Dan Learns Stuff

During the DEF CON 26 DC101 Panel , someone (probably highwiz) asked one of the n00bs they brought on-stage, "What makes you a hacker?...

Three years ago in July, I completed Dan Boneh's online cryptography course with distinction through Coursera's Cryptography 1 .  Si...

A friend returned from San Diego Comic Con 2018 with an RFID bracelet used to track users in the Amazon Fire TV experience (on Twitter, #Fir...

It turns out that using the convenience function ENCRYPT$ENCRYPT_ONE_RECORD on OpenVMS for AES CBC does something squirrelly.  It will not l...

Above is Dan Kaminsky's keynote at the inaugural DEF CON China.  It was nominally about Spectre and Meltdown, and I thought it was im...

Compare and Contrast: Tesla 's response to researchers:   http://www.businessinsider.com/heres-how-tesla-will-win-the-coming-hacking...

I took Ethan to the event run in parallel with DEF CON, R00tz Asylum .  I think he had a blast as they covered a lot of traditional hack...

This post is part of a series about building electro-mechnical PIN-cracking robots,  R2B2 and C3BO . This is a proof of concept for @Jus...

Security The PCI Council is delusional: claims the standard is solid when breach after breach confirms it is not.  Blames the victims for ...

Security Researcher gets hacked and details how he investigated, mitigated, and responded to it.  Enjoyable 'mea culpa.' https://...

NSA and Government Shame on Feinstein: There is a cost to surveillance. http://www.siliconvalleywatcher.com/mt/archives/2013/12/shame_on_f...

Adobe Breach Link Blitz: Root Cause: Cold Fusion http://blog.imperva.com/2013/11/the-rise-and-rise-of-coldfusion-driven-breaches.ht...

You know what's awesome? When people go from "somebody ought to", to "I ought to". — Dan Kaminsky (@dakami) November...