Kevin Fu Assistant Professor Department of Computer Science University of Massachusetts Amherst Email: kevinfu PGP Key Bio Computer Science Building 140 Governors Drive Amherst, MA 01003-9264 Phone: (413) 545-4006 Fax: (413) 545-1249

Pointers to further reading

• Security and privacy call for papers
• Medical devices
  • Medical Device Security Center
  • Live surgery webcasts at ORlive
  • U.S. Food and Drug Administration, Center for Devices and Radiological Health
• Virtues, values, and principles for graduate students and academics
  • How to be a good graduate student
• Writing and presentation advice
  • The Science of Scientific Writing
  • Writing advice from Jim Kurose
  • How to give a talk and write a paper
  • Armando Fox's collection of advice
  • Tips on giving a good demo
• Women in computing
  • CRA Distributed Mentor Project: Mentoring Undergraduate Women in Computing Research
  • Barriers to Equality in Academia: Women in Computer Science at MIT
  • Unlocking the Clubhouse: Women in Computing
• SAGE for interpreting modular arithmetic
• My academic ancestry
  • Frans Kaashoek‹-Andrew Tanenbaum‹-John Wilcox
  • Ron Rivest‹-R.W. Floyd

Software and hardware

• C++ implementation of the SFS read-only file system, key regression, and Chefs cryptographic file system as part of SFS
• C++ proxy re-encryption library for use in the proxy re-encryption file system
• Java implementation of the RSA threshold signature scheme
• Intel 8051 assembly code and circuit schematics for a cryptographic phone made out of breadboard, chips, and a bunch of messy wire.
• The X-File System

News media

• Medical device security and privacy
  • A Heart Device Is Found Vulnerable to Hacker Attack, The New York Times, March 12, 2008
  • Heart-Device Hacking Risks Seen, The Wall Street Journal, March 12, 2008
• RFID-enabled credit cards
  • Researchers See Privacy Pitfalls in No-Swipe Credit Cards, The New York Times, October 23, 2006.
  • "No-Swipe Credit Cards Could Make ID Theft Easier" on ABC Good Morning America, October 24, 2006.
  • "'Smart' cards are quick, but are they safe?" on NBC Today Show, October 26, 2006.
• The Evil Side of Automatic Software Updates, CSO Magazine, October 2006.
• Buyer Beware: Online Shopping Hazards Exposed by UMass Amherst Computer Scientist, February 21, 2006.
• Portals: More scary tales involving big holes in Web-site security. The Wall Street Journal CCXLII, 17 (Monday, February 2, 2004), page B1.
• Portals: Biggest Web problem isn't about privacy, it's sloppy security. The Wall Street Journal CCXLII, 17 (Monday, January 26, 2004), page B1.
• The Cookie Dilemma. Continental Airlines In-Flight Magazine, July 2002.
• Privacy hole found in Verizon Wireless Web site, ComputerWorld, September 6, 2001.
• Secure Sockets Layer is not a Magic Bullet, NetworkMagazine.com, January 5, 2001.
• The Failure of SSL and the Pervasive Reality of Server Attacks, HostingTech, June 2000.
• What's the Password? Hackers May Already Know, BusinessWeek Magazine, November 15, 1999.

Security advisories

• Circumvent SSL client authentication in RSA's SSLJ library
  [Photo of happy engineers who just received free T-Shirts. RSA sent us a thank you letter.]
• We explained to Dow Jones' Wall Street Journal Interactive Edition how to circumvent the user login process.
  The VP sent us a thank you note.
• Use of Akamai hosts to circumvent SSL server authentication
• Misleading warning causes failure of Netscape SSL server authentication
• Wireless web phones can leak your phone number to untrusted web sites.

Articles and notes

• Are you gullible?, rec.humor.funny, June 2000.
• General editor, ACM Crossroads Magazine, November 1998-September 2000.
• In Memory of David Huffman. ACM Crossroads Magazine, Issue 6.3 Data Compression, Spring 2000.
• RTLinux: An Interview with Victor Yodaiken. ACM Crossroads Magazine, Issue 6.1 Linux, Fall 1999.
• Guest editor for the Linux Fall 1999 issue of ACM's Crossroads Magazine
• Summaries of the 1999 USENIX Security Symposium, published in the IEEE Electronic Cipher and USENIX ;login: magazine, August 1999.
• Guest editor for the Winter 1998 issue of ACM's Crossroads Magazine
• Summaries of the 1998 USENIX Electronic Commerce Workshop, ;login:, December 1998.
• Summaries of the 1998 USENIX Annual Technical Conference, ;login:, October 1998.
• Summaries of 1998 USENIX Security Symposium
• Underground Guide to VI-A (MIT-only)
• Jered Floyd, Kevin Fu, Peter Sun, "Differential Fault Analysis of RC5," December 1996. (PDF, compressed PS)
• Summaries of the Computers, Freedom, and Privacy 1996 Conference
• Security and Chocolate, Web Review, Internet World, 1995 (warning, abnormally high cheese factor)
• One-and-two-liner contest (really weak encryption), Nibble Magazine, 1991.
• Kevin Fu. "A Fine Weigh to See World," The Dow Jones National Observer, p. 17, March 19, 1977.