In early February, I gave a talk at ShmooCon .The content was the same as my talk at ACM Reflections , a student-run conference at the University of Illinois Champaign-Urbana. ShmooCon sells out anyway :) so I did not bother to blog about it. While...

Just a short note to let folks know that I will be at PDC next week, giving a talk on developing applications for standard user . Much of what I have to say will be familiar to fans of things like standard user and privilege levels. The new content this...

This blog is about my security work at Microsoft, not my past work in Linux. However, in a recent blog “AppArmor is Dead” , Russ Coker basically called me out by citing both this blog and AppArmor in the same post, so I am going to briefly go off topic...

Is UAC a convenience feature, or a security feature? Dessert topping or floor wax? How about both! Security can be a confusing black art, for both consumers and professionals alike. One reason is in the name of this blog, that insecurity results from...