Yesterday's keynote at the 28th Chaos Computer Congress (28C3) by Meredith Patterson on "The Science of Insecurity" was a tour-de-force explanation of the formal linguistics and computer science that explain why software becomes insecure, and an explanation of how security can be dramatically increased. What's more, Patterson's slides were outstanding Rageface-meets-Occupy memeshopping. Both the video and the slides are online already.
Hard-to-parse protocols require complex parsers. Complex, buggy parsers become weird machines for exploits to run on. Help stop weird machines today: Make your protocol context-free or regular!
Protocols and file formats that are Turing-complete input languages are the worst offenders, because for them, recognizing valid or expected inputs is UNDECIDABLE: no amount of programming or testing will get it right.
A Turing-complete input language destroys security for generations of users. Avoid Turing-complete input languages!
Patterson's co-authors on the paper were her late husband, Len Sassaman (eulogized here) and Sergey Bratus.
LANGSEC explained in a few slogans
A scrap dealer cleaning out a deceased engineer’s basement in Pittsburg, Pennsylvania found two massive 1960s computers, magnetic tape data storage systems, and hundreds of tape reels, all of which was marked as the property of NASA. The scrap dealer called NASA to report what he found and the agency’s Office of the Inspector General […]
The Department of Agriculture’s chief scientist oversees more than 1,000 scientists in 100 research facilities: Trump’s pick to run the agency is Sam Clovis, a climate-denying talk-radio host who not only lacks any kind of scientific degrees — he didn’t take a single science course at university.
NASA’s Langley Research Center in Hampton, Virginia turns 100 this year. In celebration, the space agency produced this short documentary and enlisted Captain Kirk himself, William Shatner, to narrate. Here are just a few highlights from NASA Langley’s incredible history: • In times of peace and war, NASA Langley helped to create a better airplane, […]
Just because English has become the common global tongue doesn’t mean it’s the easiest language to write—even for native speakers. If you’re looking to improve your written communication skills, especially on your smartphone, take a look at Ginger Page.Ginger is a cross-platform app that offers corrections for phrasing as well as grammar. It’s powered by […]
The current web development landscape is rife with buzzwords and technology that gets abandoned almost as soon as it’s made. If you’ve never written a line of code before, it can be hard to figure out what’s coming, what’s here to stay, or how to get ahead.This Beginner Web Development Bundle is a great place […]
The Fader Stealth Quadcopter from TRNDlabs packs incredible flight performance into a package small enough to land on your phone screen, and it’s available now in the Boing Boing Store.The Fader’s six-axis gyroscope module gives it perfect balance in the air. This makes the onboard 720p HD camera all the better for shooting amazing flight […]