A certificate authority issued intermediate TLS keys with so little randomness that researchers could recreate them, putting browser trust, certificate revocation, and the systems beyond the browser under a harsh spotlight.
Nov 2
19 min
A reported attack on French supermarket refrigeration systems shows why connected operational technology needs constrained remote access, lifecycle ownership, monitoring, and safe local fallback.
Oct 26
16 min
Canada’s Bill C-22 tries to frame lawful access as a bounded public-safety tool, but its technical-capability requirements keep the central encryption question alive: can exceptional access exist without creating a security weakness that someone else will eventually exploit?
Oct 19
14 min
Roblox scams, fake Robux offers, phishing links, and safer online gaming guidance for families.
Oct 12
15 min
Meta’s Muse promises to act across a user’s connected digital life, but Tom Eston and Scott Wright explain why delegated authority, a reported token-theft flaw, hidden human involvement, and Meta’s privacy history make personal AI agents a security decision—not just a convenience feature.
Oct 5
18 min
A familiar voice is no longer proof of identity: Tom Eston and Scott Wright explain how AI voice-cloning scams use urgency and emotion, and why trusted callbacks, private family code phrases, and independent approval steps are the defenses that actually work.
Sep 28
14 min
Tom, Scott, and Kevin separate speculative AI-doom predictions from the concrete risks created when fast, opaque systems gain authority without credible limits or accountability.
Sep 21
16 min
A reported cache of more than 153 million U.S. and Canadian driver’s-license scans allegedly sold through a dark-web service exposes how routine identity verification turns durable government ID into a high-value, hard-to-remediate breach target.
Sep 14
20 min
Hotel Wi‑Fi is not automatically unsafe, but Microsoft’s CaptiveCrunch reporting shows how a routine captive-portal connection can be manipulated into credential theft or malware delivery.
Sep 7
14 min
Bill Swearingen explains adversarial clothing research, camera-vision confidence, and the privacy limits of biometric surveillance.
Aug 31
27 min
Load more