Yesterday's keynote at the 28th Chaos Computer Congress (28C3) by Meredith Patterson on "The Science of Insecurity" was a tour-de-force explanation of the formal linguistics and computer science that explain why software becomes insecure, and an explanation of how security can be dramatically increased. What's more, Patterson's slides were outstanding Rageface-meets-Occupy memeshopping. Both the video and the slides are online already.
Hard-to-parse protocols require complex parsers. Complex, buggy parsers become weird machines for exploits to run on. Help stop weird machines today: Make your protocol context-free or regular!
Protocols and file formats that are Turing-complete input languages are the worst offenders, because for them, recognizing valid or expected inputs is UNDECIDABLE: no amount of programming or testing will get it right.
A Turing-complete input language destroys security for generations of users. Avoid Turing-complete input languages!
Patterson's co-authors on the paper were her late husband, Len Sassaman (eulogized here) and Sergey Bratus.
LANGSEC explained in a few slogans
It’s a commonplace that in the natural world, males attempt to mate with multiple females, while females attempt to entice males into being monogamous; this is attributed to the high cost of producing an egg and bearing children (or laying eggs) for females, and the low cost of sperm production for males.
Mathematician Stephen Wolfram and his company do a lot of consulting for Hollywood. But he doesn’t often do it on an urgent basis because a movie is about to shoot and they neglected to “tech the tech.” When I first started looking at the script for [Arrival], I quickly realized that to make coherent suggestions […]
Can you “hear” motion or light flashes? If so, according to new research from City University London, you may be experiencing a not-so-rare form of synaesthesia. Synesthesia is the fascinating neurological phenomenon whereby stimulation of one sense involuntarily triggers another sensory pathway. For example, a synesthete might taste sounds or hear colors. (In this study, […]
Whether I’m trying to relieve some stress at work or entertain myself on the metro, Space Putty is there. You can bring this magical goo home and try it for yourself for just $9.99Like Silly Putty of yesteryear, this viscoelastic substance can be molded into different shapes and stretched around in your hands. Use it […]
You know as well as I that writing complex, long-long form text requires significant organization. You’re probably also well aware that Word just isn’t up to the task. That’s why I’m a huge fan of Scrivener, the software suite used by best-selling authors and technical writers alike.Scrivener is much more than another digital typewriter. With a […]
Looking to upgrade your weekend? Here are three randomly awesome products on my mind this week.#3 FRESHeBUDS Pro Magnetic Bluetooth EarbudsAs more and more phones and gadgets switch to Bluetooth-only compatibility, you’ll need to get Bluetooth headphones like the rest of us. I’ve been super impressed with these affordable magnetic headphones. Pull the magnetic earbuds apart to auto-connect […]