I couldn't talk you out of it, huh? Best of luck to you, and I hope you enjoy it as much as I did. To help you on your way, though, here are a few resources I found helpful and which I suggest to you. (Note: all links are ...

We're been recruiting like mad at my place of work, which means that I've been interviewing a lot of people recently. Many of them are just graduating college, and are trying to decide whether to join the Real World or to continue on to grad school. Many of ...

My employer's incredible need for computer security experts continues unabated. Some new job-postings for you:

• Formal Methods Researcher
• Scientific Intellegence Analyst
• Malicious Code Analysis Researcher

Descriptions under the fold, and the full list of open jobs can be found here:

more ...

So, GSM (Groupe Spécial Mobile) is the most widely-used standard for cellular communication. Wikipedia tells me that 80% of the cellular market uses this standard, representing about 4.3 billion people. And guess what? The encryption algorithm of this standard is completely broken-- according to more ...

If you are thinking of going to the IEEE Computer Security Foundations Symposium (CSF) this year, please be aware that you must register by TODAY if you want to have a print proceedings at the event itself. For various reasons (worthy of a blog-post in their own right) this year ...

I would ordinarily regard this as a rather obscure piece of esoterica, too technical to blog about (and merely a technical report, besides) but:

1. My beloved readers seem to like topics more technical that I would have thought, and (more importantly)
2. It's my piece of obscure esoterica.

So, tech ...

I am proud to announce that I have been invited to join the Program Committee for The 12th International Symposium on Stabilization, Safety, and Security of Distributed Systems (SSS 2010)-- Crypto Track. That is: this venue has a number of technical tracks, roughly reflecting different areas of study. The crypto ...

While researching something unrelated, I stumbled across an interesting feature of CiteSeerX: "estimated venue impact factors." That is, it attempts to rank CS-related conferences and journals in terms of their 'impact.' However, something seems to be wrong with their algorithm-- there is no way that a single sub-specialty (security) can ...

First, I should warn my non-CS readers: I had originally decided that this paper was too technical to blog about. But then I received a request that I actually discuss this specific paper, and who am I to say 'no' to a beloved reader? So be aware that this one ...

I am pleased to announce that the 2010 Computer Security Foundations Symposium will be held in Edinburgh, UK this year, in conjunction with FLoC 2010. Once again, I am honored to serve as the Publications Chair. I also note that the ...

I have no idea how this paper came about, but I'm glad it did. The first author is a computer-science professor at Cambridge University specializing in privacy and systems security. The second author is a professional scam ...

For ten days at the beginning of 2009, a team of computer-security researchers managed to take control of a live, real-world, criminal botnet. Over those days, they observed (and recorded) the botnet harvest over 70GB of stolen data (password, bank-account number, etc.) from almost two hundred thousand subverted machines. Why ...

Quick: what is the following text about?

... the result of the collapse of large portions of the three provinces to have a syntax which can be found in the case of Canada and the UK, for the carriage of goods were no doubt first considered by the British, and the ...

Seeing as this is ostensibly a crypto blog, I'd like to comment on a paper from earlier this year: It's no secret-- Measuring the security and reliability of authentication via 'secret' questions, by Stuart Schechter, A. J. Bernheim Brush, and Serge Egelman. This paper looks at the security ...