Communications of the ACM
Refine your search:
How the “Frontier” Became the Slogan of Uncontrolled AI
Artificial intelligence (AI) has been billed as the next frontier of humanity: the newly available expanse whose exploration …
From Schneier on Security
Backdoors in Cisco Routers
We don't know if this is error or deliberate action, but five backdoors have been discovered already this year....
From Schneier on Security
Hacking a Robot Vacuum
The Diqee 360 robotic vacuum cleaner can be turned into a surveillance device. The attack requires physical access to the device, so in the scheme of things it's...
From Schneier on Security
The Poor Cybersecurity of US Space Assets
Good policy paper (summary here) on the threats, current state, and potential policy solutions for the poor security of US space systems....
From Schneier on Security
Identifying People by Metadata
Interesting research: "You are your Metadata: Identification and Obfuscation of Social Media Users using Metadata Information," by Beatrice Perez, Mirco Musolesi...
From Schneier on Security
Friday Squid Blogging: Squid Deception
This is a fantastic video of a squid attracting prey with a tentacle that looks like a smaller squid. As usual, you can also use this squid post to talk about the...
From Schneier on Security
New Report on Police Digital Forensics Techniques
According to a new CSIS report, "going dark" is not the most pressing problem facing law enforcement in the age of digital data: Over the past year, we conducted...
From Schneier on Security
Third Annual Cybercrime Conference
Ross Anderson liveblogged the Third Annual Cybercrime Conference...
From Schneier on Security
Google Employees Use a Physical Token as Their Second Authentication Factor
Krebs on Security is reporting that all 85,000 Google employees use two-factor authentication with a physical token. A Google spokesperson said Security Keys now...
From Schneier on Security
DARPA Wants Research into Resilient Anonymous Communications
DARPA is funding research into resilient anonymous communications systems....
From Schneier on Security
Major Bluetooth Vulnerability
Bluetooth has a serious security vulnerability: In some implementations, the elliptic curve parameters are not all validated by the cryptographic algorithm implementation...
From Schneier on Security
On Financial Fraud
There are some good lessons in this article on financial fraud: That's how we got it so wrong. We were looking for incidental breaches of technical regulations,...
From Schneier on Security
Nicholas Weaver on Cryptocurrencies
This is well-worth reading (non-paywalled version). Here's the opening: Cryptocurrencies, although a seemingly interesting idea, are simply not fit for purpose....
From Schneier on Security
1Password's Travel Mode
The 1Password password manager has just introduced "travel mode," which allows you to delete your stored passwords when you're in other countries or crossing borders...
From Schneier on Security
Friday Squid Blogging: Dead Squid on Prince Edward Island
A beach on Prince Edward Island is littered with dead squid. No one knows why. As usual, you can also use this squid post to talk about the security stories in...
From Schneier on Security
New Report on Chinese Intelligence Cyber-Operations
The company ProtectWise just published a long report linking a bunch of Chinese cyber-operations over the past few years. The always interesting gruqq has some...
From Schneier on Security
Suing South Carolina Because Its Election Machines Are Insecure
A group called Protect Democracy is suing South Carolina because its insecure voting machines are effectively denying people the right to vote. Note: I am an advisor...
From Schneier on Security
Defeating the iPhone Restricted Mode
Recently, Apple introduced restricted mode to protect iPhones from attacks by companies like Cellebrite and Greyshift, which allow attackers to recover information...
From Schneier on Security
Installing a Credit Card Skimmer on a POS Terminal
Watch how someone installs a credit card skimmer in just a couple of seconds. I don't know if the skimmer just records the data and is collected later, or if it...
From Schneier on Security
Reasonably Clever Extortion E-mail Based on Password Theft
Imagine you've gotten your hands on a file of e-mail addresses and passwords. You want to monetize it, but the site it's for isn't very valuable. How do you use...
From Schneier on Security