3 "out of control credit card fraud"

2001g.html#38 distributed authentication

aepay7.htm#fakeid Fake IDs swamp police

2001g.html#62 PKI/Digital signature doesn't work

2001g.html#63 PKI/Digital signature doesn't work

2001h.html#7 PKI/Digital signature doesn't work

aepay7.htm#netbank net banking, is it safe?? ... power to the consumer

aepay7.htm#netbank2 net banking, is it safe?? ... security proportional to risk

aadsm6.htm#websecure merchant web server security

2001h.html#64 Net banking, is it safe???

2001h.html#67 Would this type of credit card help online shopper to feel more secure?

2001h.html#68 Net banking, is it safe???

2001h.html#70 Net banking, is it safe???

2001i.html#16 Net banking, is it safe???

2001i.html#25 Net banking, is it safe???

2001i.html#26 No Trusted Viewer possible?

2001i.html#55 Computer security: The Future

2001i.html#56 E-commerce security????

2001i.html#57 E-commerce security????

2001j.html#0 E-commerce security????

2001j.html#2 E-commerce security????

2001j.html#5 E-commerce security????

2001j.html#9 E-commerce security????

aepay7.htm#netsecure some recent threads on netbanking & e-commerce security

2001j.html#43 Disaster Stories Needed

2001j.html#44 Does "Strong Security" Mean Anything?

2001j.html#52 Are client certificates really secure?

2001j.html#54 Does "Strong Security" Mean Anything?

2001k.html#0 Are client certificates really secure?

2001k.html#1 Are client certificates really secure?

aadsm6.htm#terror Did Encryption Empower These Terrorists?

aadsm6.htm#terror3 Did Encryption Empower These Terrorists?

aadsm6.htm#terror4 Did Encryption Empower These Terrorists?

aadsm6.htm#terror5 Did Encryption Empower These Terrorists?

aadsm6.htm#terror6 Did Encryption Empower These Terrorists?

aadsm6.htm#terror7 Did Encryption Empower These Terrorists?

aadsm6.htm#terror8 Did Encryption Empower These Terrorists?

aadsm6.htm#terror9 Did Encryption Empower These Terrorists?

aadsm6.htm#terror10 Did Encryption Empower These Terrorists?

aadsm6.htm#terror13 Did Encryption Empower These Terrorists?

aadsm6.htm#terror14 Did Encryption Empower These Terrorists?

2001k.html#43 Why is UNIX semi-immune to viral infection?

aepay7.htm#idtheft Another Thing to Feer: ID Theft

2001k.html#53 Why is UNIX semi-immune to viral infection?

2001k.html#55 I-net banking security

2001k.html#58 I-net banking security

aadsm7.htm#auth Who or what to authenticate?

2001l.html#10 E-commerce security????

aepay7.htm#idtheft2 Reports of Identity Theft Still Rising Fast

2001l.html#49 Virus propagation risks

aepay7.htm#3dsecure 3D Secure Vulnerabilities? Photo ID's and Payment Infrastructure

aepay7.htm#3dsecure2 3D Secure Vulnerabilities? Photo ID's and Payment Infrastructure

aepay7.htm#edsecure4 3D Secure Vulnerabilities? Photo ID's and Payment Infrastructure

aadsm7.htm#rubberhose Rubber hose attack

aadsm7.htm#rhose3 when a fraud is a sale, Re: Rubber hose attack

aadsm7.htm#3dsecure 3D Secure Vulnerabilities?

aadsm8.htm#rhose17 when a fraud is a sale, Re: Rubber hose attack]

aadsm8.htm#3dvulner 3D Secure Vulnerabilities?

aadsm8.htm#3dvulner2 3D Secure Vulnerabilities?

aadsm8.htm#3dvulner3 3D Secure Vulnerabilities?

2001m.html#27 Internet like city w/o traffic rules, traffic signs, traffic lights and traffic enforcement

aadsm9.htm#carnivore Shades of FV's Nathaniel Borenstein: Carnivore's "Magic Lantern"

aepay8.htm#ccfraud Almost Half UK E-Shopper's Fear Card Fraud (CC fraud increased by 50% in 2k)

aepay8.htm#ccfraud2 Statistics for General and Online Card Fraud

aepay8.htm#visapass VISA: All Your Password Are Belong to Us

aepay8.htm#x959paper Credit Card Fraud and E-Commerce: A Case Study

aepay8.htm#vulner ccount number & shared-secret vulnerabilities

2001n.html#30 FreeBSD more secure than Linux

2001n.html#90 Buffer overflow

2001n.html#91 Buffer overflow

2001n.html#93 Buffer overflow

aadsm10.htm#cfppki13 CFP: PKI research workshop

aadsm10.htm#cfppki14 CFP: PKI research workshop

aadsm10.htm#cfppki15 CFP: PKI research workshop

aadsm10.htm#smallpay2 Small/Secure Payment Business Models

aadsm10.htm#cfppki18 CFP: PKI research workshop

2002.html#19 Buffer overflow

2002.html#20 Younger recruits versus experienced veterans ( was Re: The demise of compaq

2002.html#23 Buffer overflow

2002.html#24 Buffer overflow

2002.html#25 ICMP Time Exceeded

2002.html#32 Buffer overflow

aadsm10.htm#hackhome Hackers Targeting Home Computers

2002.html#44 Calculating a Gigalapse

aadsm10.htm#risks credit card & gift card fraud (from today's comp.risks)

aepay9.htm#risks credit card & gift card fraud (from today's comp.risks)

aepay9.htm#skim High-tech Thieves Snatch Data From ATMs (including PINs)

aepay10.htm#4 Credit Card Scam

aadsm10.htm#tamper Limitations of limitations on RE/tampering (was: Re: biometrics)

aadsm10.htm#biometrics biometrics

2002c.html#7 Opinion on smartcard security requested

2002c.html#10 Opinion on smartcard security requested

2002c.html#15 Opinion on smartcard security requested

2002c.html#22 Opinion on smartcard security requested

2002c.html#23 Opinion on smartcard security requested

aepay10.htm#16 Worker Accused of Selling Colleagues' ID's Online (credit card scam)

2002d.html#8 Security Proportional to Risk (was: IBM Mainframe at home)

2002d.html#11 Security Proportional to Risk (was: IBM Mainframe at home)

2002e.html#58 O'Reilly C Book

2002f.html#10 Least folklorish period in computing (was Re: IBM Mainframe at home)

aadsm11.htm#44 Web site exposes credit card fraud

aadsm11.htm#45 Web site exposes credit card fraud

2002i.html#62 subjective Q. - what's the most secure OS?

2002i.html#72 A Lesson In Security

2002j.html#14 Symmetric-Key Credit Card Protocol on Web Site

2002j.html#38 MITM solved by AES/CFB - am I missing something?!

aadsm12.htm#11 Some security, fraud, attack, threat, references

aadsm12.htm#12 TOC for world bank e-security paper

2002j.html#60 How to map a user account to a digital cert?

2002j.html#53 SSL integrity guarantees in abscense of client certificates

aepay10.html#41 ATM Scams - Whose Liability Is It, Anyway?

aepay10.html#44 Credit Card Skimming Rising In The US

2002l.html#20 Backdoor in AES ?

aepay10.htm#45 Credit card theft feared in Windows flaw

2002l.html#45 Thirty Years Later: Lessons from the Multics Security Evaluation

aadsm12.htm#31 The Bank-model Was: Employee Certificates - Security Issues

aadsm12.htm#35 Electronic Security: Risk Mitigation in Financial Transactions

aadsm12.htm#36 two other financial electronic security related URLs

aadsm12.htm#40 In Brief: Anti-'Skimming' Guidelines Coming

aadsm12.htm#46 Fraudit helps registrars battle global online fraud

aadsm12.htm#47 Online Fraud Growing in Scale, Sophistication

2002p.html#9 Cirtificate Authorities 'CAs', how curruptable are they to

aepay10.htm#64 eBay Customers Targetted by Credit Card Scam

aadsm12.htm#57 eBay Customers Targetted by Credit Card Scam

aadsm12.htm#58 Time to ID Identity-Theft Solutions

aepay10.htm#65 eBay Customers Targetted by Credit Card Scam

aepay10.htm#91 SSL certs & baby steps

aepay10.htm#91 SSL certs & baby steps (addenda)

aepay10.htm#91 SSL certs & baby steps

aepay11.htm#3 Ministers to Act on Rise in Identity Theft

aepay11.htm#7 FTC says incidence of ID theft jumped in 2002

aepay11.htm#8 Internet Consumer Fraud Continues to Rise

aepay11.htm#9 Bank of America ATMs Disrupted by Virus

aepay11.htm#12 Star study: Identity Theft In The United States: An Update

aepay11.htm#17 Criminals using high-tech methods for old-style crimes

aepay11.htm#18 Hacker accesses 2.2 million credit cards

aepay11.htm#22 FBI Probing Theft of 8 Million Credit Card Numbers

aepay11.htm#32 Don't-Ask-Don't-Tell E-commerce

aepay11.htm#33 Spam's Being Used For Identity Theft And Blackmail, Symantec Says

aadsm14.htm#2 Who's afraid of Mallory Wolf? (addenda)

aadsm14.htm#3 Armoring websites

aadsm14.htm#5 Who's afraid of Mallory Wolf?

aepay11.htm#40 ID theft costs banks $1 billion a year

2003e.html#78 Microsoft strikes again - from comp.risks

aepay11.htm#41 Be Prepared: Gartner Outlines Top Security Risks

2003g.html#16 Can someone clarify, X509 spoofing?

2003g.html#17 Can someone clarify, X509 spoofing?

aepay11.htm#47 Actual Losses To Identity Fraud Top $1 Billion

aadsm14.htm#9 "Marginot Web" (SSL, payments, etc)

aadsm14.htm#12 Tackling security threats from within

2003h.html#24 HELP, Vulnerability in Debit PIN Encryption security, possibly

2003h.html#25 HELP, Vulnerability in Debit PIN Encryption security, possibly

2003h.html#26 HELP, Vulnerability in Debit PIN Encryption security, possibly

aadsm14.htm#22 Identity Theft Losses Expected to Hit $2 Trillion by 2005

2003i.html#59 grey-haired assembler programmers (Ritchie's C)

2003j.html#4 A Dark Day

aadsm14.htm#32 An attack on paypal

aadsm14.htm#33 An attack on paypal

2003j.html#8 A Dark Day

aepay11.htm#57 US warns banks about virus

aadsm14.htm#34 virus attack on banks (was attack on paypal)

aadsm14.htm#35 The real problem that https has conspicuously failed to fix

2003j.html#15 A Dark Day

aadsm14.htm#39 An attack on paypal

2003j.html#17 pbx security from 20 years ago

aepay11.htm#63 E-merchants Turn Fraud-busters

aepay11.htm#64 EFTA to Adaopt ATM Ant-Fraud Measures

aepay11.htm#65 E-merchants Turn Fraud-busters (somewhat related)

aepay12.htm#6 Know Your Enemy Automated Credit Card Fraud (automated, forwarded)

aadsm14.htm#51 Feds, industry warn of spike in ID theft scams

aadsm14.htm#53 IT Managers Critical Front in War on Identity Theft

aadsm14.htm#57 Kinko's spy case: Risks of renting PC's

aepay12.htm#7 Bugwatch: Know your security onions

aepay12.htm#8 Know your security onions (or security proportional to risk)

aepay12.htm#11 Net Worm Heightens Security Concerns

aepay12.htm#12 Identity theft rockets 80 per cent

2003l.html#2 S/360 Engineering Changes

2003l.html#3 S/360 Engineering Changes

aepay12.htm#13 Hacker's compromise Navy purchase card

aepay12.htm#14 Technology and Crime, Criminal Intelligence Service Canada - 2003

aepay12.htm#19 Tech firms band together on ID theft

aepay12.htm#21 FTC Says ID Theft Greater Problem Than Originally Thought

aadms15.htm#5 Is cryptography where security took the wrong branch?

aepay12.htm#23 Police smash UK's biggest credit card fraud ring

aepay12.htm#24 More on the ID theft saga

aepay12.htm#26 Bank One Calls Attention to ID Theft

aepay12.htm#30 ID Theft Often Goes Unrecognized

2003m.html#51 public key vs passwd authentication?

2003n.html#0 public key vs passwd authentication?

2003n.html#1 public key vs passwd authentication?

2003n.html#2 public key vs passwd authentication?

2003n.html#3 public key vs passwd authentication?

2003n.html#10 Cracking SSL

aadsm15.htm#22 Trusting the Tools - was Re: Open Source

2003n.html#14 Poor people's OS?

aadsm15.htm#23 NCipher Takes Hardware Security To Network Level

aepay12.htm#32 Internet Fraud & Attacks on the rise

2003n.html#17 which CPU for educational purposes?

2003n.html#20 which CPU for educational purposes?

aadsm15.htm#29 SSL, client certs, and MITM (was WYTM?)

aepay12.htm#35 Citibank customers hit with e-mail scam

aadsm16.htm#0 Identity Fraud costs Austrilia AU$1 billion a year

2003o.html#3 Bank security question (newbie question)

2003o.html#4 Bank security question (newbie question)

2003o.html#5 perfomance vs. key size

2003o.html#6 perfomance vs. key size

2003o.html#8 Bank security question (newbie question)

2003o.html#9 Bank security question (newbie question)

aadsm16.htm#2 Electronic Safety and Soundness: Securing Finance in a New Age

2003o.html#19 More -Fake- Earthlink Inquiries

2003o.html#22 securID weakness

2003o.html#29 Biometric cards will not stop identity fraud

2003o.html#35 Humans

2003o.html#37 Security of Oyster Cards

aadsm16.htm#6 ATM Fraud, Banking Your Money

2003o.html#50 Pub/priv key security

aadsm16.htm#7 The Digital Insider: Backdoor Trojans ... fyi

2003p.html#6 Does OTP need authentication?

2004.html#30 Threat of running a web server?

2004b.html#50 The SOB that helped IT jobs move to India is dead!

aadsm17.htm#10 fraud and phishing attacks soar

aadsm17.htm#11 are debit cards safe?

aadsm17.htm#13 A combined EMV and ID card

aadsm17.htm#22 secret hackers to aid war on internet fraud

aadsm17.htm#32 visa cards violated, BofA reissuing after hack attack

aadsm17.htm#35 Online credit card fraud rocks Indonesia

2004f.html#20 Why does Windows allow Worms?

aadsm17.htm#38 Study: ID theft usually an inside job

2004f.html#31 MITM attacks

aadsm17.htm#42 Article on passwords in Wired News

2004g.html#41 [URL] (about) passwords

2004g.html#45 command line switches [Re: [REALLY OT!] Overuse of symbolic constants]

aadsm17.htm#43 Is finding security holes a good idea?

aadsm17.htm#44 Is finding security holes a good idea?

2004h.html#2 Adventure game (was:PL/? History (was Hercules))

2004h.html#4 Adventure game (was:PL/? History (was Hercules))

aadsm17.htm#46 authentication and authorization (was: Question on the state of the security industry)

aadsm17.htm#47 authentication and authorization ... addenda

aadsm17.htm#49 Use cash machines as little as possible

aadsm17.htm#50 authentication and authorization (was: Question on the state of the security industry)

aadsm17.htm#51 authentication and authorization

aadsm17.htm#55 Using crypto against Phishing, Spoofing and Spamming

aadsm17.htm#56 Question on the state of the security industry

aadsm17.htm#57 dual-use digital signature vulnerability

aadsm17.htm#58 Using crypto against Phishing, Spoofing and Spamming

aadsm17.htm#59 dual-use digital signature vulnerability

aadsm17.htm#60 Using crypto against Phishing, Spoofing and Spamming

aadsm18.htm#1 dual-use digital signature vulnerability

aadsm18.htm#2 dual-use digital signature vulnerability

aadsm18.htm#8 E-commerce attack imminent; Sudden increase in port scanning for SSL doesn't look good

aadsm18.htm#9 E-commerce attack imminent; Sudden increase in port scanning for SSL doesn't look good

aadsm18.htm#10 E-commerce attack imminent; Sudden increase in port scanning for SSL doesn't look good

aadsm18.htm#11 E-commerce attack imminent; Sudden increase in port scanning for SSL doesn't look good

aadsm18.htm#12 dual-use digital signature vulnerability

aadsm18.htm#17 should you trust CAs? (Re: dual-use digital signature vulnerability)

2004j.html#14 US fiscal policy (Was: Bob Bemer, Computer Pioneer,Father of ASCII,Invento

2004j.html#15 US fiscal policy (Was: Bob Bemer, Computer Pioneer,Father of ASCII,Invento

aadsm18.htm#18 Any TLS server key compromises?

2004j.html#28 Vintage computers are better than modern crap !

aadsm18.htm#19 RPOW - Reusable Proofs of Work

aadsm18.htm#20 RPOW - Reusable Proofs of Work

2004j.html#29 Vintage computers are better than modern crap !

2004j.html#32 Vintage computers are better than modern crap !

2004j.html#34 Vintage computers are better than modern crap !

2004j.html#35 A quote from Crypto-Gram

2004j.html#37 Vintage computers are better than modern crap !

2004j.html#38 Vintage computers are better than modern crap !

2004j.html#39 Methods of payment

2004j.html#56 RFCs that reference MD5

2004j.html#58 Vintage computers are better than modern crap !

2004k.html#7 A quote from Crypto-Gram

2004k.html#22 Public key authentication defeats passwd age warning

2004l.html#1 "Perfect" or "Provable" security both crypto and non-crypto?

2004l.html#63 Actuarial facts

aadsm18.htm#35 Credit card leaks continue at a furious pace

aadsm18.htm#36 Phishing losses total $500 million - Nacha

aadsm18.htm#37 Fake Companies, real money; elaborate con wrings cash out of stolen credit cards

2004p.html#21 need a firewall

2004p.html#22 need a firewall

aadsm18.htm#45 Banks Test ID Device for Online Security

aadsm18.htm#46 Banks Test ID Device for Online Security

2005.html#14 Using smart cards for signing and authorization in applets

2005b.html#43 [Lit.] Buffer overruns

2005b.html#66 [Lit.] Buffer overruns

2005c.html#28 [Lit.] Buffer overruns

2005c.html#29 [Lit.] Buffer overruns

2005c.html#30 [Lit.] Buffer overruns

2005c.html#31 [Lit.] Buffer overruns

2005c.html#34 [Lit.] Buffer overruns

aadsm18.htm#49 one more time now, Leading Cause of Data Security breaches Are Due to Insiders, Not Outsiders

2005d.html#0 [Lit.] Buffer overruns

aadsm18.htm#53 ATM machine security

aadsm18.htm#54 MD5 collision in X509 certificates

aadsm18.htm#55 MD5 collision in X509 certificates

aadsm19.htm#5 Do You Need a Digital ID?

2005e.html#31 Public/Private key pair protection on Windows

2005e.html#41 xml-security vs. native security

aadsm19.htm#7 JIE - Contracts in Cyberspace

2005f.html#9 TLS-certificates and interoperability-issues sendmail/Exchange/postfix

2005g.html#33 Good passwords and security priorities

2005g.html#37 MVS secure configuration standard

2005g.html#41 Maximum RAM and ROM for smartcards

2005g.html#42 TCP channel half closed

2005g.html#46 Maximum RAM and ROM for smartcards

2005i.html#0 More Phishing scams, still no SSL being used

2005i.html#1 Brit banks introduce delays on interbank xfers due to phishing boom

2005i.html#10 Revoking the Root

2005i.html#11 Revoking the Root

2005i.html#19 Improving Authentication on the Internet

2005i.html#33 Improving Authentication on the Internet

2005i.html#34 The Worth of Verisign's Brand

2005i.html#36 Improving Authentication on the Internet

aadsm19.htm#17 What happened with the session fixation bug?

aadsm19.htm#18 Citibank discloses private information to improve security

aadsm19.htm#19 "SSL stops credit card sniffing" is a correlation/causality myth

aadsm19.htm#22 Citibank discloses private information to improve security

aadsm19.htm#23 Citibank discloses private information to improve security

aadsm19.htm#26 Trojan horse attack involving many major Israeli companies, executives

2005j.html#3 Request for comments - anti-phishing approach

aadsm19.htm#28 "SSL stops credit card sniffing" is a correlation/causality myth

2005j.html#22 Public disclosure of discovered vulnerabilities

2005j.html#23 Public disclosure of discovered vulnerabilities

aadsm19.htm#34 encrypted tapes (was Re: Papers about "Algorithm hiding" ?)

2005j.html#52 Banks

2005j.html#53 Banks

2005k.html#3 Public disclosure of discovered vulnerabilities

2005k.html#56 Encryption Everywhere? (Was: Re: Ho boy! Another big one!)

aadsm19.htm#38 massive data theft at MasterCard processor

aadsm19.htm#39 massive data theft at MasterCard processor

aadsm19.htm#41 massive data theft at MasterCard processor

aadsm19.htm#44 massive data theft at MasterCard processor

2005l.html#13 The Worth of Verisign's Brand

2005l.html#17 The Worth of Verisign's Brand

2005l.html#18 The Worth of Verisign's Brand

2005l.html#19 Bank of America - On Line Banking *NOT* Secure?

2005l.html@23 The Worth of Verisign's Brand

2005l.html#24 The Worth of Verisign's Brand

2005l.html#36 More Phishing scams, still no SSL being used

2005m.html#6 Creating certs for others (without their private keys)

aadsm19.htm#45 payment system fraud, etc

aadsm20.htm#1 Keeping an eye on ATM fraud

aadsm20.htm#2 US consumers want companies fined for security breaches

aadsm20.htm#3 City National Bank is the latest major US company to admit it has lost customer data

2005n.html#5 Wildcard SSL Certificates

2005n.html#23 Online ID Thieves Exploit Lax ATM Security

aadm20.htm#24 [Clips] Escaping Password Purgatory

aadsm20.htm#28 solving the wrong problem

aadsm20.htm#29 How much for a DoD X.509 certificate?

aadsm20.htm#30 How much for a DoD X.509 certificate?

2005o.html#1 The Chinese MD5 attack

2005o.html#2 X509 digital certificate for offline solution

2005o.html#3 The Chinese MD5 attack

2005o.html#42 Catch22. If you cannot legally be forced to sign a document etc - Tax Declaration etc etc etc

2005p.html#2 Innovative password security

2005p.html#6 Innovative password security

aadsm21.htm#0 ID theft ring proves difficult to stop

2005p.html#24 Hi-tech no panacea for ID theft woes

2005p.html#25 Hi-tech no panacea for ID theft woes

2005p.html#25 Hi-tech no panacea for ID theft woes

aadsm21.htm#5 Is there any future for smartcards?

2005p.html#43 Security of Secret Algorithm encruption

aadsm21.htm#14 Online fraud 'ahead' of credit-card companies-experts

aadsm21.htm#15 Contactless payments and the security challenges

aadsm21.htm#16 PKI too confusing to prevent phishing, part 28

2005r.html#7 DDJ Article on "Secure" Dongle

2005s.html#15 Data Encryption Standard Today

aadsm21.htm#34 X.509 / PKI, PGP, and IBE Secure Email Technologies

2005u.html#13 AMD to leave x86 behind?

2005u.html#24 AMD to leave x86 behind?

2005u.html#26 RSA SecurID product

2005u.html#31 AMD to leave x86 behind?

2005u.html#33 PGP Lame question

aadsm21.htm#36 browser vendors and CAs agreeing on high-assurance certificates

2005v.html#2 ABN Tape - Found

2005v.html#3 ABN Tape - Found

2005v.html#4 ABN Tape - Found

aadsm21.htm#42 Phishers now targetting SSL

aadsm22.htm#1 GP4.3 - Growth and Fraud - Case #3 - Phishing

aadsm22.htm#2 GP4.3 - Growth and Fraud - Case #3 - Phishing

aadsm22.htm#5 long-term GPG signing key

aadsm22.htm#6 long-term GPG signing key

aadsm22.htm#7 long-term GPG signing key

2006.html#12a sox, auditing, finding improprieties

2006.html#33 The new High Assurance SSL Certificates

aadsm22.htm#10 thoughts on one time pads

aadsm22.htm#11 thoughts on one time pads

aadsm22.htm#12 thoughts on one time pads

aadsm22.htm#13 Face and fingerprints swiped in Dutch biometric passport crack (another card skim vulnerability)

2006.html#14 thoughts on one time pads

aadsm22.htm#16 serious threat models

2006c.html#13 X.509 and ssh

2006c.html#31 Worried about your online privacy?

2006c.html#35 X.509 and ssh

2006c.html#38 X.509 and ssh

2006d.html#25 Caller ID "spoofing"

2006d.html#26 Caller ID "spoofing"

2006d.html#28 Caller ID "spoofing"

2006d.html#30 Caller ID "spoofing"

2006d.html#31 Caller ID "spoofing"

aadsm22.htm#18 "doing the CA statement shuffle" and other dances

aadsm22.htm#19 "doing the CA statement shuffle" and other dances

aadsm22.htm#20 FraudWatch - Chip&Pin, a new tenner (USD10)

2006e.html#2 When *not* to sign an e-mail message?

aadsm22.htm#21 FraudWatch - Chip&Pin, a new tenner (USD10)

2006e.html#10 Caller ID "spoofing"

2006e.html#11 Caller ID "spoofing"

aadsm22.htm#22 FraudWatch - Chip&Pin, a new tenner (USD10)

aadsm22.htm#23 FraudWatch - Chip&Pin, a new tenner (USD10)

2006e.html#21 Debit Cards HACKED now

2006e.html#22 Debit Cards HACKED now

2006e.html#23 Debit Cards HACKED now

2006e.html#24 Debit Cards HACKED now

2006e.html#26 Debit Cards HACKED now

aadsm22.htm#25 FraudWatch - Chip&Pin, a new tenner (USD10)

2006e.html#30 Debit Cards HACKED now

aadsm22.htm#26 FraudWatch - Chip&Pin, a new tenner (USD10)

2006e.html#44 Does the Data Protection Act of 2005 Make Sense

aadsm22.htm#27 Meccano Trojans coming to a desktop near you

aadsm22.htm#28 Meccano Trojans coming to a desktop near you

aadsm22.htm#29 Meccano Trojans coming to a desktop near you

aadsm22.htm#30 Creativity and security

aadsm22.htm#31 Creativity and security

aadsm22.htm#33 Meccano Trojans coming to a desktop near you

aadsm22.htm#34 FraudWatch - Chip&Pin, a new tenner (USD10)

aadsm22.htm#36 Unforgeable Blinded Credentials

aadsm22.htm#38 Creativity and security

aadsm22.htm#39 FraudWatch - Chip&Pin, a new tenner (USD10)

aadsm22.htm#40 FraudWatch - Chip&Pin, a new tenner (USD10)

2006f.html#32 X.509 and ssh

2006f.html#33 X.509 and ssh

2006f.html#36 X.509 and ssh

aadsm22.htm#44 Creativity and security

aadsm22.htm#45 Court rules email addresses are not signatures, and signs death warrant for Digital Signatures

aadsm22.htm#46 Court rules email addresses are not signatures, and signs death warrant for Digital Signatures

aadsm22.htm#47 Court rules email addresses are not signatures, and signs death warrant for Digital Signatures

aadsm22.htm#48 Court rules email addresses are not signatures, and signs death warrant for Digital Signatures

aadsm23.htm#0 Separation of Roles - an example

2006g.html#12 The Pankian Metaphor

aadsm23.htm#1 RSA Adaptive Authentication

aadsm23.htm#2 News and Views - Mozo, Elliptics, eBay + fraud, naïve use of TLS and/or tokens

2006h.html#13 Security

2006h.html#4 News and Views - Mozo, Elliptics, eBay + fraud, naïve use of TLS and/or tokens

2006h.html#15 Security

2006h.html#26 Security

2006h.html#31 Intel vPro Technology

2006h.html#33 The Pankian Metaphor

2006h.html#34 The Pankian Metaphor

2006h.html#40 Mainframe vs. xSeries

aadsm23.htm#9 PGP "master keys"

aadsm23.htm#10 PGP "master keys"

2006i.html#3 Spoofing fingerprint scanners - NEWBIE()

aadsm23.htm#13 Court rules email addresses are not signatures, and signs death warrant for Digital Signatures

aadsm23.htm#16 FraudWatch - Chip&Pin, a new tenner (USD10)

aadsm23.htm#17 FraudWatch - Chip&Pin, a new tenner (USD10)

aadsm23.htm#18 Security Soap Opera - (Central) banks don't (want to) know, MS prefers Brand X, airlines selling your identity, first transaction trojan

aadsm23.htm#19 Petrol firm suspends chip-and-pin

aadsm23.htm#20 Petrol firm suspends chip-and-pin

aadsm23.htm#21 Reliable Connections Are Not

aadsm23.htm#25 Petrol firm suspends chip-and-pin

aadsm23.htm#26 Petrol firm suspends chip-and-pin

aadsm23.htm#27 Chip-and-Pin terminals were replaced by "repairworkers"?

aadsm23.htm#28 JIBC April 2006 - "Security Revisionism"

aadsm23.htm#30 Petrol firm suspends chip-and-pin

aadsm23.htm#31 JIBC April 2006 - "Security Revisionism"

aadsm23.htm#32 Chip-and-Pin terminals were replaced by "repairworkers"?

aadsm23.htm#33 Chip-and-Pin terminals were replaced by "repairworkers"?

aadsm23.htm#34 Chip-and-Pin terminals were replaced by "repairworkers"?

2006.html#15 Passwords for bank sites - change or not?

2006k.html#16 Value of an old IBM PS/2 CL57 SX Laptop

2006k.html#17 Hey! Keep Your Hands Out Of My Abstraction Layer!

2006k.html#18 Value of an old IBM PS/2 CL57 SX Laptop

2006k.html#22 Encryption for Powerpoint?

2006k.html#23 Value of an old IBM PS/2 CL57 SX Laptop

2006k.html#26 Value of an old IBM PS/2 CL57 SX Laptop

2006k.html#33 Password Complexity

aadsm23.htm#44 ThreatWatch - markets in loss, Visa's take, 419 "chairmen"

aadsm23.htm#49 Status of SRP

2006l.html#27 Google Architecture

aadsm23.htm#53 Status of SRP

aadsm23.htm#54 Status of SRP

aadsm23.htm#55 UK Detects Chip-And-PIN Security Flaw

2006l.html#32 Google Architecture

aadsm23.htm#56 UK Detects Chip-And-PIN Security Flaw

aadsm24.htm#0 FraudWatch - Chip&Pin, a new tenner (USD10)

2006l.html#33 Google Architecture

aadsm24.htm#1 UK Detects Chip-And-PIN Security Flaw

aadsm24.htm#2 UK Banks Expected To Move To DDA EMV Cards

aadsm24.htm#3 FraudWatch - Chip&Pin, a new tenner (USD10)

2006l.html#37 Google Architecture

aadsm24.htm#6 Securely handling credit card transactions earns Blackboard kudos

aadsm24.htm#7 Naked Payments IV - let's all go naked

2006l.html#57 DEC's Hudson fab

aadsm24.htm#8 Microsoft - will they bungle the security game?

aadsm24.htm#9 Naked Payments IV - let's all go naked

2006m.html#15 OpenSSL Hacks

aadsm24.htm#10 Naked Payments IV - let's all go naked

2006m.html#24 OT - J B Hunt

aadsm24.htm#12 Naked Payments IV - let's all go naked

aadsm24.htm#14 Naked Payments IV - let's all go naked

aadsm24.htm#21 Use of TPM chip for RNG?

aadsm24.htm#22 Naked Payments IV - let's all go naked

aadsm24.htm#25 FraudWatch - Chip&Pin, a new tenner (USD10)

aadsm24.htm#26 Naked Payments IV - let's all go naked

aadsm24.htm#27 DDA cards may address the UK Chip&Pin woes

aadsm24.htm#30 DDA cards may address the UK Chip&Pin woes

aadsm24.htm#32 DDA cards may address the UK Chip&Pin woes

aadsm24.htm#33 Threatwatch - 2-factor tokens attacked by phishers

aadsm24.htm#34 Phishers Defeat 2-Factor Auth

aadsm24.htm#35 Interesting bit of a quote

aadsm24.htm#36 Interesting bit of a quote

aadsm24.htm#38 DDA cards may address the UK Chip&Pin woes

aadsm24.htm#38 Interesting bit of a quote

aadsm24.htm#39 Interesting bit of a quote

aadsm24.htm#40 Interesting bit of a quote

aadsm24.htm#41 Naked Payments IV - let's all go naked

aadsm24.htm#43 DDA cards may address the UK Chip&Pin woes

2006n.html#32 The System/360 Model 20 Wasn't As Bad As All That

aadsm24.htm#46 More Brittle Security -- Agriculture

aadsm24.htm#47 More Brittle Security -- Agriculture

aadsm24.htm#48 more on FBI plans new Net-tapping push

aadsm24.htm#52 Crypto to defend chip IP: snake oil or good idea?

aadsm25.htm#4 Crypto to defend chip IP: snake oil or good idea?

aadsm25.htm#9 DDA cards may address the UK Chip&Pin woes

aadsm25.htm#10 Crypto to defend chip IP: snake oil or good idea?

aadsm25.htm#11 And another cloning tale

aadsm25.htm#13 Sarbanes-Oxley is what you get when you don't do FC

2006o.html#35 the personal data theft pandemic continues

2006o.html#37 the personal data theft pandemic continues

2006o.html#40 the personal data theft pandemic continues

2006o.html#47 the personal data theft pandemic continues

aadsm25.htm#16 Fraudwatch - Chip&PIN one-sided story, banks and deception and liability shifts

aadsm25.htm#17 Hamiltonian path as protection against DOS

aadsm25.htm#18 Fraudwatch - Chip&PIN one-sided story, banks and deception and liability shifts

aadsm25.htm#20 Identity v. anonymity -- that is not the question

aadsm25.htm#21 Identity v. anonymity -- that is not the question

2006p.html#9 New airline security measures in Europe

2006p.html#18 19,000 Accounts Compromised

2006p.html#32 OT - hand-held security

2006p.html#38 Hackers steal AT&T customer data

2006p.html#41 Device Authentication - The answer to attacks lauched using stolen passwords?

2006q.html#5 Materiel and graft<

2006q.html#7 Linux More Secure on System z?

aadsm25.htm#24 DDA cards may address the UK Chip&Pin woes

aadsm25.htm#25 RSA SecurID SID800 Token vulnerable by design

2006q.html#48 Smartcard reader with certificate inside the reader

2006r.html#28 Greatest Software Ever Written?

2006r.html#29 Intel abandons USEnet news

2006r.html#34 Mozilla moves on security

2006s.html#4 Why not 2048 or 4096 bit RSA key issuance?

2006s.html#5 Why not 2048 or 4096 bit RSA key issuance?

aadsm25.htm#39 How the Classical Scholars dropped security from the canon of Computer Science

2006s.html#9 Why not 2048 or 4096 bit RSA key issuance?

aadsm25.htm#43 Audit Follies - Atlantic differences, branding UnTrust, thunbs on Sarbanes-Oxley, alternates

2006s.html#28 Storage Philosophy Question

aadsm25.htm#45 hashes on restricted domains: random functions or permutations?

aadsm25.htm#46 Flaw exploited in RFID-enabled passports

2006t.html#25 Are there more stupid people in IT than there used to be?

2006u.html#3 ssh - password control or key control?

aadsm26.htm#0 Flaw in RFID-enabled passports (part 2?)

aadsm26.htm#3 Citibank e-mail looks phishy

2006u.html#36 remote support questions - curiousity

2006u.html#40 New attacks on the financial PIN processing

aadsm26.htm#4 Citibank e-mail looks phishy

aadsm26.htm#5 ATMs hacked using MP3 player

2006u.html#47 New attacks on the financial PIN processing

2006u.html#48 New attacks on the financial PIN processing

aadsm26.htm#6 Citibank e-mail looks phishy

2006u.html#53 What's a mainframe?

aadsm26.htm#7 Citibank e-mail looks phishy

2006v.html#1 New attacks on the financial PIN processing

2006v.html#2 New attacks on the financial PIN processing

aadsm26.htm#8 What is the point of encrypting information that is publicly visible?

aadsm26.htm#11 What is the point of encrypting information that is publicly visible?

aadsm26.htm#12 Who has a Core Competency in Security?

2006v.html#13 Who has a Core Competency in Security?

2006v.html#27 Federal Rules May Not Fully Secure Online Banking Sites

aadsm26.htm#14 Who has a Core Competency in Security?

2006v.html#33 New attacks on the financial PIN processing

2006v.html#39 On sci.crypt: New attacks on the financial PIN processing

2006v.html#42 On sci.crypt: New attacks on the financial PIN processing

2006v.html#44 User Authentication

2006v.html#45 On sci.crypt: New attacks on the financial PIN processing

2006v.html#46 Patent buster for a method that increases password security

2006v.html#49 Patent buster for a method that increases password security

2006v.html#50 DOS C prompt in "Vista"?

2006w.html#5 Patent buster for a method that increases password security

2006x.html#14 IBM ATM machines

2006x.html#22 'Innovation' and other crimes

2006x.html#16 Security Implications of Using the Data Encryption Standard (DES)

2006x.html#36 SSL security with server certificate compromised

2006y.html#8 Securing financial transactions a high priority for 2007

aadsm26.htm#17 Changing the Mantra -- RFC 4732 on rethinking DOS

2006y.html#25 "The Elements of Programming Style"

2007.html#5 Securing financial transactions a high priority for 2007

2007.html#6 Securing financial transactions a high priority for 2007

2007.html#27 Securing financial transactions a high priority for 2007

aadsm26.htm#21 FC07 Preliminary Programme - Leaving Room for the Bad Guys

aadsm26.htm#22 Tamperproof, yet playing Tetris

2007b.html#8 Special characters in passwords was Re: RACF - Password rules

2007b.html#13 special characters in passwords

2007b.html#20 How many 36-bit Unix ports in the old days?

2007b.html#24 Forbidding Special characters in passwords

aadsm26.htm#23 It's a Presidential Mandate, Feds use it. How come you are not using FDE?

2007b.html#59 Peter Gutmann Rips Windows Vista Content Protection

2007b.html#60 Securing financial transactions a high priority for 2007

2007b.html#62 Securing financial transactions a high priority for 2007

2007b.html#63 Is Silicon Valley strangeled by SOX?

2007b.html#64 Securing financial transactions a high priority for 2007

2007c.html#3 "New Universal Man-in-the-Middle Phishing Kit"

2007c.html#6 Securing financial transactions a high priority for 2007

2007c.html#8 Securing financial transactions a high priority for 2007

2007c.html#9 Decoding the encryption puzzle

2007c.html#10 Securing financial transactions a high priority for 2007

2007c.html#11 Decoding the encryption puzzle

2007c.html#17 Securing financial transactions a high priority for 2007

2007c.html#18 Securing financial transactions a high priority for 2007

2007c.html#22 Securing financial transactions a high priority for 2007

2007c.html#26 Securing financial transactions a high priority for 2007

2007c.html#27 Securing financial transactions a high priority for 2007

2007c.html#28 Securing financial transactions a high priority for 2007

2007c.html#30 Securing financial transactions a high priority for 2007

2007c.html#31 Securing financial transactions a high priority for 2007

2007c.html#32 Securing financial transactions a high priority for 2007

2007c.html#33 Securing financial transactions a high priority for 2007

2007c.html#35 Securing financial transactions a high priority for 2007

2007c.html#36 Securing financial transactions a high priority for 2007

2007c.html#37 Securing financial transactions a high priority for 2007

2007c.html#38 Securing financial transactions a high priority for 2007

2007c.html#43 Securing financial transactions a high priority for 2007

2007c.html#46 Securing financial transactions a high priority for 2007

2007c.html#51 Securing financial transactions a high priority for 2007

2007c.html#53 Securing financial transactions a high priority for 2007

2007d.html#5 Securing financial transactions a high priority for 2007

aadsm26.htm#25 EV - what was the reason, again?

aadsm26.htm#27 man in the middle, SSL ... addenda

2007d.html#26 Securing financial transactions a high priority for 2007

aadsm26.htm#30 man in the middle, SSL

aadsm26.htm#31 man in the middle, SSL ... addenda 2

aadsm26.htm#35 Failure of PKI in messaging

2007d.html#68 Securing financial transactions a high priority for 2007

2007d.html#70 Securing financial transactions a high priority for 2007

2007e.html#2 Securing financial transactions a high priority for 2007

2007e.html#12 Securing financial transactions a high priority for 2007

aadsm26.htm#37 Threatwatch: $400 to 'own' your account

aadsm26.htm#38 Usable Security 2007

2007e.html#20 Securing financial transactions a high priority for 2007

2007e.html#24 Securing financial transactions a high priority for 2007

2007e.html#26 Securing financial transactions a high priority for 2007

2007e.htmL#29 Securing financial transactions a high priority for 2007

2007e.html#58 Securing financial transactions a high priority for 2007

2007e.html#62 Securing financial transactions a high priority for 2007

aadsm26.htm#40 PKI: The terrorists' secret weapon

aadsm26.htm#41 PKI: The terrorists' secret weapon (part II)

2007f.html#58 Securing financial transactions a high priority for 2007

2007f.html#68 Securing financial transactions a high priority for 2007

2007f.html#72 Securing financial transactions a high priority for 2007

2007g.html#8 Securing financial transactions a high priority for 2007

2007g.html#20 T.J. Maxx data theft worse than first reported

aadsm26.htm#45 Cost of an identity

2007g.html#30 T.J. Maxx data theft worse than first reported

aadsm26.htm#47 SSL MITM-attacks make the news

2007g.html#58 Can SSL sessions be compromised?

2007g.html#50 DNSSEC to be strangled at birth

aadsm26.htm#57 Our security sucks. Why can't we change? What's wrong with us?

2007h.html#48 Securing financial transactions a high priority for 2007

2007h.html#51 Securing financial transactions a high priority for 2007

aadsm26.htm#59 On cleaning up the security mess: escaping the self-perpetuating trap of Fraud?

2007h.html#56 T.J. Maxx data theft worse than first reported

aadsm26.htm#60 crypto component services - is there a market?

2007h.html#63 T.J. Maxx data theft worse than first reported

2007i.html#17 John W. Backus, 82, Fortran developer, dies

2007i.html#19 John W. Backus, 82, Fortran developer, dies

2007i.html#28 John W. Backus, 82, Fortran developer, dies

2007i.html#73 public key password authentication

aadsm26.htm#66 More Tipping Point evidence - POS vendors sued

2007j.html#0 John W. Backus, 82, Fortran developer, dies

2007j.html#3 John W. Backus, 82, Fortran developer, dies

2007j.html#15 John W. Backus, 82, Fortran developer, dies

aadsm26.htm#68 H6.1: Designing (Security) Without Requirements is like Building a Road Without a Route Map to a Destination You've Never Seen

aadsm26.htm#70 WSJ: Soft evidence on a crypto-related breach

aadsm27.htm#2 Threatwatch: Still searching for the economic MITM

2007j.html#60 John W. Backus, 82, Fortran developer, dies

aadsm27.htm#3 Solution to phishing -- an idea who's time has come?

aadsm27.htm#5 Leadership, the very definition of fraud, and the court of security ideas

aadsm27.htm#7 Solution to phishing -- an idea who's time has come?

aadsm27.htm#8 Leadership, the very definition of fraud, and the court of security ideas

aadsm27.htm#11 Is this Risk Management's Waterloo?

aadsm27.htm#12 0wned .gov machines (was Re: Russian cyberwar against Estonia?)

aadsm27.htm#13 Is this Risk Management's Waterloo?

2007k.html#50 John W. Backus, 82, Fortran developer, dies

2007k.html#51 IBM Unionization

2007k.html#52 John W. Backus, 82, Fortran developer, dies

2007k.html#54 John W. Backus, 82, Fortran developer, dies

2007k.html#55 My Dream PC -- Chip-Based

2007k.html#56 My Dream PC -- Chip-Based

2007k.html#63 My Dream PC -- Chip-Based

2007k.html#79 John W. Backus, 82, Fortran developer, dies

2007l.html#0 John W. Backus, 82, Fortran developer, dies

2007l.html#18 Non-Standard Mainframe Language?

2007l.html#35 My Dream PC -- Chip-Based

2007l.html#40 My Dream PC -- Chip-Based

2007m.html#33 nouns and adjectives

2007m.html#65 nouns and adjectives

aadsm27.htm#31 The bank fraud blame game

aadsm27.htm#32 The bank fraud blame game

aadsm27.htm#33 The bank fraud blame game

aadsm27.htm#35 The bank fraud blame game

aadsm27.htm#38 The bank fraud blame game

aadsm27.htm#39 a fraud is a sale, Re: The bank fraud blame game

aadsm27.htm#40 a fraud is a sale, Re: The bank fraud blame game

2007n.html#50 WindowsMonitor or CUSP?

aadsm27.htm#43 a fraud is a sale, Re: The bank fraud blame game

2007n.html#71 Poll: oldest computer thing you still use

2007n.html#72 Poll: oldest computer thing you still use

aadsm27.htm#44 Threatwatch: how much to MITM, how quickly, how much lost

aadsm27.htm#45 Threatwatch: how much to MITM, how quickly, how much lost

2007n.html#80 Poll: oldest computer thing you still use

aadsm27.htm#46 Threatwatch: how much to MITM, how quickly, how much lost

aadsm27.htm#53 Doom and Gloom spreads, security revisionism suggests "H6.5: Be an adept!"

2007o.html#7 Hypervisors May Replace Operating Systems As King Of The Data Center

2007o.html#16 Hypervisors May Replace Operating Systems As King Of The Data Center

2007o.html#27 EZPass: Yes, Big Brother IS Watching You!

2007o.html#29 EZPass: Yes, Big Brother IS Watching You!

2007o.html#30 EZPass: Yes, Big Brother IS Watching You!

aadsm27.htm#59 Threatwatch - more data on cost of your identity

2007p.html#40 what does xp do when system is copying

2007p.html#50 Newsweek article--baby boomers and computers

aadsm27.htm#60 Retailers try to push data responsibilities back to banks

2007q.html#41 Newsweek article--baby boomers and computers

2007r.html#30 Is the media letting banks off the hook on payment card security

2007r.html#32 Is the media letting banks off the hook on payment card security

2007r.html#47 Translation of IBM Basic Assembler to C?

2007r.html#61 The new urgency to fix online privacy

2007r.html#63 Translation of IBM Basic Assembler to C?

2007r.html#72 Translation of IBM Basic Assembler to C?

2007s.html#1 Translation of IBM Basic Assembler to C?

2007s.html#11 Translation of IBM Basic Assembler to C?

2007s.htmL#12 Translation of IBM Basic Assembler to C?

2007s.html#13 The new urgency to fix online privacy

2007s.htmL#25 Translation of IBM Basic Assembler to C?

2007s.html#28 Translation of IBM Basic Assembler to C?

2007s.html#34 File sharing may lead to identity theft

aadsm27.htm#64 How to crack RSA

2007s.html#66 The new urgency to fix online privacy

2007t.html#7 Identity Theft Prevention tips

2007t.html#20 UK Retail Giant Breached by Insider

2007t.html#22 'Man in the browser' is new threat to online banking

2007t.html#27 'Man in the browser' is new threat to online banking

2007t.html#47 Translation of IBM Basic Assembler to C?

2007u.html#10 Crypto Related Posts

2007u.html#11 Public Computers

2007u.html#45 Folklore references to CP67 at Lincoln Labs

2007u.html#47 folklore indeed

2007u.html#48 folklore indeed

2007u.html#49 folklore indeed

2007u.html#50 folklore indeed

2007u.html#53 folklore indeed

2007u.html#54 folklore indeed

2007u.html#55 folklore indeed

2007u.html#58 folklore indeed

2007u.html#62 folklore indeed

2007u.html#63 folklore indeed

2007u.html#68 folklore indeed

2007u.html#70 folklore indeed

2007u.html#71 folklore indeed

2007u.html#74 folklore indeed

2007u.html#82 Education ranking

2007v.html#2 folklore indeed

2007v.html#6 Ironke

2007v.html#8 Virtualization still hot, death of antivirus software imminent

2007v.html#25 Newsweek article--baby boomers and computers

2007v.html#35 Inside a Modern Malware Distribution System

2007v.html#66 2007: year in review

2007v.html#74 folklore indeed

aadsm28.htm#2 Death of antivirus software imminent

2007v.html#77 folklore indeed

2007v.html#78 folklore indeed

2007v.html#86 folklore indeed

2007v.html#87 Data Breaches Soar In 2007

2007v.html#88 Data Breaches Soar In 2007

2007v.html#89 2007 Roundup: The march of the botnets

2007v.html#90 folklore indeed

aadsm28.htm#3 Why Security Modelling doesn't work -- the OODA loop of today's battle

2007v.html#95 folklore indeed

2007v.html#97 folklore indeed

2008.html#2 folklore indeed

2008.html#4 folklore indeed

2008.html#5 folklore indeed

aadsm28.htm#5 Why Security Modelling doesn't work -- the OODA loop of today's battle

aadsm28.htm#6 Death of antivirus software imminent

2008.html#11 Information security breaches quadrupled in 2007

2008.html#31 1975 movie "Three Days of the Condor" tech stuff

2008.html#35 U.S. Identity Theft at Record Level in 2007

2008.html#36 1970s credit cards, was: 1975 movie "Three Days of the Condor" tech stuff

2008.html#70 As Expected, Ford Falls From 2nd Place in U.S. Sales

2008.html#71 As Expected, Ford Falls From 2nd Place in U.S. Sales

2008.html#90 Computer Science Education: Where Are the Software Engineers of Tomorrow?

2008b.html#12 Computer Science Education: Where Are the Software Engineers of Tomorrow?

2008b.html#19 Yahoo's CAPTCHA Security Reportedly Broken

2008b.html#26 folklore indeed

2008b.html#67 Govt demands password to personal computer

2008b.html#68 Govt demands password to personal computer

2008b.html#72 Govt demands password to personal computer

2008b.html#74 Too much change opens up financial fault lines

2008b.html#82 Break the rules of governance and lose 4.9 billion

aadsm28.htm#13 Break the rules of governance and lose 4.9 billion

aadsm28.htm#14 Break the rules of governance and lose 4.9 billion

2008c.html#4 folklore indeed

aadsm28.htm#15 Dutch Transport Card Broken

aadsm28.htm#17 Lack of fraud reporting paths considered harmful

aadsm28.htm#18 Lack of fraud reporting paths considered harmful

aadsm28.htm#19 Lack of fraud reporting paths considered harmful

2008c.html#44 Toyota Sales for 2007 May Surpass GM

aadsm28.htm#21 Dutch Transport Card Broken

2008c.html#47 Data Erasure Products

aadsm28.htm#25 middle banking in a english muddle

2008c.html#59 Govt demands password to personal computer

2008c.html#76 Neglected IT Tasks May Have Led to Bank Meltdown

aadsm28.htm#27 Break the rules of governance and lose 4.9 billion

aadsm28.htm#28 middle banking in a english muddle

2008c.html#89 Toyota Sales for 2007 May Surpass GM

2008d.html#2 Spammers' bot cracks Microsoft's CAPTCHA

2008d.html#3 Govt demands password to personal computer

2008d.html#6 How Safe Are Your Personal Records In The Hands Of Government Officials?

aadsm28.htm#29 Chip&PIN cards: 1 in 5 cloned?

2008d.html#10 Toyota Sales for 2007 May Surpass GM

2008d.html#18 New Research Confirms Identity Fraud Is On Decline

2008d.html#26 Toyota Sales for 2007 May Surpass GM

aadsm28.htm#33 on Revocation of Signing Certs and Public Key Signing itself

2008d.html#27 Kerberized authorization service

2008d.html#34 New Research Confirms Identity Fraud Is On Decline

2008d.html#84 The hands-free way to steal a credit card

2008d.html#88 The hands-free way to steal a credit card

2008e.html#3 The hands-free way to steal a credit card

2008e.html#25 Spammers crack Gmail Captcha

2008e.html#34 The hands-free way to steal a credit card

aadsm28.htm#37 Attack on Brit retail payments -- some takeways

2008e.html#35 PIN devices vulnerable to 'tapping' attacks, researchers warn

2008e.html#42 Banks failing to manage IT risk - study

2008e.html#44 insider fraud

2008e.html#65 Banks failing to manage IT risk - study

2008e.html#66 independent appraisers

2008e.html#69 independent appraisers

US aerospace and defense sector braces for potential brain drain as Cold War workers retire

2008e.html#77 independent appraisers

2008f.html#2 EPIC, Ending Piracy of Integrated Circuits

2008f.html#9 EPIC, Ending Piracy of Integrated Circuits

2008f.html#11 independent appraisers

aadsm28.htm#38 The Trouble with Threat Modelling

2008f.html#25 independent appraisers

2008f.html#26 independent appraisers

2008f.html#33 EPIC, Ending Piracy of Integrated Circuits

aadsm28.htm#40 Attack on Brit retail payments -- some takeways

aadsm28.htm#41 Trojan with Everything, To Go!

2008f.html#49 How do OTP tokens work?

2008f.html#51 independent appraisers

2008f.html#54 How do OTP tokens work?

aadsm28.htm#46 The bond that fell to Earth

2008f.html#63 Antivirus Inventor: Security Departments Are Wasting Their Time

2008f.html#73 Bush - place in history

aadsm28.htm#50 Liability for breaches: do we need new laws?

2008f.html#86 Banks failing to manage IT risk - study

2008f.html#88 Has Banking Industry Overlooked Its Biggest Breach Ever?

aadsm28.htm#51 Liability for breaches: do we need new laws?

2008f.html#89 Bush - place in history

2008f.html#94 Bush - place in history

aadsm28.htm#52 Pogo reports: big(gest) bank breach was covered up?

2008f.html#96 Bush - place in history

2008g.html#0 Bush - place in history

2008g.html#2 Bush - place in history

2008g.html#4 CDOs subverting Boyd's OODA-loop

2008g.html#10 Hannaford case exposes holes in law, some say

2008g.html#12 independent appraisers

2008g.html#13 independent appraisers

2008g.html#16 independent appraisers

2008g.html#17 Hannaford breach illustrates dangerous compliance mentality

2008g.html#25 CA ESD files Options

2008g.html#28 Hannaford case exposes holes in law, some say

aadsm28.htm#53 Pogo reports: big(gest) bank breach was covered up?

2008g.html#36 Lehman sees banks, others writing down $400 bln

2008g.html#59 Credit crisis could cost nearly $1 trillion, IMF predicts

2008g.html#64 independent appraisers

2008g.html#66 independent appraisers

2008g.html#67 independent appraisers

2008h.html#4 You won't guess who's the bad guy of ID theft

aadsm28.htm#54 Liability for breaches: do we need new laws?

aadsm28.htm#57 Who do we have to blame for the mortgage crisis in America?

aadsm28.htm#58 Who do we have to blame for the mortgage crisis in America?

aadsm28.htm#60 Seeking expert on credit card fraud prevention - particularly CNP/online transactions

aadsm28.htm#61 Is Basel 2 out...Basel 3 in?

aadsm28.htm#62 Who do we have to blame for the mortgage crisis in America?

aadsm28.htm#64 Seeking expert on credit card fraud prevention - particularly CNP/online transactions

aadsm28.htm#66 Would the Basel Committee's announced enhancement of Basel II Framework and other steps have prevented the current global financial crisis had they been implemented years ago?

2008h.html#20 handling the SPAM on this group

aadsm28.htm#71 Paypal -- Practical Approaches to Phishing -- open white paper

2008h.html#32 subprime write-down sweepstakes

aadsm28.htm#74 Visa and MasterCard mandated PCI compliance as of Jan 1, 2008. I would like to get a feel or opinion on this subject

aadsm28.htm#75 Fun with Data Theft/Breach Numbers

aadsm28.htm#77 How safe do you feel when using a debit or credit card?

2008h.html#44 Two views of Microkernels (Re: Kernels

2008h.html#89 Credit Crisis Timeline

2008h.html#90 subprime write-down sweepstakes

2008i.html#1 Do you belive Information Security Risk Assessment has shortcoming like

2008i.html#21 Worst Security Threats?

aadsm28.htm#80not crypto, but fraud detection

aadsm28.htm#81 not crypto, but fraud detection

2008i.html#30 subprime write-down sweepstakes

2008i.html#42 "Security Breaches"

2008i.html#43 IT Security Statistics

2008i.html#55 Is data classification the right approach to pursue a risk based information security program?

2008i.html#64 Is the credit crunch a short term aberation

2008i.html#67 Do you have other examples of how people evade taking resp. for risk

2008i.html#70 Next Generation Security

2008i.html#71 The End of Privacy?

2008i.html#76 Security Awareness

2008i.html#81 Selling Security using Prospect Theory. Or not

2008i.html#88 squirrels

2008i.html#101 We're losing the battle

2008j.html#34 What is "timesharing" (Re: OS X Finder windows vs terminal window weirdness)

2008j.html#35 Data Breach Reports Up 69 Percent in 2008

2008j.html#37 What is "timesharing" (Re: OS X Finder windows vs terminal window weirdness)

2008j.html#38 dollar coins

2008j.html#51 dollar coins

2008j.html#55 What is "timesharing" (Re: OS X Finder windows vs terminal window weirdness)

2008j.html#57 What is "timesharing" (Re: OS X Finder windows vs terminal window weirdness)

2008j.html#60 dollar coins

2008j.html#61 German court finds Bank responsible for malwared PC

2008j.html#62 German court finds Bank responsible for malwared PC

2008j.html#63 CLIs and GUIs

2008j.html#64 lack of information accuracy

2008j.html#66 lack of information accuracy

2008j.html#71 lack of information accuracy

2008j.html#84 dollar coins

2008k.html#10 Why do Banks lend poorly in the sub-prime market? Because they are not in Banking!

2008k.html#13 dollar coins

2008k.html#19 dollar coins

top , by subject , technology , networking , public key , Boyd - home

Buffer overflows, overruns, exploits

99.html#70 Series/1 as NCP (was: Re: System/1 ?)

99.html#85 Perfect Code

99.html#163 IBM Assembler 101

99.html#219 Study says buffer overflow is most common security bug

ansiepay.htm#theory Security breach raises questions about Internet shopping

aadsm9.htm#cfppki10 CFP: PKI research workshop

aepay11.htm#65 E-merchants Turn Fraud-busters (somewhat related)

aadsm12.htm#16 Feasability of Palladium / TCPA

aadsm14.htm#32 An attack on paypal

aadsm14.htm#34 virus attack on banks (was attack on paypal)

aadsm14.htm#38 An attack on paypal (trivia addenda)

aadsm16.htm#1 FAQ: e-Signatures and Payments

aadsm18.htm#18 Any TLS server key compromises?

2000.html#25 Computer of the century

2000.html#30 Computer of the century

2000b.html#17 ooh, a real flamewar :)

2000b.html#22 ooh, a real flamewar :)

2000c.html#40 Domainatrix - the final word

2000g.html#50 Egghead cracked, MS IIS again

2001b.html#47 what is interrupt mask register?

2001b.html#58 Checkpoint better than PIX or vice versa???

2001c.html#32 How Commercial-Off-The-Shelf Systems make society vulnerable

2001c.html#38 How Commercial-Off-The-Shelf Systems make society vulnerable

2001d.html#58 Very CISC Instuctions (Was: why the machine word size ...)

2001i.html#54 Computer security: The Future

2001k.html#43 Why is UNIX semi-immune to viral infection?

2001l.html#49 Virus propagation risks

2001m.html#27 Internet like city w/o traffic rules, traffic signs, traffic lights and traffic enforcement

2001n.html#30 FreeBSD more secure than Linux

2001n.html#71 Q: Buffer overflow

2001n.html#72 Buffer overflow

2001n.html#76 Buffer overflow

2001n.html#84 Buffer overflow

2001n.html#90 Buffer overflow

2001n.html#91 Buffer overflow

2001n.html#93 Buffer overflow

2002.html#4 Buffer overflow

2002.html#19 Buffer overflow

2002.html#20 Younger recruits versus experienced veterans ( was Re: The demise of compa

2002.html#23 Buffer overflow

2002.html#24 Buffer overflow

2002.html#26 Buffer overflow

2002.html#27 Buffer overflow

2002.html#28 Buffer overflow

2002.html#29 Buffer overflow

2002.html#32 Buffer overflow

2002.html#33 Buffer overflow

2002.html#34 Buffer overflow

2002.html#35 Buffer overflow

2002.html#37 Buffer overflow

2002.html#38 Buffer overflow

2002.html#39 Buffer overflow

2002e.html#58 O'Reilly C Book

2002h.html#74 Where did text file line ending characters begin?

2002i.html#62 subjective Q. - what's the most secure OS?

2002l.html#42 Thirty Years Later: Lessons from the Multics Security Evaluation

2002l.html#45 Thirty Years Later: Lessons from the Multics Security Evaluation

2002m.html#8 Backdoor in AES ?

2002m.html#10 Backdoor in AES ?

2002m.html#58 The next big things that weren't

2002p.html#6 unix permissions

2003g.html#62 IBM says AMD dead in 5yrs ... -- Microsoft Monopoly vs. IBM

2003h.html#41 Segments, capabilities, buffer overrun attacks

2003h.html#47 Segments, capabilities, buffer overrun attacks

2003i.html#59 grey-haired assembler programmers (Ritchie's C)

2003j.html#4 A Dark Day

2003j.html#8 A Dark Day

2003j.html#20 A Dark Day

2003k.html#64 C & reliability: Was "The Incredible Shrinking Legacy"

2003l.html#2 S/360 Engineering Changes

2003n.html#14 Poor people's OS?

2003o.html#5 perfomance vs. key size

2003o.html#6 perfomance vs. key size

2003o.html#20 IS CP/M an OS?

2003o.html#25 Any experience with "The Last One"?

2003o.html#50 Pub/priv key security

2004.html#30 Threat of running a web server?

2004e.html#41 Infiniband - practicalities for small clusters

2004e.html#43 security taxonomy and CVE

2004f.html#20 Why does Windows allow Worms?

2004h.html#2 Adventure game (was:PL/? History (was Hercules))

2004j.html#28 Vintage computers are better than modern crap !

2004j.html#29 Vintage computers are better than modern crap !

2004j.html#37 Vintage computers are better than modern crap !

2004j.html#38 Vintage computers are better than modern crap !

2004j.html#46 Vintage computers are better than modern crap !

2004j.html#47 Vintage computers are better than modern crap !

2004j.html#58 Vintage computers are better than modern crap !

2004k.html#2 Linguistic Determinism

2004k.html#5 Losing colonies

2004k.html#6 Losing colonies

2004k.html#13 FAST TCP makes dialup faster than broadband?

2004l.html#21 "Perfect" or "Provable" security both crypto and non-crypto?

2004l.html#40 "Perfect" or "Provable" security both crypto and non-crypto?

2004l.html#41 "Perfect" or "Provable" security both crypto and non-crypto?

2004m.html#25 Shipwrecks

2004m.html#26 Shipwrecks

2004m.html#27 Shipwrecks

2004m.html#28 Shipwrecks

2004m.html#34 tracking 64bit storage

2004m.html#60 Shipwrecks

2004p.html#21 need a firewall

2004p.html#46 US-CERT Technical Cyber Security Alert TA04-336A -- another buffer overflow

2004q.html#2 [Lit.] Buffer overruns

2004q.html#3 [Lit.] Buffer overruns

2004q.html#4 [Lit.] Buffer overruns

2004q.html#5 [Lit.] Buffer overruns

2004q.html#7 [Lit.] Buffer overruns

2004q.html#8 [Lit.] Buffer overruns

2004q.html#9 [Lit.] Buffer overruns

2004q.html#10 [Lit.] Buffer overrun

2004q.html#11 [Lit.] Buffer overruns

2004q.html#12 [Lit.] Buffer overruns

2004q.html#13 [Lit.] Buffer overruns

2004q.html#14 [Lit.] Buffer overruns

2004q.html#15 [Lit.] Buffer overruns

2004q.html#17 [Lit.] Buffer overruns

2004q.html#26 [Lit.] Buffer overruns

2004q.html#28 [Lit.] Buffer overruns

2004q.html#31 Integer types for 128-bit addressing

2004q.html#35 [Lit.] Buffer overruns

2004q.html#43 [Lit.] Buffer overruns

2004q.html#47 [Lit.] Buffer overruns

2004q.html#48 [Lit.] Buffer overruns

2004q.html#50 [Lit.] Buffer overruns

2004q.html#51 [Lit.] Buffer overruns

2004q.html#74 [Lit.] Buffer overruns

2004q.html#78 [Lit.] Buffer overruns

2004q.html#80 [Lit.] Buffer overruns

2004q.html#81 [Lit.] Buffer overruns

2004q.html#82 [Lit.] Buffer overruns

2004q.html#83 [Lit.] Buffer overruns

2004q.html#84 [Lit.] Buffer overruns

2005.html#0 [Lit.] Buffer overruns

2005.html#1 [Lit.] Buffer overruns

2005.html#3 [Lit.] Buffer overruns

2005.html#8 [Lit.] Buffer overruns

2005.html#32 8086 memory space [was: The Soul of Barb's New Machine]

2005.html#51 something like a CTC on a PC

2005b.html#17 [Lit.] Buffer overruns

2005b.html#20 [Lit.] Buffer overruns

2005b.html#21 [Lit.] Buffer overruns

2005b.html#30 [Lit.] Buffer overruns

2005b.html#31 [Lit.] Buffer overruns

2005b.html#33 [Lit.] Buffer overruns

2005b.html#34 [Lit.] Buffer overruns

2005b.html#35 [Lit.] Buffer overruns

2005b.html#37 [Lit.] Buffer overruns

2005b.html#39 [Lit.] Buffer overruns

2005b.html#42 [Lit.] Buffer overruns

2005b.html#43 [Lit.] Buffer overruns

2005b.html#45 [Lit.] Buffer overruns

2005b.html#46 [Lit.] Buffer overruns

2005b.html#48 [Lit.] Buffer overruns

2005b.html#52 [Lit.] Buffer overruns

2005b.html#60 [Lit.] Buffer overruns

2005b.html#61 [Lit.] Buffer overruns

2005b.html#63 [Lit.] Buffer overruns

2005b.html#64 [Lit.] Buffer overruns

2005b.html#66 [Lit.] Buffer overruns

2005c.html#5 [Lit.] Buffer overruns

2005c.html#13 [Lit.] Buffer overruns

2005c.html#14 [Lit.] Buffer overruns

2005c.html#28 [Lit.] Buffer overruns

2005c.html#29 [Lit.] Buffer overruns

2005c.html#30 [Lit.] Buffer overruns

2005c.html#31 [Lit.] Buffer overruns

2005c.html#33 [Lit.] Buffer overruns

2005c.html#34 [Lit.] Buffer overruns

2005c.html#37 [Lit.] Buffer overruns

2005c.html#40 [Lit.] Buffer overruns

2005c.html#44 [Lit.] Buffer overruns

2005c.html#47 [Lit.] Buffer overruns

2005c.html#48 [Lit.] Buffer overruns

2005c.html#52 [Lit.] Buffer overruns

2005c.html#55 [Lit.] Buffer overruns

2005d.html#53 [Lit.] Buffer overruns

2005d.html#54 [Lit.] Buffer overruns

2005d.html#55 [Lit.] Buffer overruns

2005d.html#65 [Lit.] Buffer overruns

2005d.html#67 [Lit.] Buffer overruns

2005d.html#69 [Lit.] Buffer overruns

2005f.html#39 [Lit.] Buffer overruns

2005j.html#42 Public disclosure of discovered vulnerabilities

2005j.html#46 Public disclosure of discovered vulnerabilities

2005j.html#48 Public disclosure of discovered vulnerabilities

2005j.html#49 Public disclosure of discovered vulnerabilities

2005j.html#57 Ancient history

2005j.html#60 Ancient history

2005j.html#61 Ancient history

2005j.html#64 More on garbage

2005k.html#24 Ancient history

2005o.html#10 Virtual memory and memory protection

2005p.html#12 Is there any RFC for telnet proxy?

aadsm21.htm#6 Clearing sensitive in-memory data in perl

aadsm21.htm#9 Clearing sensitive in-memory data in perl

aadsm21.htm#10 Clearing sensitive in-memory data in perl

2005r.html#35 X68-64 buffer overflow exploits and the borrowed code chunks exploitation techniqu

2005r.html#36 X68-64 buffer overflow exploits and the borrowed code chunks exploitation technique

2005r.html#37 X68-64 buffer overflow exploits and the borrowed code chunks exploitation technique

2006c.html#27 Mount DASD as read-only

2006c.html#28 Mount DASD as read-only

2006d.html#8 IBM 610 workstation computer

2006d.html#9 IBM 610 workstation computer

aadsm23.htm#3 News and Views - Mozo, Elliptics, eBay + fraud, naïve use of TLS and/or tokens

2006p.html#51 what's the difference between LF(Line Fee) and NL (New line) ?

2006q.html#7 Linux More Secure on System z?

aadsm25.htm#40 Why security training is really important (and it ain't anything to do with security!)

aadsm25.htm#41 Why security training is really important (and it ain't anything to do with security!)

2006s.html#64 Is the teaching of non-reentrant HLASM coding practices ever defensible?

2006x.html#20 "The Elements of Programming Style"

2006x.html#29 "The Elements of Programming Style"

2006x.html#35 "The Elements of Programming Style"

2006y.html#15 "The Elements of Programming Style"

2007b.html#12 Special characters in passwords was Re: RACF - Password rules

2007h.html#41 Fast and Safe C Strings: User friendly C macros to Declare and use C Strings

2007l.html#11 John W. Backus, 82, Fortran developer, dies

2007l.html#18 Non-Standard Mainframe Language?

2007l.html#21 Non-Standard Mainframe Language?

2007l.html#55 Scholars needed to build a computer history bibliography

aadsm27.htm#48 If your CSO lacks an MBA, fire one of you

aadsm27.htm#50 If your CSO lacks an MBA, fire one of you

aadsm27.htm#53 Doom and Gloom spreads, security revisionism suggests "H6.5: Be an adept!"

2007o.html#50 64 gig memory

2007p.html#71 Translation of IBM Basic Assembler to C?

2007q.html#31 what does xp do when system is copying

2007r.html#57 Translation of IBM Basic Assembler to C?

2007t.html#9 How the pages tables of each segment is located

2007t.html#21 How the pages tables of each segment is located

2008d.html#58 Linux zSeries questions

2008e.html#22 Linux zSeries questions

2008e.html#49 Any benefit to programming a RISC processor by hand?

2008f.html#64 Panic in Multicore Land

2008g.html#29 CA ESD files Options

2008j.html#77 CLIs and GUIs

top , by subject : technology , networking , public key , Boyd - home

Assurance

aadsmore.htm#client3 Client-side revocation checking capability

aadsm2.htm#privacy Identification and Privacy are not Antinomies

aadsm2.htm#useire3 U.S. & Ireland use digital signature

aadsm2.htm#stall EU digital signature initiative stalled

aadsm2.htm#straw AADS Strawman

aadsm2.htm#strawm2 AADS Strawman

aadsm2.htm#strawm3 AADS Strawman

aadsm3.htm#cstech4 cardtech/securetech & CA PKI

aadsm3.htm#cstech5 cardtech/securetech & CA PKI

aadsm3.htm#cstech9 cardtech/securetech & CA PKI

aadsm3.htm#cstech10 cardtech/securetech & CA PKI

aadsm3.htm#cstech12 cardtech/securetech & CA PKI

aadsm3.htm#cstech13 cardtech/securetech & CA PKI

aadsm3.htm#kiss2 Common misconceptions, was Re: KISS for PKIX. (Was: RE: ASN.1 vs XML (used to be RE: I-D ACTION :draft-ietf-pkix-scvp-00.txt))

aadsm3.htm#kiss8 KISS for PKIX

aadsm3.htm#kiss9 KISS for PKIX .... password/digital signature

aadsm5.htm#asrn1 Assurance, e-commerce, and some x9.59 ... fyi

aadsm5.htm#asrn2 Assurance, e-commerce, and some x9.59 ... fyi

aadsm5.htm#asrn3 Assurance, e-commerce, and some x9.59 ... fyi

aadsm5.htm#asrn4 assurance, X9.59, etc

aadsm5.htm#shock revised Shocking Truth about Digital Signatures

aadsm5.htm#shock2 revised Shocking Truth about Digital Signatures

aadsm6.htm#terror3 [FYI] Did Encryption Empower These Terrorists?

aadsm7.htm#rubberhose Rubber hose attack

aadsm8.htm#softpki19 DNSSEC (RE: Software for PKI)

aadsm9.htm#cfppki5 CFP: PKI research workshop

aadsm9.htm#cfppki10 CFP: PKI research workshop

aadsm9.htm#cfppki11 CFP: PKI research workshop

aadsm10.htm#cfppki13 CFP: PKI research workshop

aadsm10.htm#cfppki18 CFP: PKI research workshop

aadsm10.htm#paiin PAIIN security glossary & taxonomy

aadsm10.htm#keygen2 Welome to the Internet, here's your private key

ansiepay.htm#breach Security breach raises questions about Internet shopping

aepay3.htm#votec (my) long winded observations regarding X9.59 & XML, encryption and certificates

aepay3.htm#x959risk1 Risk Management in AA / draft X9.59

aepay3.htm#x959risk4 Risk Management in AA / draft X9.59

aepay4.htm#comcert3 Merchant Comfort Certificates

aepay6.htm#idf Intel Developer's Forum ... fyi

aepay6.htm#ecom some electronic commerce discussion from dcsb & IDF

aepay6.htm#cacr7 7th CACR Information Security Workshop

aepay6.htm#asrn5 assurance, X9.59, etc

aepay10.htm#22 PKI: An Insider's View

2000.html#39 "Trusted" CA - Oxymoron?

2000b.html#40 general questions on SSL certificates

2000g.html#33 does CA need the proof of acceptance of key binding?

2001.html#50 What exactly is the status of the Common Criteria

2001c.html#34 PKI and Non-repudiation practicalities

2001d.html#41 solicit advice on purchase of digital certificate

2001d.html#58 Very CISC Instuctions (Was: why the machine word size ...)

2001e.html#26 Can I create my own SSL key?

2001e.html#35 Can I create my own SSL key?

2001e.html#40 Can I create my own SSL key?

2001e.html#59 Design (Was Re: Server found behind drywall)

2001g.html#0 FREE X.509 Certificates

2001h.html#7 PKI/Digital signature doesn't work

2001h.html#16 D

2001h.html#64 Net banking, is it safe???

2001i.html#52 misc loosely-coupled, sysplex, cluster, supercomputer, & electronic commerce

2001i.html#57 E-commerce security????

2001j.html#5 E-commerce security????

2001j.html#54 Does "Strong Security" Mean Anything?

2001n.html#71 Q: Buffer overflow

2001n.html#91 Buffer overflow

2002.html#28 Buffer overflow

2002.html#29 Buffer overflow

2002.html#32 Buffer overflow

2002c.html#35 TOPS-10 logins (Was Re: HP-2000F - want to know more about it)

2002d.html#16 Mainframers: Take back the light (spotlight, that is)

2002e.html#17 Smart Cards

2002e.html#58 O'Reilly C Book

2002e.html#71 Blade architectures

2002e.html#73 Blade architectures

2002f.html#23 Computers in Science Fiction

2002f.html#24 Computers in Science Fiction

2002f.html#27 Security Issues of using Internet Banking

2002f.html#28 Security Issues of using Internet Banking

2002f.html#31 Security and e-commerce

2002h.html#68 Are you really who you say you are?

2002h.html#39 Beginner question on Security

2002j.html#55 AADS, ECDSA, and even some TCPA

aadsm12.htm#16 Feasability of Palladium / TCPA

2002k.html#11 Serious vulnerablity in several common SSL implementations?

2002k.html#43 how to build tamper-proof unix server?

2002k.html#44 how to build tamper-proof unix server?

2002l.html#5 What good is RSA when using passwords?

2002l.html#9 Moore law

2002l.html#11 IEEE article on intelligence and security

2002l.html#12 IEEE article on intelligence and security

2002l.html#23 >Moore law

2002l.html#42 Thirty Years Later: Lessons from the Multics Security Evaluation

2002o.html#14 Home mainframes

2003.html#34 Calculating expected reliability for designed system

2003.html#37 Calculating expected reliability for designed system

2003.html#38 Calculating expected reliability for designed system

2003.html#48 InfiniBand Group Sharply, Evenly Divided

2003.html#49 InfiniBand Group Sharply, Evenly Divided

2003.html#52 SSL & Man In the Middle Attack

2003b.html#53 Microsoft worm affecting Automatic Teller Machines

2003b.html#54 Microsoft worm affecting Automatic Teller Machines

2003e.html#11 PDP10 and RISC

2003e.html#73 Security Certifications?

2003e.html#74 Security Certifications?

2003g.html#62 IBM says AMD dead in 5yrs ... -- Microsoft Monopoly vs. IBM

2003g.html#65 IBM says AMD dead in 5yrs ... -- Microsoft Monopoly vs. IBM

2003j.html#15 A Dark Day

2003j.html#25 Idea for secure login

2003j.html#30 How is a smartcard created?

2003j.html#36 CC vs. NIST/TCSEC - Which do you prefer?

2003j.html#44 Hand cranking telephones

2003j.html#45 Hand cranking telephones

aadsm14.htm#50 E-banking is board-level Issue, Says Basel Committee

aadsm14.htm#52 Committee calls for better e-banking security management

2003k.html#23 virtual machines for security

2003k.html#25 virtual machines for security

2003l.html#19 Secure OS Thoughts

2003l.html#20 Secure OS Thoughts

2003l.html#22 Secure OS Thoughts

2003l.html#26 Secure OS Thoughts

aepay12.htm#25 Cyber Security In The Financial Services Sector

aadsm15.htm#23 NCipher Takes Hardware Security To Network Level

aadsm15.htm#24 Homeland Security chief mulls SEC cybersecurity filings

2003n.html#21 Is it possible to devise a public-key cipher with no flaws?

aepay12.htm#36 DNS, yet again

2003n.html#31 hardware vs software security

aadsm15.htm#31 Electronic Safety and Soundness: A Four Piller Approach; Public Policy Issues

aadsm15.htm#34 VS: On-line signature standards (slight addenda)

aadsm15.htm#36 VS: On-line signature standards

aadsm15.htm#38FAQ: e-Signatures and Payments

aadsm15.htm#39 FAQ: e-Signatures and Payments

aadsm16.htm#1 FAQ: e-Signatures and Payments

2003o.html#15 secure delete on 3390

2003o.html#20 IS CP/M an OS?

2003o.html#44 Biometrics

2003o.html#45 Any experience with "The Last One"?

2003o.html#46 What 'NSA'?

2003o.html#50 Pub/priv key security

aadsm16.htm#8 example: secure computing kernel needed

2003p.html#4 Does OTP need authentication?

aadsm16.htm#9 example: secure computing kernel needed

2003p.html#10 Secure web logins w random passwords

aadsm16.htm#12 Difference between TCPA-Hardware and a smart card (was: example: secure computing kernel needed)

aadsm16.htm#20 Ousourced Trust (was Re: Difference between TCPA-Hardware and a smart card and something else before

2003p.html#37 The BASIC Variations

aadsm17.htm#0 Difference between TCPA-Hardware and a smart card (was: example: secure computing kernel needed)

2004.html#30 passwords

2004.html#36 merged security taxonomy & glossary

2004.html#37 When rsa vs dsa

2004.html#38 When rsa vs dsa

2004b.html#8 Mars Rover Not Responding

2004b.html#10 Mars Rover Not Responding

2004b.html#44 Foiling Replay Attacks

2004b.html#45 Foiling Replay Attacks

2004b.html#48 Automating secure transactions

2004b.html#51 Using Old OS for Security

2004c.html#4 OS Partitioning and security

aadsm17.htm#39 The future of security

aadsm17.htm#40 The future of security

aadsm17.htm#42 Article on passwords in Wired News

2004h.html#4 Adventure game (was:PL/? History (was Hercules))

aadsm17.htm#47 authentication and authorization ... addenda

aadsm17.htm#57 dual-use digital signature vulnerability

aadsm17.htm#59 dual-use digital signature vulnerability

aadsm18.htm#1 dual-use digital signature vulnerability

aadsm18.htm#2 dual-use digital signature vulnerability

aadsm18.htm#4 dual-use digital signature vulnerability

aadsm18.htm#12 dual-use digital signature vulnerability

aadsm18.htm#13 dual-use digital signature vulnerability

2004h.html#51 New Method for Authenticated Public Key Exchange without Digital Certificates

2004h.html#52 New Method for Authenticated Public Key Exchange without Digital Certificates

2004h.html#53 New Method for Authenticated Public Key Exchange without Digital Certificates

2004h.html#54 New Method for Authenticated Public Key Exchange without Digital Certificates

2004h.html#55 New Method for Authenticated Public Key Exchange without Digital Certificates

2004h.html#56 New Method for Authenticated Public Key Exchange without Digital Certificates

2004h.html#57