acm-header
Sign In

Communications of the ACM

Blogroll


bg-corner

Friday Squid Blogging: Squid in Concert
From Schneier on Security

Friday Squid Blogging: Squid in Concert

Squid is performing a concert in London in February. If you don’t know what their music is like, try this or this or this. As usual, you can also use this squid...

Apple Patches iPhone Zero-Day
From Schneier on Security

Apple Patches iPhone Zero-Day

The most recent iPhone update—to version 16.1.2—patches a zero-day vulnerability that “may have been actively exploited against versions of iOS released beforeNews...

A Security Vulnerability in the KmsdBot Botnet
From Schneier on Security

A Security Vulnerability in the KmsdBot Botnet

Security researchers found a software bug in the KmsdBot cryptomining botnet: With no error-checking built in, sending KmsdBot a malformed command­—like its controllers...

Reimagining Democracy
From Schneier on Security

Reimagining Democracy

Last week, I hosted a two-day workshop on reimagining democracy. The idea was to bring together people from a variety of disciplines who are all thinking about...

Hacking Boston’s CharlieCard
From Schneier on Security

Hacking Boston’s CharlieCard

Interesting discussion of vulnerabilities and exploits against Boston’s CharlieCard.

Obligatory ChatGPT Post
From Schneier on Security

Obligatory ChatGPT Post

Seems like absolutely everyone everywhere is playing with Chat GPT. So I did, too…. Write an essay in the style of Bruce Schneier on how ChatGPT will affect cybersecurity...

Apple Is Finally Encrypting iCloud Backups
From Schneier on Security

Apple Is Finally Encrypting iCloud Backups

After way too many years, Apple is finally encrypting iCloud backups: Based on a screenshot from Apple, these categories are covered when you flip on Advanced Data...

Friday Squid Blogging: China Bans Taiwanese Squid Imports
From Schneier on Security

Friday Squid Blogging: China Bans Taiwanese Squid Imports

Today I have some squid geopolitical news. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Read...

Hacking Trespass Law
From Schneier on Security

Hacking Trespass Law

This article talks about public land in the US that is completely surrounded by private land, which in some cases makes it inaccessible to the public. But there...

Security Vulnerabilities in Eufy Cameras
From Schneier on Security

Security Vulnerabilities in Eufy Cameras

Eufy cameras claim to be local only, but upload data to the cloud. The company is basically lying to reporters, despite being shown evidence to the contrary. The...

Leaked Signing Keys Are Being Used to Sign Malware
From Schneier on Security

Leaked Signing Keys Are Being Used to Sign Malware

A bunch of Android OEM signing keys have been leaked or stolen, and they are actively being used to sign malware. Łukasz Siewierski, a member of Google’s Android...

The Decoupling Principle
From Schneier on Security

The Decoupling Principle

This is a really interesting paper that discusses what the authors call the Decoupling Principle: The idea is simple, yet previously not clearly articulated: to...

CryWiper Data Wiper Targeting Russian Sites
From Schneier on Security

CryWiper Data Wiper Targeting Russian Sites

Kaspersky is reporting on a data wiper masquerading as ransomware that is targeting local Russian government networks. The Trojan corrupts any data that’s not...

CAPTCHA
From Schneier on Security

CAPTCHA

This is an actual CAPTCHA I was shown when trying to log into PayPal. As an actual human and not a bot, I had no idea how to answer. Is this a joke? (Seems not...

Friday Squid Blogging: Legend of the Indiana Oil-Pit Squid
From Schneier on Security

Friday Squid Blogging: Legend of the Indiana Oil-Pit Squid

At a GMC plant. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Read my blog posting guidelines...

Existential Risk and the Fermi Paradox
From Schneier on Security

Existential Risk and the Fermi Paradox

We know that complexity is the worst enemy of security, because it makes attack easier and defense harder. This becomes catastrophic as the effects of that attack...

LastPass Security Breach
From Schneier on Security

LastPass Security Breach

The company was hacked, and customer information accessed. No passwords were compromised.

Sirius XM Software Vulnerability
From Schneier on Security

Sirius XM Software Vulnerability

This is new: Newly revealed research shows that a number of major car brands, including Honda, Nissan, Infiniti, and Acura, were affected by a previously undisclosed...

Facebook Fined $276M under GDPR
From Schneier on Security

Facebook Fined $276M under GDPR

Facebook—Meta—was just fined $276 million (USD) for a data leak that included full names, birth dates, phone numbers, and location. Meta’s total fine by the Data...

Charles V of Spain Secret Code Cracked
From Schneier on Security

Charles V of Spain Secret Code Cracked

Diplomatic code cracked after 500 years: In painstaking work backed by computers, Pierrot found “distinct families” of about 120 symbols used by Charles V. “Whole...
Sign In for Full Access
» Forgot Password? » Create an ACM Web Account