Gary McGraw (Cigital, Inc.) and Ming Chow (Tufts University) are editing a special issue of the IEEE Security and Privacy magazine focused on security and privacy for online games. Papers are due September 5th. We’ve talked about security and privacy for online games on this blog already. If you have any neat ideas for an article, I’m sure Gary and Ming would love to hear from you.
University of Washington CSE PhD student Dan Halperin et al.’s paper on the security and privacy for pacemakers and implantable defibrillators just received the Best Paper Award at the annual IEEE Symposium on Security and Privacy (a.k.a. the “Oakland” conference).
Dan and the rest of the team from UW, UMass Amherst, and Harvard Medical School found that an implantable cardioverter defibrillator can leak private information and can allow unauthorized parties to modify settings that control, among other things, shock therapies.
You can read Dan’s full paper and the FAQ, as well as his earlier work on the topic of medical device security. You can also read summaries of Dan’s work in The New York Times, the Wall Street Journal, Reuters, and the Associated Press. Bruce Schneier also provides excellent commentary.
Congratulations Dan!
Have a great spring break everyone!
To readers of this blog: Please expect low activity for a while. The University of Washington is on the quarter system, and our quarter just ended. Everyone in the class is, of course, encouraged to still contribute articles to this blog. And we’ll continue using this blog (or more sophisticated forum environments) in future courses. Stay tuned for more information 
.
Hey everyone. I found a website where you can try to use various ways to hack through levels of password. I think this is a fun way to get in touch with our security mindsets and see how far you can go. I wish everyone good luck
http://hackerskills.com/
On Thursday, Apple happily unveiled its plan for third party support of native iPhone applications. The plan involves an application development and distribution pipeline including an iPhone SDK, a suite of IDE tools, and a sales and distribution plan through the new iPhone “App Store”. Apple is restricting the distribution of 3rd party applications through their app store by requiring an iPhone developer account. There will be no other supported way to get 3rd party iPhone applications onto the iPhone. Apple has also made the claim that no malicious, pornographic, or software with security vulnerabilities will be distributed through their store.
(Read on …)
Michael Levine provided this example CSE 490K Security Review.
John Kurkowski provided this example CSE 490K Security Review.
Here’s another example CSE 490K Security Review.
Erin Covington provided this example CSE 490K Security Review.
David Chen provided this example CSE 490K Security Review.