Friday Squid Blogging: Female Gonatus Onyx Squid Carrying Her Eggs
November 16 2024Fantastic video of a female Gonatus onyx squid swimming while carrying her egg sack. An earlier related post. Blog moderation policy.
Read moreGood Essay on the History of Bad Password Policies
November 15 2024Stuart Schechter makes some good points on the history of bad password policies:
Morris and Thompson’s work brought much-needed data to highlight a problem that lots of people suspected...
Read more
Everybody is reporting about a new security iPhone security feature with iOS 18: if the phone hasn’t been used for a few days, it automatically goes into its “Before...
Read moreMapping License Plate Scanners in the US
November 13 2024DeFlock is a crowd-sourced project to map license plate scanners. It only records the fixed scanners, of course. The mobile scanners on cars are not mapped. The post Mapping License Plate...
Read moreCriminals Exploiting FBI Emergency Data Requests
November 12 2024I’ve been writing about the problem with lawful-access backdoors in encryption for decades now: that as soon as you create a mechanism for law enforcement to bypass encryption, the...
Read moreFriday Squid Blogging: Squid-A-Rama in Des Moines
November 9 2024Squid-A-Rama will be in Des Moines at the end of the month. Visitors will be able to dissect squid, explore fascinating facts about the species, and witness a live squid...
Read morePrompt Injection Defenses Against LLM Cyberattacks
November 8 2024Interesting research: “Hacking Back the AI-Hacker: Prompt Injection as a Defense Against LLM-driven Cyberattacks“:
Large language models (LLMs) are increasingly being harnessed to automate cyberattacks, making sophisticated exploits more...
Read more
Subverting LLM Coders
November 7 2024Really interesting research: “An LLM-Assisted Easy-to-Trigger Backdoor Attack on Code Completion Models: Injecting Disguised Vulnerabilities against Strong Detection“:
Abstract: Large Language Models (LLMs) have transformed code completion tasks, providing...
Read more
IoT Devices in Password-Spraying Botnet
November 6 2024Microsoft is warning Azure cloud users that a Chinese controlled botnet is engaging in “highly evasive” password spraying. Not sure about the “highly evasive” part; the techniques seem...
Read more
Recent Comments