Random bits

4 February 2010

Hacking for Fun and Profit in China’s Underworld

Google + NSA Information Assurance Directorate

“Every user in the world is convinced they need security features, not security procedures.”

Advanced Persistent Threat highlighted by DNI; Mandiant report gives details. Mandiant have coined the APT term, and it’s probably because they deal with that sort of thing constantly: they’re very good at what they do. We hired them for internal test and eval work as well as usability input as our software began taking shape, and I came away impressed. It’s not surprising to see them tackling high-profile events.

Quantum energy teleportation


Random bits

29 January 2010

RFID data illuminates London commute pattern

National Ignition Facility success


Random bits

20 January 2010

Arbor’s Worldwide Infrastructure Security Report

The global shipping network

China’s increasing antisatellite…I mean, missile defense capability. Also here.


Random bits

13 January 2010

“Google said Tuesday that it may pull out of China because of a sophisticated computer network attack originating there and targeting its e-mail service and corporate infrastructure, a threat that could rattle U.S.-China relations, as well as China’s business community…[the hackers] appeared to be after information on weapons systems from defense firms and were seeking companies’ ‘source code’”. More from the WSJ. As Richard Bejtlich asks, has China crossed a line? Google will stop censoring search results, which is yet another huge implication for Chinese internal and foreign affairs.

DDoS stats from Arbor

Adobe gets attacked

“Complex software-hardware systems are not proved correct [in 1976], they are not proved correct today, and will not be proved correct in the future. If I am wrong why do we need cyber-security? Why do systems get attacked and broken into every day? Why is security a multi-billion dollar a year industry? I think the answer is obvious.”

National Cyber Range awards

Entropy, entropy, entropy…


Random bits

11 January 2010

“why would anyone use OpenGL?” To me the question is, why would anyone use DirectX for anything other than a game?

“We spend billions on security, yet we are not any more secure. We have lots of regulations, but that has created a low bar mentality”

Single-qubit experimental quantum computation for the Jones polynomial

Colloidal metamaterial…er…“liquid invisibility cloak”

http://blog.wolfire.com/2010/01/Why-you-should-use-OpenGL-and-not-DirectX

Random bits

8 January 2010

768-bit RSA modulus factored. This is basically right on schedule for a Moore’s law fit of largest publicly factored RSA moduli from a RSA technical report dating from 2000. Expect 1024-bit moduli to go down in about a decade.

Visualizing Abdulmutallab. This is supposed to make some sense if you look at it long enough, apparently.

Geolocation hack

IPv4 lives on…for now


Random bits

6 January 2010

Why you won’t recognize the net in 10 years

NSF wants to start a new internet from scratch

On the recent Nature insurgency paper


Random bits

4 January 2010

Holiday round-up edition…

Suricata IDS in beta. Another open-source IDS is a good thing. (But open-source network monitoring will be even better!)

The best defense is a good offense

Switchable DNA nanostructures

Hijacking NetBIOS

Eavesdropping on quantum crypto?

Survey of key exchange security deriving from the Second Law

An approach to subexponential factoring

The use of ideas of Information Theory for studying “language” and intelligence in ants


Common ecology quantifies human insurgency

21 December 2009

Researchers in Colombia, Miami, and the UK have published an article in this week’s Nature that claims to identify what amounts to universal power-law behavior (though they don’t call it that, and there are slightly different exponents for different insurgencies, but the putative universal exponent is apparently 5/2) in insurgencies. The researchers analyzed over 54000 violent events across nine insurgencies, including Iraq and Afghanistan. They find that the power-law behavior of casualties (see also here for the distribution of exponents over insurgencies) is explained by “ongoing group dynamics within the insurgent population” and that the timing of events is governed by “group decision-making about when to attack based on competition for media attention”.

Their model is not predictive in any practical sense: few things with power laws are. What it provides is a quantitative framework for understanding insurgency in general, and perhaps more importantly a path towards classifying insurgencies based on a set of quantitative characteristics. One of the nice things about universality (if this is really what is going on) is that it allows you to ignore dynamical details in a defensible way, so long as you understand the basic mechanisms at play. This insight actually derives from the renormalization group (the same one that informs Equilibrium’s architecture) and provides a way to categorize systems. So if there really is universal behavior, then the fact that the model these researchers use is just a cariacture wouldn’t matter as much as it otherwise would, and it would allow for reasonably serious quantitative analysis.

The first question about this work ought to be if similar results can be obtained with different model assumptions. The second ought to be attempting to run the same analysis on “successful” wars of national liberation to see if there are indeed distinguishing characteristics. If there are, this framework could be a valuable input to policy and strategy. When pundits talk about Iraq or Afghanistan being another Vietnam, the distinction between terrorist insurgency and guerrilla warfare is blurred. But hard data may provide clarity in the future.


Random bits

18 December 2009

First the news you’ve already heard about:

If you haven’t heard about grabbing the video feeds from UAVs then you’ve been on vacation. But there’s more. And the Pentagon had dismissed all of this in its risk assessments.

Twitter’s DNS pwned.

Security product counterspin.

On the dark matter events. More in this and previous posts at Resonaances.


Follow

Get every new post delivered to your Inbox.