Paul M. Jones | Security 2026-05-08T09:12:58-05:00 The TSA as Milgram Experiment 2015-02-01T21:50:54-06:00 I have had it in mind to write up an article about the TSA as an implementation of the Milgram experiment, but it's apparently old ground already covered: https://www.google.com/?gws_rd=ssl#q=tsa+milgram (Posted from inside Newark Airport, at which s... Former HHS Cyber Security Director Convicted For Child Porn 2014-08-27T03:47:50-05:00 Former acting director of cyber security for the Department of Health and Human Services Timothy DeFoggi was convicted for a myriad of gruesome child pornography charges Tuesday, the Department of Justice announced. DeFoggi, who had top security clea... Back On The Market! 2014-08-01T08:49:02-05:00 After a year spent writing my book, working on Aura, speaking at conferences and user groups, advising startups, and proposing new design patterns, I am back on the market. I've been writing PHP code since 1999, and in that time I've been everything ... For CSRF tokens, mt_rand() is ok-ish but openssl_random_pseudo_bytes() is a lot better 2013-02-13T11:30:30-06:00 On the pages for rand() and uniqid(), as well as looking at the C code, they specifically state that these functions should not be used for generating secure tokens.  They tend to generate predictable values.  And the documentation for md5() st... I Am The Eye In The Sky, Looking At You 2012-12-10T20:41:57-06:00 Today EFF posted several thousand pages of new drone license records and a new map that tracks the location of drone flights across the United States.  These records, received as a result of EFF’s Freedom of Information Act (FOIA) lawsuit aga... The High Price of False Security 2012-11-25T17:42:22-06:00 The attention paid to terrorism in the U.S. is considerably out of proportion to the relative threat it presents. That’s especially true when it comes to Islamic-extremist terror. Of the 150,000 murders in the U.S. between 9/11 and the end... Mission Creep Leads TSA to Racially Profile in Pursuit of Non-Terrorists to Arrest 2012-08-13T12:29:10-05:00 The TSA has no business looking for drugs, outstanding arrest warrants, or immigration problems unless it has serious reason to believe that the person involved poses a serious threat to air safety. If it is going to serve as an extension of every ot... Stranded jet-skier effortlessly overcame $100M security system at JFK, walking across two runways and into a terminal undetected 2012-08-12T20:06:42-05:00 A stranded jet-skier seeking help effortlessly overcame the Port Authority’s $100 million, supposedly state-of-the-art security system at JFK Airport -- walking undetected across two runways and into a terminal, The Post has learned.Motion senso... Concealed weapons save lives 2012-07-25T09:31:28-05:00 With a single exception, every multiple-victim public shooting in the U.S. in which more than three people have been killed since at least 1950 has taken place where citizens are not allowed to carry their own firearms. ... If one of the hundreds of ... PGP founder, Navy SEALs uncloak encrypted comms biz 2012-06-18T09:04:32-05:00 Phil Zimmermann and some of the original PGP team have joined up with former US Navy SEALs to build an encrypted communications platform that should be proof against any surveillance. The company, called Silent Circle, will launch later this year, wh...