2018
-
Configuring Yubikeys, GPG, and Keybase
Apr 18
I keep my GPG private keys on Yubikeys, not on individual machines. A step-by-step walkthrough: an offline 4096-bit master key, sub-keys for encryption, signing and authentication, publishing to Keybase, signed Git commits, and gpg-agent as ssh-agent.
-
Introducing Secure Updates for WordPress
Feb 26
Today I introduce the a new plugin that provides secure updates for WordPress: DGXPCO.
2014
-
Encryption, Information Leakage, and Side-Channel Attacks
Dec 3
Potential side-channel attacks for encryption software can render even the most secure scheme breakable in a trivial manner.
-
Cryptography, JavaScript, and Performance
Nov 19
JavaScript really is powerful, if you know how to use it …
-
Ethical Quandary: iPhones and Encryption
Oct 14
Is Apple’s new stance on phone data encryption a good thing or a bad thing? The FBI, at least, thinks it’s bad. I say they’re wrong.
-
WordPress Database Encryption
Sept 26
How reasonable is the suggestion that WordPress encrypt its database? Really?
-
Security, Legal Bypass, Warrants, and Apple
Sept 21
Apple has announced they won’t be unlocking iOS 8 phones in response to warrants, not as a point of policy, but because the system they’ve built won’t allow it.
-
Birthdays and Three-way Hash Collisions
Sept 15
Let’s work out the probability that, in a given group of individuals, at least three share a birthday.
-
The Birthday Paradox
Sept 8
There’s a paradox in statistics that states, in a group of 23 people, the chance that two people having the same birthday is 50%.
-
Immutable Information
Jul 23
I tried to send a message to a friend last night. Sometime in the past month or so, they changed their phone number.