Declassified NSA Newsletters By means of a 2010 FOIA request (sure, it took that lengthy), now we have copies of the NSA’s KRYPTOS Society Publication, “Tales of the Krypt,” from 1994 to 2003. There are various fascinating issues within the 800 pages of publication. There are various redactions. And a 1994 assessment of Utilized Cryptography … Read more
xz Utils Backdoor The cybersecurity world bought actually fortunate final week. An deliberately positioned backdoor in xz Utils, an open-source compression utility, was just about by accident found by a Microsoft engineer—weeks earlier than it could have been included into each Debian and Purple Hat Linux. From ArsTehnica: Malicious code added to xz Utils variations … Read more
Ross Anderson Ross Anderson unexpectedly handed away Thursday night time in, I consider, his house in Cambridge. I can’t keep in mind after I first met Ross. After all it was earlier than 2008, after we created the Safety and Human Conduct workshop. It was properly earlier than 2001, after we created the Workshop on … Read more
Licensing AI Engineers The talk over professionalizing software program engineers is a long time previous. (The essential concept is that, like legal professionals and designers, there needs to be some skilled licensing requirement for software program engineers.) Right here’s a regulation journal article recommending the identical concept for AI engineers. This Article proposes one other … Read more
On Safe Voting Programs Andrew Appel shepherded a public remark—signed by twenty election cybersecurity specialists, together with myself—on finest practices for poll marking gadgets and vote tabulation. It was written for the Pennsylvania legislature, nevertheless it’s basic in nature. From the manager abstract: We imagine that no system is ideal, with every having trade-offs. Hand-marked … Read more
