acm-header
Sign In

Communications of the ACM

Blogroll


bg-corner

Mapping License Plate Scanners in the US
From Schneier on Security

Mapping License Plate Scanners in the US

DeFlock is a crowd-sourced project to map license plate scanners. It only records the fixed scanners, of course. The mobile scanners on cars are not mapped. The...

Criminals Exploiting FBI Emergency Data Requests
From Schneier on Security

Criminals Exploiting FBI Emergency Data Requests

I’ve been writing about the problem with lawful-access backdoors in encryption for decades now: that as soon as you create a mechanism for law enforcement to bypass...

Friday Squid Blogging: Squid-A-Rama in Des Moines
From Schneier on Security

Friday Squid Blogging: Squid-A-Rama in Des Moines

Squid-A-Rama will be in Des Moines at the end of the month. Visitors will be able to dissect squid, explore fascinating facts about the species, and witness a live...

AI Industry is Trying to Subvert the Definition of “Open Source AI”
From Schneier on Security

AI Industry is Trying to Subvert the Definition of “Open Source AI”

The Open Source Initiative has published (news article here) its definition of “open source AI,” and it’s terrible. It allows for secret training data and mechanisms...

Prompt Injection Defenses Against LLM Cyberattacks
From Schneier on Security

Prompt Injection Defenses Against LLM Cyberattacks

Interesting research: “Hacking Back the AI-Hacker: Prompt Injection as a Defense Against LLM-driven Cyberattacks“: Large language models (LLMs) are increasingly...

Subverting LLM Coders
From Schneier on Security

Subverting LLM Coders

Really interesting research: “An LLM-Assisted Easy-to-Trigger Backdoor Attack on Code Completion Models: Injecting Disguised Vulnerabilities against Strong Detection...

IoT Devices in Password-Spraying Botnet
From Schneier on Security

IoT Devices in Password-Spraying Botnet

Microsoft is warning Azure cloud users that a Chinese controlled botnet is engaging in “highly evasive” password spraying. Not sure about the “highly evasive” part...

AIs Discovering Vulnerabilities
From Schneier on Security

AIs Discovering Vulnerabilities

I’ve been writing about the possibility of AIs automatically discovering code vulnerabilities since at least 2018. This is an ongoing area of research: AIs doing...

Sophos Versus the Chinese Hackers
From Schneier on Security

Sophos Versus the Chinese Hackers

Really interesting story of Sophos’s five-year war against Chinese hackers.

Friday Squid Blogging: Squid Sculpture in Massachusetts Building
From Schneier on Security

Friday Squid Blogging: Squid Sculpture in Massachusetts Building

Great blow-up sculpture. Blog moderation policy.

Roger Grimes on Prioritizing Cybersecurity Advice
From Schneier on Security

Roger Grimes on Prioritizing Cybersecurity Advice

This is a good point: Part of the problem is that we are constantly handed lists…list of required controls…list of things we are being asked to fix or improve…lists...

Tracking World Leaders Using Strava
From Schneier on Security

Tracking World Leaders Using Strava

Way back in 2018, people noticed that you could find secret military bases using data published by the Strava fitness app. Soldiers and other military personalLe...

Simpson Garfinkel on Spooky Cryptographic Action at a Distance
From Schneier on Security

Simpson Garfinkel on Spooky Cryptographic Action at a Distance

Excellent read. One example: Consider the case of basic public key cryptography, in which a person’s public and private key are created together in a single operation...

Law Enforcement Deanonymizes Tor Users
From Schneier on Security

Law Enforcement Deanonymizes Tor Users

The German police have successfully deanonymized at least four Tor users. It appears they watch known Tor relays and known suspects, and use timing analysis towritten...

Criminals Are Blowing up ATMs in Germany
From Schneier on Security

Criminals Are Blowing up ATMs in Germany

It’s low tech, but effective. Why Germany? It has more ATMs than other European countries, and—if I read the article right—they have more money in them.

Friday Squid Blogging: Giant Squid Found on Spanish Beach
From Schneier on Security

Friday Squid Blogging: Giant Squid Found on Spanish Beach

A giant squid has washed up on a beach in Northern Spain. Blog moderation policy.

Watermark for LLM-Generated Text
From Schneier on Security

Watermark for LLM-Generated Text

Researchers at Google have developed a watermark for LLM-generated text. The basics are pretty obvious: the LLM chooses between tokens partly based on a cryptographic...

Are Automatic License Plate Scanners Constitutional?
From Schneier on Security

Are Automatic License Plate Scanners Constitutional?

An advocacy groups is filing a Fourth Amendment challenge against automatic license plate readers. “The City of Norfolk, Virginia, has installed a network of cameras...

No, The Chinese Have Not Broken Modern Encryption Systems with a Quantum Computer
From Schneier on Security

No, The Chinese Have Not Broken Modern Encryption Systems with a Quantum Computer

The headline is pretty scary: “China’s Quantum Computer Scientists Crack Military-Grade Encryption.” No, it’s not true. This debunking saved me the trouble of writing...

AI and the SEC Whistleblower Program
From Schneier on Security

AI and the SEC Whistleblower Program

Tax farming is the practice of licensing tax collection to private contractors. Used heavily in ancient Rome, it’s largely fallen out of practice because of the...
Sign In for Full Access
» Forgot Password? » Create an ACM Web Account