On the Insecurity of Software Bloat
February 15 2024Good essay on software bloat and the insecurities it causes.
The world ships too much code, most of it by third parties, sometimes unintended, most of it uninspected. Because...
Read more
Upcoming Speaking Engagements
February 15 2024This is a current list of where and when I am scheduled to speak:
- I’m speaking at the Munich Security Conference (MSC) 2024 in Munich, Germany, on Friday, February... Read more
Improving the Cryptanalysis of Lattice-Based Public-Key Algorithms
February 14 2024The winner of the Best Paper Award at Crypto this year was a significant improvement to lattice-based cryptanalysis. This is important, because a bunch of NIST’s post-quantum options base their...
Read moreA Hacker’s Mind is Out in Paperback
February 14 2024The paperback version of A Hacker’s Mind has just been published. It’s the same book, only a cheaper format. But—and this is the real reason I am posting this—Amazon has...
Read moreMolly White Reviews Blockchain Book
February 13 2024Molly White—of “Web3 is Going Just Great” fame—reviews Chris Dixon’s blockchain solutions book: Read Write Own:
In fact, throughout the entire book, Dixon fails to identify a...
Read more
On Passkey Usability
February 13 2024Matt Burgess tries to only use passkeys. The results are mixed.
Read moreFriday Squid Blogging: A Penguin Named “Squid”
February 10 2024Amusing story about a penguin named “Squid.” As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Read my...
Read moreNo, Toothbrushes Were Not Used in a Massive DDoS Attack
February 10 2024The widely reported story last week that 1.5 million smart toothbrushes were hacked and used in a DDoS attack is false. Near as I can tell, a German reporter talking...
Read moreOn Software Liabilities
February 8 2024Over on Lawfare, Jim Dempsey published a really interesting proposal for software liability: “Standard for Software Liability: Focus on the Product for Liability, Focus on the Process for...
Read moreTeaching LLMs to Be Deceptive
February 7 2024Interesting research: “Sleeper Agents: Training Deceptive LLMs that Persist Through Safety Training“:
Abstract: Humans are capable of strategically deceptive behavior: behaving helpfully in most situations, but then behaving very...
Read more
Recent Comments