Drew Springall retweeted
Update: 20+ leading experts in cybersecurity and elections just wrote to @MITREcorp CEO Jason Providakes urging him to retract MITRE's dangerously mistaken report.
dropbox.com/s/kujr9uqchwcfjv…
Signers include @RonRivest @schneierblog @matthew_d_green @ejsebes @robertgraham @philipbstark
Drew Springall retweeted
1/ Colleagues and I have found a serious privacy flaw that affects Dominion ICP and ICE ballot scanners. We've already informed Dominion, CISA, EAC, and state officials, and we've created a site to help officials and the public understand the issue:
DVSorder.org
Drew Springall retweeted
Here's my analysis of what happened in Antrim County, Michigan, during the November election:
michigan.gov/sos/0,4670,7-12…
Full report: michigan.gov/documents/sos/A…
Drew Springall retweeted
Google’s plans for Chrome extensions won’t help security—but they will crush innovation around privacy and security. eff.org/deeplinks/2019/07/go…
Drew Springall retweeted
On election security: "Unlike so many other cyber challenges, this is a problem we can solve. It’s going to take a little money, but it’s not going to be decades of research... We have an opportunity for a cybersecurity win." @jhalderm to @AppropsDems news.engin.umich.edu/2019/02…
Drew Springall retweeted
Want to see a really bad bug? You can FaceTime any iOS device running 12.1 and listen in remotely—WITHOUT THE OTHER PERSON ANSWERING THE CALL. (via @bzamayo) 9to5mac.com/2019/01/28/facet…
Drew Springall retweeted
In the face of that kind of detail, it’s utterly bonkers to add a “security feature” that arbitrarily switches you from one mode into the other with no obvious notice or warning. It renders the entire document meaningless.
Drew Springall retweeted
We need to talk about TLS 1.2 Session Tickets and how they are the weakest link in modern TLS deployments. blog.filippo.io/we-need-to-t…
Drew Springall retweeted
Let's Encrypt will offer wildcard certificates starting in 2018! Learn more and donate to support our work: letsencrypt.org/2017/07/06/w…
Drew Springall retweeted
Our crowdfunding campaign kicks off today! Help us get off to a strong start! #SupportLetsEncrypt generosity.com/community-fun…
Drew Springall retweeted
Dear CMU: one way to not get subpoenaed over your unethical research is to not do said research in the first place. wired.com/2015/11/carnegie-m…
Drew Springall retweeted
The FBI came to the @umich CSE faculty meeting to tell professors they're all potential targets of espionage!











