http://www.jeffersonswheel.org Security Research at the University of Virginia Mon, 03 May 2010 16:44:27 +0000 http://backend.userland.com/rss092 en Yuchen Zhou will present a paper [PDF] on HTTP-only cookies and why it is so hard to deploy security technologies at Web 2.0 Security and Privacy (attached to the Oakland conference) on May 20. HTTP-only cookies were introduced eight years ago as a simple way to prevent cookie-stealing through cross-site ... http://www.jeffersonswheel.org/?p=148 Nate Paul, who finished a PhD in our group a few years ago and is now a research scientist at Oak Ridge National Labs, is the focus of this CNN story: Scientists work to keep hackers out of implanted medical devices, CNN, 16 April 2010. Nathanael Paul likes the convenience of ... http://www.jeffersonswheel.org/?p=146 The list of papers accepted to the 31st IEEE Symposium on Security and Privacy is now posted: http://oakland10.cs.virginia.edu/papers.html. The PC accepted 26 research papers (from 237 submissions) and 5 Systematization of Knowledge papers (from 30 submissions). Hope to see everyone at the conference in Berkeley this May! http://www.jeffersonswheel.org/?p=144 The New York Times has an article about rigging the World Cup draw (which takes place tomorrow in South Africa): In World Cup Draw, Conspiracy Theories Abound, 3 December 2009. The article mentions the final exam from my 2005 Cryptography course: It is anyone’s guess how the 32 teams in the 2010 ... http://www.jeffersonswheel.org/?p=138 Oakland 2010 submissions closed last week. We received 269 total submissions (of which 30 were Systematization of Knowledge papers). The program should be available by early February, for the conference that will be held May 16-19, 2010 at the Claremont Resort in Berkeley, CA. http://www.jeffersonswheel.org/?p=135 IEEE Spectrum has an article on Karsten Nohl's efforts to lead an open-source GSM hacking project: Open-Source Effort to Hack GSM, IEEE Spectrum, 30 November 2009. If you're still using a cellphone based on early digital standards, you better be careful what you say. The encryption technology used to prevent eavesdropping ... http://www.jeffersonswheel.org/?p=133 British Prime Minister Gordon Brown has issued a long overdue apology to Alan Turing on behalf of the British government. The full text is here. Turing was a quite brilliant mathematician, most famous for his work on breaking the German Enigma codes. It is no exaggeration to say that, without ... http://www.jeffersonswheel.org/?p=130 The Call for Papers for the 2010 IEEE Symposium on Security and Privacy is now available: oakland10.cs.virginia.edu/cfp.html. The first three deadlines are: Workshop proposals due: Friday, 21 August 2009 Research papers due: Wednesday, 18 November 2009 Systematization of Knowledge papers due: Tuesday, 24 November http://www.jeffersonswheel.org/?p=128 The Examiner has an article on Facebook privacy issues: To Facebook or not to Facebook, 29 June 2009. The second approach is even scarier, a feature of Facebook which allows outside developers to create small programs called “applications” for members to do things like playing poker, getting daily horoscopes, ... http://www.jeffersonswheel.org/?p=126 Jake Widman has written an interesting article about the impact of "oversharing" on Facebook: How Facebook mucks up office life: Managing a workforce is already a challenging job; now Facebook and other social networks raise a host of sticky new situations., ComputerWorld, 30 April 2009. The key observation is the way ... http://www.jeffersonswheel.org/?p=119