Communications of the ACM
Refine your search:
How the “Frontier” Became the Slogan of Uncontrolled AI
Artificial intelligence (AI) has been billed as the next frontier of humanity: the newly available expanse whose exploration …
From Schneier on Security
Using Intel's SGX to Attack Itself
Researchers have demonstrated using Intel's Software Guard Extensions to hide malware and steal cryptographic keys from inside SGX's protected enclave: Malware...
From Schneier on Security
IoT Teddy Bear Leaked Personal Audio Recordings
CloudPets are an Internet-connected stuffed animals that allow children and parents to send each other voice messages. Last week, we learned that Spiral Toys had...
From Schneier on Security
France Abandons Plans for Internet Voting
Some good election security news for a change: France is dropping its plans for remote Internet voting, because it's concerned about hacking....
From Schneier on Security
Digital Security Exchange: Security for High-Risk Communities
I am part of this very interesting project: For many users, blog posts on how to install Signal, massive guides to protecting your digital privacy, and broad statements...
From Schneier on Security
Ransomware for Sale
Brian Krebs posts a video advertisement for Philadelphia, a ransomware package that you can purchase....
From Schneier on Security
The CIA's "Development Tradecraft DOs and DON'Ts"
Useful best practices for malware writers, courtesy of the CIA. Seems like a lot of good advice. General: DO obfuscate or encrypt all strings and configuration...
From Schneier on Security
FBI's Exploit Against Tor
The Department of Justice is dropping all charges in a child-porn case rather than release the details of a hack against Tor....
From Schneier on Security
Friday Squid Blogging: Squid Cooking Techniques
Here are some squid cooking tips. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered....
From Schneier on Security
Podcast Interview with Me
Here's a video interview I did at RSA on the Internet of Things and security....
From Schneier on Security
Defense Against Doxing
A decade ago, I wrote about the death of ephemeral conversation. As computers were becoming ubiquitous, some unintended changes happened, too. Before computers,...
From Schneier on Security
Google Discloses Details of an Unpatched Microsoft Vulnerability
Google's Project Zero is serious about releasing the details of security vulnerabilities 90 days after they alert the vendors, even if they're unpatched. It just...
From Schneier on Security
More on the CIA Document Leak
If I had to guess right now, I'd say the documents came from an outsider and not an insider. My reasoning: One, there is absolutely nothing illegal in the contents...
From Schneier on Security
The US Has Been Conducting Offensive Cyberattacks against North Korea
The New York Times is reporting that the US has been conducting offensive cyberattacks against North Korea, in an effort to delay its nuclear weapons program......
From Schneier on Security
WikiLeaks Releases CIA Hacking Tools
WikiLeaks just released a cache of 8,761 classified CIA documents from 2012 to 2016, including details of its offensive Internet operations. I have not read through...
From Schneier on Security
Building Smarter Ransomware
Matthew Green and students speculate on what truly well-designed ransomware system could look like: Most modern ransomware employs a cryptocurrency like Bitcoin...
From Schneier on Security
Howard Schmidt
Longtime Internet security-policy pioneer Howard Schmidt died on Friday. He will be missed....
From Schneier on Security
Uber Uses Ubiquitous Surveillance to Identify and Block Regulators
The New York Times reports that Uber developed apps that identified and blocked government regulators using the app to find evidence of illegal behavior: Yet using...
From Schneier on Security
Friday Squid Blogging: When Squid Evolved
Squid evolved during an "evolutionary war" -- the Mesozoic Marine Revolution -- about 100 million years ago. Research paper. As usual, you can also use this squid...
From Schneier on Security