Blog

We blog regularly about the future of digital identity and data protection, the fraught state of cybersecurity and privacy, and messes like blockchain, software engineering, and social media.

If Facebook were honest

The first and foremost privacy principle in any data protection regime is Collection Limitation. A...

Security-convenience trade-off: What trade-off?

As mentioned last month, the security-convenience trade-off in computer security is radically different from traditional...

Taking logon seriously

To a great extent, many of the challenges in information security boil down to human...

Speaking plainly about Identity

I was recently editing my long “ecological identity” paper from last year and I was...

Let’s forget about identity

Here’s a radical thought: why don’t we Internet engineers forget about identity? Businesses and individuals...

I never trusted trust

From the archives. “It is often put simply that in e-business, authentication means that you...

It’s not too late for privacy

Have you heard the news? “Privacy is dead!” The message is urgent. It’s often yelled...

Types of Personal Information

It’s really vital that technologists, software developers, architects and analysts appreciate that privacy law takes...

The fundamental privacy challenges in biometrics

The EPIC privacy tweet chat of October 16 included “the Privacy Perils of Biometric Security”....

Fixed my RSS feed

Dear Lockstep RSS subscribers. I found out only last week that my blog’s RSS feed...