There is a way to distribute the risk such that any single print-shop gains no benefit from copying your files: Visual Cryptography. But it is esoteric and it is hard-core - versus simply buying your ...

Considering that your public key is only usable by a computer1; you can remove clutter from your business card by having all electronic data accessible online and referred to by a QR code. The link ...

All or None. The singly-rooted CA trust paradigm we inherited from the 90s is almost entirely broken. Vanilla browsers do not track or alert if the Certificate Authority backing a SSL certificate ...

Two reasons I can think of: Attackers will know which servers are more valuable to attack. e.g. TEST_BOX_04 vs DB_BACKUP_02 Attackers will have better idea of the topology of your network: How many ...

No. In addition to the obvious government Root CAs in your trust stores; the NSA is a spy agency and as such has likely already stolen the private keys of several other CAs. If they are devious, they'...

This is part of an expert witnesses' statement (probably an FBI technician). You can find it in a footnote on page 28 of the original sealed complaint: The code containing the IP address for the ...

No. Security remains the same + extra cognitive overhead. Presumably the plugin uses OATH HOTP where the KeePass file or master key is re-encypted after each access with the next one-time-password. ...

Not using a cryptographic hash - no. But you could use a Fuzzy Hash or Locality-sensitive Hashing. Fuzzy hashes are different from normal hashes in that they allow similar content to cluster together ...

Can this site be trusted? No. Well, not if you consider GoDaddy subverted or subvertable. As even the published serial number or website could be an FBI plant ;-). But if you want your emails, you'...

In light of the latest NSA revelations, I'd say the entire concept of commercial Root CAs is fundamentally flawed and you should just buy from the cheapest CA whose root certificate is installed in ...

A bit of background as to what Yubikey is first: Yubikey is a variation on a common type of device known as a One Time Password generator. Basically a mini-computer that generates an essentially ...

Steganography would benefit from Dave's operational secrecy better than Cryptography. This might be what Dave was intuitively aiming for. Cryptography Each cryptographic solution benefits from ...

Is it possible to use OpenPGP/SSH key pairs to authenticate with a web application in a secure fashion to replace traditional password-based authentication? Yes. It is quite possible. If it is ...

Would taking a photo using a smartphone and using the RAW file's bytes count as a good way to get a large random number quickly? In and of itself, no. Digital cameras are designed to capture signal ...

Vendors of fingerprint scanners usually prefer security-through-obscurity, so open specifications of the hardware module ("TouchID" in this case) are unlikely available. Apple's firmware secrecy doesn'...

If you use a public VPN service: Yes. You know it's a VPN; so can a third-party. Dedicated IP reduces the problem but doesn't eliminate it, as an agency could simply ask for all IPs controlled or ...

First up, I strongly recommend you offload your PCI-DSS compliance obligations entirely by moving the responsibility to capture and process payment credentials over to the payment gateway provider. ...

Let's consider the oldest biometric method - fingerprinting. Although fingerprinting has been around since the 1890s as a forensic tool, there is still no uniform international standard for ...

Browser plugins like Certificate Patrol for Firefox can warn you of changes since the last or first time you visited; but you'll find that a lot of legitimate network topology and load-balancing ...

An alternate approach and a legitimate one is to simply use a random Class 4 UUID1. This way you detach your keys from any changes in material circumstances and any shifts in your privacy attitude in ...

If I put my black hat on (not this black hat... actually that hat also works): An ISP can simply perform a man-in-the-middle-attack on any of your HTTP downloads of applications or their patches and ...

Steganography relies on the latent noise-to-signal ratio of the analogue source material. The "least significant" bits (actual bits will depend on codec) are overwritten by an encrypted stream of ...

Possibly, but given their size - much more likely to download a generation tool and a word pattern list. Rainbow tables are a carefully comprised collection of dictionary words and probable ...

SQRL provides no ground breaking improvements. QR codes are an optical barcode format useful for short content distribution - nothing more. Any "auto-login" situation that SQRL is trying to solve ...

Most of the problems outlined by Mr Snowden are essentially side-channel attacks. The algorithms aren't suddenly less robust but rather the software and infrastructure that uses these algorithms. ...

Sounds like a checkbox item on an audit list. I don't see any true security other than perhaps making it harder for the user to accidentally forward on both emails to the same third party or mailing ...

Wanting to be noticed by the Fingermen - an odd inversion of the usual desire :-) There are ways, but I'd refrain from some of them unless you are never going to visit the USA* Use religious phrases ...

There are two general levels of anonymity: Good enough for hiding from other routine users of the internet. Good enough for hiding from government law enforcement and surveillance agencies. As you ...

In addition to acting as "something you have", the option to use a keyfile allows for more flexibility in the other two factors ("something you know" and "something you are") without having to ...

RAM is volatile and is not considered storage for PCI-DSS purposes - so long as the device that contains the RAM is otherwise PCI-DSS compliant. In a similar fashion, temporary storage of the CVC/CVV ...