Bruce Schneier | |||||||||||
Schneier on SecurityA blog covering security and security technology. « Insecure Chrome Extensions | Main | HTC Android Vulnerability » September 30, 2011Friday Squid Blogging: Interesting Squid RecipesPlus a slide show of pretty dishes. Posted on September 30, 2011 at 4:42 PM • 21 Comments To receive these entries once a month by e-mail, sign up for the Crypto-Gram Newsletter. Spellucci • September 30, 2011 4:59 PM Questions abound about the Amazon Silk browser. What about handling secure (https) connections? We will establish a secure connection from the cloud to the site owner on your behalf for page requests of sites using SSL (e.g. https://example.com). Amazon Silk will facilitate a direct connection between your device and that site. Any security provided by these particular sites to their users would still exist. Exactly how will SSL work when using Silk? Gabriel • September 30, 2011 5:09 PM OT Humor: OT Serious: mcb • September 30, 2011 5:26 PM Massachusetts Man Charged in Plot to Bomb Pentagon Using Model Airplane... You'd think our domestic jihadi wannabes would have learned by now that anyone who encourages them to pursue their stupid plan and offers them all the cash they need, a pile of C4, and a mess of AK47s is almost certainly an FBI informant. Oh well, best they lock up this fellow, before he begins running with scissors or refusing to wash his hands after visiting the restroom. Spellucci • September 30, 2011 5:28 PM @Gabriel: good stuff. http://arstechnica.com/business/news/2011/09/... Petréa Mitchell • September 30, 2011 5:45 PM Here's something from a couple weeks ago that I thought would get more attention than it has: a person on the "no fly" list who managed to travel internationally anyway. Daniel • September 30, 2011 8:16 PM So why are model planes "hot" all of a sudden. First there was this gadget from a few months ago: https://rabbit-hole.org/specifications/ Then there is the entrapment of the poor fellow from MA using a model plane, as noted above. And finally there is the premier of this: http://www.kob.com/article/stories/s2305534.shtml It's as if some 12 year old has taken over the security industry. Although maybe I'm just envious. I never could build those things; glue made me sick. A blog reader • September 30, 2011 8:48 PM @Spellucci: Another possible issue with the Silk browser is data mining, mentioned in Techdirt: http://www.techdirt.com/articles/20110929/... The following Washington Post article about autonomous drones executing attacks may be of interest: Clive Robinson • October 1, 2011 8:36 AM @ mcb, "Massachusetts Man Charged in Plot to Bomb Pentagon Using Model Airplane..." Yup not. the brightest light bulb in the corridor. The stupid thing is that all you need to know is fairly freely available on the Internet. However you have to be able to do some basic calcultions (that most pilots get taught) to put such a plan into action. There is a lot of difference. between making a model plane that can carry surveillance type equipment that comes in at a few hundred grams and a block of C4 etc that needs to be several Kgs to make an effective. weapon. Steve Shockley • October 1, 2011 8:42 AM I think model planes are hot because military drones are hot. Perhaps a 12 year old has taken over the Pentagon... aikimark • October 1, 2011 9:40 AM NYC now has a cache of stinger missiles with which to shoot down errant aircraft. I give it 2.5 years before one or more of the missiles is stolen or "goes missing". Gabriel • October 1, 2011 4:56 PM @aikimark: Do you have a source for this? After that press conference, the only thing I heard discussed was that NYPD has a 50 Cal BMG Barrett sniper rifle (probably M107, semi-automatic). If that was the capability the chief was talking about, he was pretty much talking out his a**. While a 50 Cal machine gun can shot down an aircraft, it would be near impossible to hit the engine on an aircraft flying several hundred mph with a semi-automatic. Furthermore, anything big enough to destroy a building is going to have 2 - 4 engines, good luck hitting all of them. Finally, if you shoot down anything large like an airliner, you will have to blow it out of the sky, either an explosion or enough damage to cause it to break apart. This will take one potent missile, and you will not want to do it over a populated area, especially as unlike B-17 pilots in WWII who were trying to crash land safely if they couldn't bail out, some jihadi wannabe is just going to divert the plane to the closest sky scraper. New York's got tons of them. So, I think this is just a bunch of hot air. If you want the job done right, you call the Air Force/Air National Guard. A couple of F-16s can easily intercept anything, and if the aircraft refuses to respond, can shoot them down before they get near a heavily populated area. Some gung-ho cop is not going to be able to do this, missile or gun. aikimark • October 1, 2011 6:25 PM I first saw it here: But it has other sources: There is a troubling report that up to 20000 stinger missiles are missing in Libya. Ezequiel Martin Camara • October 1, 2011 6:35 PM You left out the best squid recipe ever, squid in its own ink (chipirones en su tinta). It is a Basque speciality. http://www.google.co.uk/search?... http://elperal.wordpress.com/2010/05/14/... They say it is the only black sauce in the world. When my grandma made them, we all put old shirts on; the stains are impossible to take out. But the taste is incredible. We would always clean out the pan with a loaf of bread. @ aikimark The "Feds" having a stash of Stingers in Manhattan is a little like Patton wearing pistols on his belt, interesting but not likely to matter. As Gabriel suggests, a timely cellphone call to the national command authority is much more powerful than any MANPAD. At least there are no Stingers riding around in the trunk of an NYPD supervisor's squad car... Justa Thought • October 1, 2011 7:52 PM I wonder if the recent embassy attacks were not so much about physical access, but about forcing the staff to begin destroying crypto, or forcing a switching to other forms of crypto, i.e. hoping to catch some comm secrets? Gabriel • October 1, 2011 8:48 PM @Aikimark: Of course, I am not Jane's, so I have no idea how many are floating around the world or mid-east to begin with. It seems many of these missiles are easily defeated by cheap countermeasures, so it makes sense to install them on aircraft, particularly ones going overseas into regions with higher risk. I just don't see terrorist owned MANPADs showing up outside of LAX or La Guardia. Now, Mexico might become dangerous (with our without Libyan missiles), because the narcos like to prove how big their cojones are by perpetrating some of the most brutal and disgusting crimes. I could foresee one of the cartels shooting down a passenger airliner (and they have the resources to get close to the airports) just to make a sick point. skreidle • October 2, 2011 10:25 AM Post-Conflict Potter | Foreign Policy -- [Voldemort's dead, but the struggle's not over. How Harry Potter and the magical world of J.K. Rowling might begin the long process of reconciliation and reform.] (via ) -- This is brilliant satire of world events as they relate to terrorism and global security. :D "Surviving Death Eaters will have to be brought to justice or reintegrated into magical society. Long-standing rifts among magical communities that the war widened must be healed. Most of all, we must ensure that the values that triumphed in the final battle -- tolerance, pluralism, and respect for the dignity of all magical and non-magical creatures alike -- are reflected in the institutions and arrangements that emerge from the conflict. What ultimately matters is not just whether something evil was defeated, but whether something good is built in its place. As experts on human rights, civilian protection, and national security, we were recently asked by officials in the British Ministry of Magic to suggest lessons from the Muggle world that might apply to challenges facing post-Voldemort magical society. Our recommendations are summarized below." Gabriel • October 2, 2011 10:44 AM Skreidle: Great summary of our acheivements, although I would say post WWII was one of the most successful efforts in more recent history. It's always been spoils of war for the conqueror, and subjugation, slavery, or annihilation for the conquered. Of course, if I recall, in Harry Potter, they took the approach of locking all of the villains up in Azkaban, a rather hellish place. Not terribly different from what we are doing now, except Gitmo isn't hell, but rather limbo. David • October 4, 2011 7:41 PM Interesting piece on why it is we haven't all being 'hacked' - it's all about the economics. Nick P • October 5, 2011 1:21 PM Interesting article. The Soviet Union top-level domain (.su) is still around & growing in popularity. The domain would have been extinguished along with the Soviet Union, but political forces keep it going. Krebs recently reported it's also popular with Russian online crime groups. Had to use the Wayback Machine to retrieve the article.
Post a comment
Powered by Movable Type. Photo at top by Geoffrey Stone.
Schneier.com is a personal website. Opinions expressed are not necessarily those of BT. |
|
Comments