How We Can Save Anonymization - Principles for Effective Data Protection
Exploring effective data anonymization techniques to restore trust in privacy protection. Discusses operational principles for reliable anonymization methods, addressing past failures and skepticism.
The Impact of Third-party Code on Android App Security
Exploring third-party library risks in Android apps, including outdated versions, vulnerabilities, and potential solutions for improved security and automatic patching.
Mr. Lord Goes to Washington, or Applying Security Outside the Tech World
Insights on applying enterprise security practices to political organizations, addressing phishing, best practices implementation, and disinformation campaigns. Valuable for SMBs and tech product developers.
Crypto Crumple Zones - Protecting Encryption in a Time of Political Uncertainty
Exploring technical solutions for balancing encryption and government access, proposing "crypto crumple zones" to maximize privacy while allowing limited exceptional access in politically uncertain times.
Cryptographically Secure Data Analysis for Social Good
Secure multi-party computation enables analysis of sensitive salary data to calculate pay disparities while maintaining confidentiality, demonstrating potential for social impact in privacy-constrained contexts.
When Malware is Packin' Heat
Exploring packing in malware and benign applications, its impact on anti-virus systems, and the challenges in distinguishing between packed malicious and legitimate software.
Going Nuclear - Programmatic Protections against Extreme Vetting, Social Pressures, and Coercion
Explore programmatic options for protecting sensitive data against forced access, including a "nuclear" option to revoke access and wipe data when under threat.
We Gave You This Internet, Now Play by Our Rules
Exploring how technologists' assumptions impact user security, challenging common beliefs in the security community, and advocating for more inclusive design practices in Internet platforms.
Hacking Sensors
Exploración de vulnerabilidades en sensores de sistemas críticos, demostrando ataques y discutiendo defensas para dispositivos médicos, drones y wearables. Enfoque en la seguridad de sistemas de detección y actuación.
Putting Privacy Notices to the Test
Exploring challenges and improvements in privacy notices and security warnings, discussing cognitive processes, and presenting user studies to enhance effectiveness through iterative design.
What Cybersecurity Can Learn from the Secret Service
Exploring cybersecurity lessons from Secret Service strategies, focusing on interior defense and environmental control to detect and neutralize intruders effectively despite porous network boundaries.
The Paper Ballot Is Not Enough
Exploring cryptographic techniques for inherent election integrity, challenging results with objective evidence, and improving voter registration confidence.
Secrets at Scale - Automated Bootstrapping of Secrets & Identity in the Cloud
Explore Netflix's innovative approach to securely managing secrets and identities for thousands of microservices in a cloud environment, addressing scalability and self-healing challenges.
Moving Account Recovery Beyond Email and the Secret Question
Innovative account recovery protocol beyond traditional methods, offering user choice, privacy, and potential for end-to-end encryption key recovery. Addresses limitations of current practices in online identity management.
Beyond Warm and Fuzzy - Ethics as a Value Prop
Exploring industry ethics as a crucial factor in balancing privacy, security, innovation, and autonomy in the face of emerging sociotechnical challenges in smart technologies and predictive services.
Lessons Learned While Protecting Gmail
Insights into Gmail's defense strategies against various cyber threats, covering spam detection, phishing prevention, malware scanning, network security, and web frontend protection.
The Global Conversation on Encryption
Explores global government proposals affecting encryption, their potential impacts on security and rights, and how various stakeholders are responding. Discusses ways to support strong encryption policies.
Panopticlick - Fingerprinting Your Web Presence
Explore web fingerprinting techniques and learn effective privacy-enhancing strategies to protect yourself from invasive trackers while browsing the internet.
Server-side Second Factors
Statistical framework for measuring login validity using IP and user agent, achieving high accuracy with user history and reputation systems, applicable for new and established services.
Building a DDoS Mitigation Pipeline
Explore CloudFlare's automated DDoS mitigation pipeline, featuring real-time threat detection, attack categorization, and centralized iptables management for efficient and rapid response to common attacks.
What Makes Software Exploitation Hard?
Explore Project Zero's mission to make zero-day vulnerabilities harder, discussing technologies and trends that have increased difficulty in vulnerability discovery and exploitation.