Hear the story of three University of Malta students who got arrested (but eventually pardoned) for disclosing a vulnerability in good faith, #39C3 day 3. @srldf.bsky.social helped support their legal defense. events.ccc.de/congress/202...
The Security Research Legal Defense Fund is now on the socials, here and Twitter (@SecurityLDF). It's my honor to be on the SRLDF Board with @harleygeiger.bsky.social and Jim Dempsey, and I am proud of the work we've been able to do and help hackers in trouble.
Watch @harleygeiger.bsky.social and Charley Snyder introduce "A Legal Defense Fund for Hackers" at Shmoocon 2024 www.youtube.com/watch?v=jRiQ...
Stop.
Good morning, Night City.
Scoop: NIST's Computer Security Division — responsible for research & standards on cyber, privacy, cryptography, AI, etc. — has lost more than a dozen people, including its chief, to early retirements. www.cybersecuritydive.com/news/nist-cy...
The departures could imperil key work.
BREAKING.
From a reliable source. MITRE support for the CVE program is due to expire tomorrow. The attached letter was sent out to CVE Board Members.
Absolute masterclass.
“Whoever creates this stuff has no idea what pain is whatsoever. I am utterly disgusted,” Miyazaki said. “I would never wish to incorporate this technology into my work at all. I strongly feel that this is an insult to life itself.”
Came here for this info. Thank you, Meredith.
@sellars.bsky.social, @caseyellis.bsky.social, Dane Sherrets, Dawn Song, @harleygeiger.bsky.social, Ilona Cohen, Lauren McIlvenny, Madhulika Srikumar, Mark Jaycox, Markus Anderljung, Nadine Farid Johnson, Nicholas Carlini, Micolas Miailhe, Nik Marda, @peterhenderson.bsky.social, ...
Podcast: risky.biz/RBNEWS393/
Newsletter: risky.biz/risky-bullet...
-Trump administration stops treating Russian hackers as a threat
-Meta seeks permanent NSO ban
-New Cellebrite 0-days come to light
-3rd-party breaches are now a headache for cyber insurers
-WazaWaka and Ermakov get home detention
Every effort to demolish a hierarchy is in fact an effort to establish a hierarchy.
In August 2023 I took @harleygeiger.bsky.social's "How hackers can send feedback directly to policymakers like the pros" at @defcon.bsky.social and today we have renewed interest in a 2023 letter in the military's broad use of ADS-B exemptions.
norton.house.gov/media/press-...
Last Friday, I spoke on a panel at the MIT Sloan AI Conference. I discussed the broken AI Harm reporting landscape, the importance of evals, safe harbors, structured disclosures, and our proposed Coordinated Flaws Disclosure framework as a path forward. Great questions and thanks for having me!
Learning nothing from Salt Typhoon - where China hacked a backdoor built into the phone system for law enforcement use - the UK demands more backdoors for law enforcement use.
Lead with kindness
They cant get my data if i am Fully Dissolved in a bath tub full of sodium hydroxide
Very grateful for work of the volunteers and ambassadors, though the list is incomplete without a monumental thanks to @beauwoods.com.
Around one hundred cybersecurity researchers and practitioners, and cyber policymakers in the Dirksen Senate Building room 106 for Hackers on the Hill
Thank you to the dozens of volunteers and ambassadors who helped plan, set up, and run Hackers on the Hill this year, as well as the ~150 hackers who attended and the 20+ staffers who were gracious enough to host us (many on a day their office was officially closed). ❤️
A few special thank yous
It is absolutely wild that LLM vendors have tried to file DMCA claims against researchers testing LLMs that the vendors themselves trained on unlicensed copyrighted material.
Glad to see that they're losing DMCA as a weapon.
www.centerforcybersecuritypolicy.org/insights-and...
If your cyber lawyer’s personal laptop isn’t covered in stickers, can you really trust them
The #SCOTUS ruling in Loper Bright Enterprises v. Raimondo reversed the long-standing Chevron doctrine. How will this impact cybersecurity regulations? Dive into our analysis by Harley Geiger, Ines Jordan-Zoob, and Tanvi Chopra. www.centerforcybersecuritypolicy.org/insights-and...
For whom doth the siren wail? These practiced attentions and intentions fly to bear thee unto comfort and recovery amidst enchanted machines and chemistry. Take heart. Take ours.
Zone four, four alpha dispatch.
“Mozilla dug into 11 different AI romance chatbots, including popular apps such as Replika, Chai, Romantic AI, EVA AI Chat Bot & Soulmate, and CrushOn.AI. Every single one earned the Privacy Not Included label, putting these chatbots among the worst categories of products Mozilla has ever reviewed.”
The Hacking Policy Council's @harleygeiger.bsky.social discusses the importance of #AI red teaming and how it can test for biases, discrimination, inaccuracies, and more undesirable outcomes during his lightning talk at #SOTN2024.
