Communications of the ACM
Refine your search:
How the “Frontier” Became the Slogan of Uncontrolled AI
Artificial intelligence (AI) has been billed as the next frontier of humanity: the newly available expanse whose exploration …
From Schneier on Security
The Effects of GDPR's 72-Hour Notification Rule
The EU's GDPR regulation requires companies to report a breach within 72 hours. Alex Stamos, former Facebook CISO now at Stanford University, points out how this...
From Schneier on Security
Terahertz Millimeter-Wave Scanners
Interesting article on terahertz millimeter-wave scanners and their uses to detect terrorist bombers. The heart of the device is a block of electronics about the...
From Schneier on Security
Sophisticated Voice Phishing Scams
Brian Krebs is reporting on some new and sophisticated phishing scams over the telephone. I second his advice: "never give out any information about yourself in...
From Schneier on Security
Facebook Is Using Your Two-Factor Authentication Phone Number to Target Advertising
From Kashmir Hill: Facebook is not content to use the contact information you willingly put into your Facebook profile for advertising. It is also using contact...
From Schneier on Security
More on the Five Eyes Statement on Encryption and Backdoors
Earlier this month, I wrote about a statement by the Five Eyes countries about encryption and back doors. (Short summary: they like them.) One of the weird things...
From Schneier on Security
Friday Squid Blogging: Squid Protein Used in Variable Thermal Conductivity Material
This is really neat. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines...
From Schneier on Security
Major Tech Companies Finally Endorse Federal Privacy Regulation
The major tech companies, scared that states like California might impose actual privacy regulations, have now decided that they can better lobby the federal government...
From Schneier on Security
Yet Another IoT Cybersecurity Document
This one is from NIST: "Considerations for Managing Internet of Things (IoT) Cybersecurity and Privacy Risks." It's still in draft. Remember, there are many others...
From Schneier on Security
Counting People Through a Wall with WiFi
Interesting research: In the team's experiments, one WiFi transmitter and one WiFi receiver are behind walls, outside a room in which a number of people are present...
From Schneier on Security
Evidence for the Security of PKCS #1 Digital Signatures
This is interesting research: "On the Security of the PKCS#1 v1.5 Signature Scheme": Abstract: The RSA PKCS#1 v1.5 signature algorithm is the most widely used digital...
From Schneier on Security
New Variants of Cold-Boot Attack
If someone has physical access to your shut-down computer, they can probably break the hard-drive's encryption. This is a "cold boot" attack, and one we thought...
From Schneier on Security
Friday Squid Blogging: British Columbia "Squid Run" Is a Tourist Attraction
On James Island. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines...
From Schneier on Security
New Findings About Prime Number Distribution Almost Certainly Irrelevant to Cryptography
Lots of people are e-mailing me about this new result on the distribution of prime numbers. While interesting, it has nothing to do with cryptography. Cryptographers...
From Schneier on Security
AES Resulted in a $250 Billion Economic Benefit
NIST has released a new study concluding that the AES encryption standard has resulted in a $250 billion world-wide economic benefit over the past twenty years....
From Schneier on Security
Security Vulnerability in ESS ExpressVote Touchscreen Voting Computer
Of course the ESS ExpressVote voting computer will have lots of security vulnerabilities. It's a computer, and computers have lots of vulnerabilities. This particular...
From Schneier on Security
Pegasus Spyware Used in 45 Countries
Citizen Lab has published a new report about the Pegasus spyware. From a ZDNet article: The malware, known as Pegasus (or Trident), was created by Israeli cyber...
From Schneier on Security
Public Shaming of Companies for Bad Security
Troy Hunt makes some good points, with good examples....
From Schneier on Security
NSA Attacks Against Virtual Private Networks
A 2006 document from the Snowden archives outlines successful NSA operations against "a number of "high potential" virtual private networks, including those of...
From Schneier on Security
Friday Squid Blogging: Dissecting a Giant Squid
Lessons learned. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines...
From Schneier on Security