Skip to content
0
  • Home
  • Piero Bosio
  • Blog
  • World
  • Fediverso
  • News
  • Categories
  • Old Web Site
  • Recent
  • Popular
  • Tags
  • Users
  • Home
  • Piero Bosio
  • Blog
  • World
  • Fediverso
  • News
  • Categories
  • Old Web Site
  • Recent
  • Popular
  • Tags
  • Users
Skins
  • Light
  • Brite
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (No Skin)
  • No Skin
Collapse

Piero Bosio Social Web Site Personale Logo Fediverso

Social Forum federato con il resto del mondo. Non contano le istanze, contano le persone
stevebellovin@infosec.exchangeundefined

Steve Bellovin

@stevebellovin@infosec.exchange
About
Posts
74
Topics
38
Shares
0
Groups
0
Followers
0
Following
0

View Original

Posts

Recent Best Controversial

  • Extremely disappointed and saddened by the revelations about Cesar Chavez.
    stevebellovin@infosec.exchangeundefined stevebellovin@infosec.exchange

    @mattblaze I never met him, but way back when, he was one of my idols. I'm gratified, at least, that the UFW is currently pausing any celebrations, though the NY Times did note that they never took earlier allegations seriously enough to do anything.

    Uncategorized

  • From Hoare's Turing Award lecture, 1980:
    stevebellovin@infosec.exchangeundefined stevebellovin@infosec.exchange

    From Hoare's Turing Award lecture, 1980:

    "The first principle was security: … A consequence of this principle is that every occurrence of every subscript of every subscripted variable was on every occasion checked at run time against both the upper and the lower declared bounds of the array. … I note with fear and horror that even in 1980, language designers and users have not learned this lesson. In any respectable branch of engineering, failure to observe such elementary precautions would have long been against the law."

    Uncategorized

  • RIP Tony Hoare.
    stevebellovin@infosec.exchangeundefined stevebellovin@infosec.exchange

    @amoroso @aka_pugs Sigh. One of the great ones has passed.

    Uncategorized retrocomputing

  • #ScribesAndMakers day 6: How do you choose a title for your book?
    stevebellovin@infosec.exchangeundefined stevebellovin@infosec.exchange

    @mattblaze @cstross Titles are considered part of marketing, which is the publisher's job. When Ches and I were writing our first book, the working title was "Internet Security and Firewall Gateways". Our editor felt that something like that would get lost in the noise, hence the change to "Firewalls and Internet Security". We had trouble agreeing on a cover, though. The editor sent us a cartoon, which we loved—but he'd sent it as a joke. But it was very appropriate, so he went off and negotiated the rights. The final cover is at https://wilyhacker.com/1e/cover.jpg.

    Uncategorized scribesandmakers

  • Whoops. The data broker giant LexisNexis has suffered another data breach.
    stevebellovin@infosec.exchangeundefined stevebellovin@infosec.exchange

    @karlauerbach @suzannealdrich @paul_ipv6 @briankrebs Here's a great history source: https://www.europarl.europa.eu/RegData/etudes/BRIE/2020/651923/EPRS_BRI(2020)651923_EN.pdf

    Uncategorized

  • Whoops. The data broker giant LexisNexis has suffered another data breach.
    stevebellovin@infosec.exchangeundefined stevebellovin@infosec.exchange

    @karlauerbach @suzannealdrich @paul_ipv6 @briankrebs So much was known 60 years ago. https://www.cs.columbia.edu/~smb/talks/vassar-privacy.pdf summarizes some of it; some of my legal writing has citations to even more sources. The first privacy law in the modern world was in Hesse, in 1970; the phrase "data shadow" was coined no later than 1973 by Kerstin Anér, a member of the Swedish parliament. We should not be where we are today! (Credit reports, though, go way back, and originally consisted of gossip collected from servants about their employers.)

    Uncategorized

  • Whoops. The data broker giant LexisNexis has suffered another data breach.
    stevebellovin@infosec.exchangeundefined stevebellovin@infosec.exchange

    @suzannealdrich @paul_ipv6 @briankrebs There are several good state laws to copy, such as California's and Colorado's, and of course there's the GDPR. There was a decent Federal bill a few years ago but Pelosi killed it, because it preempted stronger state laws like California's.
    Industry, of course, doesn't want any of this. "Data is the new oil!" No (and I wish I'd thought up this line, and I don't know who did), it's the new plutonium—small amounts are very toxic, and too much concentrated in one place can have very bad consequences. But if there are going to be privacy laws, they want one law in the US, not 50. In the meantime, they're pushing (and drafting) weak state privacy laws, some of which have been enacted.
    Of course, I'll believe that things like the GDPR actually work when Facebook et al. have to pull out of the EU. I do, though, suspect that we're thinking about privacy regulation incorrectly. The paradigm of notice and consent is >50 years old and it doesn't work. My thoughts on that are at https://gwjolt.org/files/volume_1/GW_JOLT_1_1_Bellovin.pdf.

    Uncategorized

  • Whoops. The data broker giant LexisNexis has suffered another data breach.
    stevebellovin@infosec.exchangeundefined stevebellovin@infosec.exchange

    @briankrebs Long-time mantra of mine: data that doesn’t exist can’t be stolen.

    Uncategorized

  • Not sure who needs to see this, but…
    stevebellovin@infosec.exchangeundefined stevebellovin@infosec.exchange

    Not sure who needs to see this, but…

    From the Wikipedia page on the Nuremberg trials: "The International Military Tribunal agreed with the prosecution that aggression was the gravest charge, stating in its judgment that because "war is essentially an evil thing", "to initiate a war of aggression, therefore, is not only an international crime; it is the supreme international crime differing only from other war crimes in that it contains within itself the accumulated evil of the whole".

    From the Wikipedia page on Hideki Tojo: he was "found guilty of, among other actions, waging wars of aggression; war in violation of international law; unprovoked or aggressive war against various nations; and ordering, authorizing, and permitting inhumane treatment of prisoners of war".

    Is this at all relevant today?

    Uncategorized

  • So who's next to get a nuclear bomb?
    stevebellovin@infosec.exchangeundefined stevebellovin@infosec.exchange

    @mattblaze @ncweaver.skerry-tech.com Beat me to it. But see (or at least hear) https://www.youtube.com/watch?v=oRLON3ddZIw

    Uncategorized

  • Already bored with the SotU
    stevebellovin@infosec.exchangeundefined stevebellovin@infosec.exchange

    @mattblaze Sorry, Matt, see you on the other side.

    Uncategorized

  • The Olympics closing ceremony is on the TV here.
    stevebellovin@infosec.exchangeundefined stevebellovin@infosec.exchange

    The Olympics closing ceremony is on the TV here. I think they missed a trick—the musicians and singers should be wearing the kind of skin suits that the athletes in the speed events have been wearing…

    Uncategorized

  • Mosquitoes' Bloodsucking Tubes Could Enable High-Definition 3D Printing
    stevebellovin@infosec.exchangeundefined stevebellovin@infosec.exchange

    @cstross Imagine, if you will, mosquito breeding facilities. Then imagine a hack or natural disaster or carelessness…

    Uncategorized

  • AT&T Long Lines "Oak Hill" Tower, San Jose, CA. 2021.
    stevebellovin@infosec.exchangeundefined stevebellovin@infosec.exchange

    @mattblaze @20002ist That department is referenced several times in Rhodes' "The Making of the Atomic Bomb".

    Uncategorized photography

  • AT&T Long Lines "Oak Hill" Tower, San Jose, CA. 2021.
    stevebellovin@infosec.exchangeundefined stevebellovin@infosec.exchange

    @20002ist @mattblaze Ooh, and right near Rock Creek Park.

    Uncategorized photography

  • SCOTUS has struck down Trump's tariffs, 6-3.
    stevebellovin@infosec.exchangeundefined stevebellovin@infosec.exchange

    SCOTUS has struck down Trump's tariffs, 6-3. (Alito, Thomas, and Kavanaugh dissented.) Roberts wrote that the statute simply didn't authorize such behavior by Trump.

    Uncategorized

  • Not a gift from the geeks.
    stevebellovin@infosec.exchangeundefined stevebellovin@infosec.exchange

    @beyondmachines1 @briankrebs Beware of geeks bearing grifts?

    Uncategorized

  • FAA just announced a 10 day emergency temporary restricted area for a 10 mile radius around El Paso.
    stevebellovin@infosec.exchangeundefined stevebellovin@infosec.exchange

    @jianmin @squillace @mattblaze @tinker The responses to that post are—disturbing.

    Uncategorized

  • FAA just announced a 10 day emergency temporary restricted area for a 10 mile radius around El Paso.
    stevebellovin@infosec.exchangeundefined stevebellovin@infosec.exchange

    @mattblaze @tinker @jianmin My two guesses: it has something to do with mass deportation flights, or it's a practice run for punishing larger blue area. But I think that @cstross has it right: the airport will be involved in or close to a military operation in Mexico.

    Uncategorized

  • FAA just announced a 10 day emergency temporary restricted area for a 10 mile radius around El Paso.
    stevebellovin@infosec.exchangeundefined stevebellovin@infosec.exchange

    @mattblaze @tinker @jianmin My only two guesses verge on the conspiratorial, but these days that could be very likely.

    Uncategorized
  • 1
  • 2
  • 3
  • 4
  • 1 / 4
  • Login

  • Login or register to search.
  • First post
    Last post