AIs Discovering Vulnerabilities
November 5 2024I’ve been writing about the possibility of AIs automatically discovering code vulnerabilities since at least 2018. This is an ongoing area of research: AIs doing source code scanning,...
Read moreSophos Versus the Chinese Hackers
November 4 2024Really interesting story of Sophos’s five-year war against Chinese hackers.
Read moreFriday Squid Blogging: Squid Sculpture in Massachusetts Building
November 2 2024Great blow-up sculpture. Blog moderation policy.
Read moreRoger Grimes on Prioritizing Cybersecurity Advice
October 31 2024This is a good point:
Part of the problem is that we are constantly handed lists…list of required controls…list of things we are being asked to fix or improve…lists...
Read more
Tracking World Leaders Using Strava
October 31 2024Way back in 2018, people noticed that you could find secret military bases using data published by the Strava fitness app. Soldiers and other military personal were using them...
Read moreSimson Garfinkel on Spooky Cryptographic Action at a Distance
October 30 2024Excellent read. One example:
Consider the case of basic public key cryptography, in which a person’s public and private key are created together in a single operation. These two...
Read more
Law Enforcement Deanonymizes Tor Users
October 29 2024The German police have successfully deanonymized at least four Tor users. It appears they watch known Tor relays and known suspects, and use timing analysis to figure out who...
Read moreCriminals Are Blowing up ATMs in Germany
October 29 2024It’s low tech, but effective. Why Germany? It has more ATMs than other European countries, and—if I read the article right—they have more money in them.
Read moreFriday Squid Blogging: Giant Squid Found on Spanish Beach
October 26 2024A giant squid has washed up on a beach in Northern Spain. Blog moderation policy.
Read moreWatermark for LLM-Generated Text
October 25 2024Researchers at Google have developed a watermark for LLM-generated text. The basics are pretty obvious: the LLM chooses between tokens partly based on a cryptographic key, and someone with...
Read more
Recent Comments