Recent content by cbsecurity

Automated and convenient is music to the ears of malicious hackers. I've been a huge fan of 2-factor when the utilized with SMS/app, token devices and print/retinal authentication. The "2" is already getting old, however, and "multi" is the term I look for in authentication for sensitive data...

Bug bounty programs are a great foundation for securing applications, particularly firmware. However, because of laws in the US that can potentially put white hat hackers in jail, the best results might not come from the bug bounties, but from actually hiring white hat/ethical hackers to...

Supporters and activists in the EFF like myself continue to work to reverse this. While many of us graybeards are fine being spied on (you're going to be bored watching me code, change diapers and take an afternoon nap), we aren't fine when it's done to good people, hard-working activists, and...

This could be a good thing on one hand. If FTC and other government orgs are going to take a more involved approach to InfoSec like this, then by all means. But it gets dicey when you mix business with standardization. D-Link is hardly a big player in that sense, but money and government are...