Cryptography
And the winner of the World War Two steganography competition is...
Last week, we ran a competition around a steganographic code that was used by the British during the Second Word War.
Take a secret military message, and wrap it up into a believable "letter home"... it's harder than it sounds!
Is your laptop still unencrypted? Perhaps 7 seconds of CCTV might change your mind...
Here's a video that might make you think twice about taking your laptop out into the world unencrypted.
This is "data theft" in the most literal sense...
Snapchat images that have "disappeared forever" stay right on your phone...
Snapchat claims to let you share even "ugly selfies" because once they're viewed they "disappear forever."
US-based computer forensics geek Richard Hickman thought he'd find out how true that claim was...
British cryptographic hacking from WW2 - how well would *you* have done?
If you were taken prisoner and wanted to send messages home under your captors' noses, what would you do?
Find out how a Royal Navy officer did just that during WW2, and have a go yourself at hiding a secret message in an innocent-sounding letter home!
IBM takes a big new step in cryptography: practical homomorphic encryption
IBM just released an open source software package called HELib.
HE stands for *homomorphic encryption*, and HELib is an important cryptographic milestone.
Paul Ducklin explains why...
Beware of encryption companies bearing gifts!
An iPhone messaging app that claims to be "totally secure" is offering a £10,000 prize to anyone who can intercept a message from it.
Paul Ducklin wonders how you are supposed to win the prize if the app really is "totally secure"...
XKCD cartoon reminds users to log out for better security
It's disturbing just how many people seem to leave their computers permanently logged in to online services. An XKCD cartoon teaches us all an important security lesson.
WordPress.com boosts security for bloggers with two-factor authentication
With WordPress.com powering more than 60 million websites worldwide, anything to improve the safety and security of its users is to be welcomed.
Paul Ducklin tries out the new WordPress 2FA service on his Naked Security account...
"Rude password - login denied": the AT&T April Fool that wasn't
Why, and more importantly, *how*, would you go about weeding out rude passwords?
Surely an April Fool?
Paul Ducklin takes a look...
Anatomy of a bug - misplaced parenthesis threatens NetBSD's random numbers
NetBSD recently patched a programming bug in its kernel that affected the sanctity of the operating system's random numbers.
One lousy parenthesis misplaced by just two characters...
Monday review - the hot 32 stories of the week
It's that time of the week again - here's your roundup of everything we wrote in the last seven days.
Has HTTPS finally been cracked? Five researchers deal SSL/TLS a biggish blow...
Cryptographers have once again put SSL/TLS (that's the padlock in HTTPS) in their gunsights and opened fire.
This time, they've done some severe damage.
Paul Ducklin takes a detailed look...
The top 10 unsolved ciphertexts
For over 12 centuries an intense battle has been fought between the code-makers and the code-breakers. But despite decades of cryptanalysis, there are many ciphertexts which have gone unsolved, leaving us in mystery.
Here's our top ten list, can you solve them?
Can freezing an Android device crack its encryption keys?
Will chilling an Android phone to -15°C freeze the encryption keys into memory? And if so, can you use a modified version of Android to dig them out?
German researchers had a crack at it - Paul Ducklin takes a look at how things turned out.
Monday review - the hot 21 stories of the week
Get yourself up to date with everything we've written in the last seven days - it's weekly roundup time.
SSCC 102 - Probably the best 15 minute security podcast you'll hear today
Have your joined thousands of others, and become a loyal listener to the "Chet Chat" yet?
Here's the latest Naked Security podcast, Sophos Security Chet Chat 102, discussing a range of recent and newsworthy topics from the world of computer security.










