Government



Samy Kamkar has always been prescient. He first gained notoriety by showing how nascent social networks like MySpace could be used to spread malware rapidly among a population of millions (now billions) of users. His worm for MySpace, dubbed the ‘Samy Worm’ earned him a visit from law enforcement. But Kamkar kept up his research. More recently, he has turned his attention and considerable skills to the problem of persistent user tracking. His Evercookie, released in October, 2010, called attention to the myriad of ways that advertisers, media firms and online merchants were finding to track their customers – often despite explicit efforts by customers to prevent their online activities to be tracked. More recently, his research into suspicious geotagging was the foundation for a class action lawsuit against Microsoft. 

One of the biggest talks at this year’s Black Hat Briefings was a presentation on the structural problem with digital certificate authorities by Moxie Marlinspike. The subsequent hack of Dutch certificate authority DigiNotar and a damning report on that attack only weeks later, and more recent reports of exploitable holes in both TLS and SSL only underscore the problems facing the entire PKI-based system for ensuring online identities.