By Dan Cornell This week I'm in Portugal at the OWASP EU Summit '08. Just after I arrived on Monday I had the opportunity to talk about AJAX security and sprajax to a group of students at the 1 day OWASP event at the University of Algarve.  The slide deck was a shortened version of the...

By Dan Cornell There has been some hubbub as of late about some ominous involvement of NSA with NIST standards on random number generation - specifically that NSA pushed the DUAL_EC_DRBG algorithm even though it performs relatively slowly and may potentially contain a backdoor. Bruce Schneier says: ...