Author Archives: Space Rogue

About Space Rogue

With over two decades of experience, Space Rogue (Cris Thomas) has testified before the U.S. Senate Committee on Homeland Security and Governmental Affairs, and has been interviewed by Wired, CNBC and even MTV. He created the wildly popular websites the Whacked Mac Archives and Cyber Squirrel 1. He produced the weekly podcast SpiderLabs Radio, and the critically acclaimed weekly news video program the Hacker News Network. His writing has appeared in Network Computing, New Statesman, The Hill, and the Christian Science Monitor. He has spoken at security conferences such as Def Con, Blackhat, and Shmoocon. Space Rogue currently works as the Global Lead of Policy and Special Initiatives for the legendary IBM X-Force.

Smart People

Sometimes I wonder if people who are revered in their field are really all that smart. I am pretty sure that some people have achieved their positions not because they know their subject matter but because they are just charismatic … Continue reading

Posted in Current Events | Comments Off on Smart People

Source Boston 2008 Going on NOW!

SourceBoston 2008 Going on now and for the next two days. If your anywhere near Cambridge MA you should head over. The shear number of smart security people in this hotel is mind boggeling. Seriously, you can’t turn around without … Continue reading

Posted in Current Events | Comments Off on Source Boston 2008 Going on NOW!

More secure products that aren’t

Think that cool USB thumb drive you just bought with the word of ‘encryption’ written in big letters all over the package is really secure? Think again. ComputerWorld recently reviewed seven ‘secure’ USB drives and basically found that they are … Continue reading

Posted in Commentary, Snake Oil | Comments Off on More secure products that aren’t

Tamper Resistant Point of Sale Machine Isn’t

When I see something labeled tamper-resistant or even tamper-proof I don’t assume it is secure I just think that it is a little more difficult to break into than something that isn’t tamper-resistant. Three researchers at the University of Cambridge … Continue reading

Posted in Commentary, Current Events, Snake Oil | Comments Off on Tamper Resistant Point of Sale Machine Isn’t

Less Than Two Weeks to Source2008

So I was having lunch with one of the organizers of the Source Boston 2008 conference yesterday (Spicy Beef Bowl, mmmmm) and realized that this is going to be one really great conference. Not only are there big name speakers … Continue reading

Posted in Commentary, Current Events | Comments Off on Less Than Two Weeks to Source2008

AES = XOR = Secure? WTF!?!

I don’t have time for all of the stupidity out there but this is just to stupid to let pass by. Easy Nova a German company that makes a variety of computer storage accessories, recently released a hard drive case … Continue reading

Posted in Commentary, Current Events, Snake Oil | Comments Off on AES = XOR = Secure? WTF!?!

Responsible disclosure for vendors?

If a vendor finds a vulnerability in a competitors code are they obligated to tell them? What exactly is ethical and or responsible disclosure when it comes to competing vendors? Among security researchers the general consensus these days is to … Continue reading

Posted in Commentary, Current Events | Comments Off on Responsible disclosure for vendors?

Most Security is Useless

Looks like I missed this the first time around but there is an article about a speech recently given by Peter Tippet, a VP at Verizon and a scientist at ICSA labs, who talks about how useless most security actually … Continue reading

Posted in Commentary, Current Events | Comments Off on Most Security is Useless

Uncle Sam Needs You (Geek!)

Thats right the US Air Force is looking for a few good geeks. And evidently they are willing to relax a few of the requirements of military service to get them. According to this quote in Wired Major General William … Continue reading

Posted in Current Events | Comments Off on Uncle Sam Needs You (Geek!)

Feds Use Spyware

Ever hear of CIPAV? It is some pretty bad-ass spyware that tracks every website, every chat, every email that you send from your computer. Maybe you know it by its more common name Computer and Internet Protocol Address Verifier. Sounds … Continue reading

Posted in Commentary, Current Events | Comments Off on Feds Use Spyware