A couple of recent incidents are shedding some light on the complexity of ensuring software code integrity throughout the supply chain.

After my Aliens v. Code Breaking blog, I came across something by Tom St. Denis (a fellow Canadian who published TomLib and wrote...

One of the questions I get asked frequently is how tokenization works in countries that use EMV, commonly known as ‘Chip & PIN’. The dialogue usually...

Click to Download/Listen

Colleges and universities in the US are now the latest target for phishing attacks. This week's Speaking of Security podcast discusses this new trend.

A lot of hacking is playing with other people, you know, getting them to do strange things.
-Steve Wozniak

The unexamined life is not worth living
-Socrates, Sec 38.

My girlfriend Kathleen (who incidentally wants to start a food review blog with me since we've eaten at some amazing places recently)...

One of the things I like to do when interviewing job candidates is to ask them questions about the world of fraud. I don’t expect them to prove that they’re certified fraudsters when they come in, but it can flesh out many paradigms that the candidates may already have. For example...

Last week, Andrea Pellegrini, Valeria Bertacco and Todd Austin published "Fault Based Attack of RSA Authentication" (I'll call it FBARA here for ease of reference) as I was boarding a plane to return from...

See what people are saying about this year's RSA Conference.