Communications of the ACM
Refine your search:
How the “Frontier” Became the Slogan of Uncontrolled AI
Artificial intelligence (AI) has been billed as the next frontier of humanity: the newly available expanse whose exploration …
From Schneier on Security
Cybercriminals Infiltrating E-Mail Networks to Divert Large Customer Payments
There's a new criminal tactic involving hacking an e-mail account of a company that handles high-value transactions and diverting payments. Here it is in real estate...
From Schneier on Security
Daphne Caruana Galizia's Murder and the Security of WhatsApp
Daphne Caruana Galizia was a Maltese journalist whose anti-corruption investigations exposed powerful people. She was murdered in October by a car bomb. Galizia...
From Schneier on Security
Friday Squid Blogging: Squid Product Recall
Lidl is recalling two of its packaged squid products because of the presence of struvite salt crystals. The danger is unclear. The article says that struvite crystals...
From Schneier on Security
Fraud Detection in Pokémon Go
I play Pokémon Go. (There, I've admitted it.) One of the interesting aspects of the game I've been watching is how the game's publisher, Niantec, deals with cheaters...
From Schneier on Security
Heart Size: Yet Another Biometric
Turns out that heart size doesn't change throughout your adult life, and you can use low-level Doppler radar to scan the size -- even at a distance -- as a biometric...
From Schneier on Security
Attack on Old ANSI Random Number Generator
Almost 20 years ago, I wrote a paper that pointed to a potential flaw in the ANSI X9.17 RNG standard. Now, new research has found that the flaw exists in some implementations...
From Schneier on Security
Google Login Security for High-Risk Users
Google has a new login service for high-risk users. it's good, but unforgiving. Logging in from a desktop will require a special USB key, while accessing your data...
From Schneier on Security
Friday Squid Blogging: Steel Mesh Giant Squid Used as Artificial Reef
Researchers in the British Virgin Islands have sunk a giant squid made out of steel mesh to serve as an artificial reef. As usual, you can also use this squid post...
From Schneier on Security
FBI Increases Its Anti-Encryption Rhetoric
Earlier this month, Deputy Attorney General Rod Rosenstein gave a speech warning that a world with encryption is a world without law -- or something like that....
From Schneier on Security
The Science of Interrogation
Fascinating article about two psychologists who are studying interrogation techniques. Now, two British researchers are quietly revolutionising the study and practice...
From Schneier on Security
CSE Releases Malware Analysis Tool
The Communications Security Establishment of Canada -- basically, Canada's version of the NSA -- has released a suite of malware analysis tools: Assemblyline is...
From Schneier on Security
Reaper Botnet
It's based on the Mirai code, but much more virulent: While Mirai caused widespread outages, it impacted IP cameras and internet routers by simply exploiting their...
From Schneier on Security
Hacking Back
Hacking back is a terrible idea that just will not die. Josephine Wolff takes apart the new hacking back bill that was introduced in the House recently....
From Schneier on Security
Friday Squid Blogging: "How the Squid Lost Its Shell"
Interesting essay by Danna Staaf, the author of Squid Empire. (I mentioned the book two weeks ago.) As usual, you can also use this squid post to talk about the...
From Schneier on Security
Denuvo DRM Cracked within a Day of Release
Denuvo is probably the best digital-rights management system, used to protect computer games. It's regularly cracked within a day. If Denuvo can no longer provide...
From Schneier on Security
Security Flaws in Children's Smart Watches
The Norwegian Security Council has published a report detailing a series of security and privacy flaws in smart watches marketed to children. Press release. News...
From Schneier on Security
IoT Cybersecurity: What's Plan B?
In August, four US Senators introduced a bill designed to improve Internet of Things (IoT) security. The IoT Cybersecurity Improvement Act of 2017 is a modest piece...
From Schneier on Security
Security Flaw in Infineon Smart Cards and TPMs
A security flaw in Infineon smart cards and TPMs allows an attacker to recover private keys from the public keys. Basically, the key generation algorithm sometimes...
From Schneier on Security