Schneier on Security

In this issue:

1. Improving C++
2. Drones and the US Air Force
3. AI and the Evolution of Social Media
4. Cheating Automatic Toll Booths by Obscuring License Plates
5. Public AI as an Alternative to Corporate AI
6. Google Pays $10M in Bug Bounties in 2023
7. Licensing AI Engineers
8. On Secure Voting Systems
9. Security Vulnerability in Saflok’s RFID-Based Keycard Locks
10. Hardware Vulnerability in Apple’s M-Series Chips
11. Lessons from a Ransomware Attack against the British Library
12. Ross Anderson
13. Magic Security Dust
14. Declassified NSA Newsletters
15. XZ Utils Backdoor
16. Class-Action Lawsuit against Google’s Incognito Mode
17. Surveillance by the New Microsoft Outlook App
18. Maybe the Phone System Surveillance Vulnerabilities Will Be Fixed
19. Security Vulnerability of HTML Emails
20. US Cyber Safety Review Board on the 2023 Microsoft Exchange Hack
21. In Memoriam: Ross Anderson, 1956-2024
22. Backdoor in XZ Utils That Almost Happened
23. Smuggling Gold by Disguising it as Machine Parts
24. Upcoming Speaking Engagements

In this issue:

1. On the Insecurity of Software Bloat
2. European Court of Human Rights Rejects Encryption Backdoors
3. Microsoft Is Spying on Users of Its AI Tools
4. Details of a Phone Scam
5. New Image/Video Prompt Injection Attacks
6. AIs Hacking Websites
7. Apple Announces Post-Quantum Encryption Algorithms for iMessage
8. China Surveillance Company Hacked
9. A Cyber Insurance Backstop
10. How the “Frontier” Became the Slogan of Uncontrolled AI
11. NIST Cybersecurity Framework 2.0
12. LLM Prompt Injection Worm
13. The Insecurity of Video Doorbells
14. Surveillance through Push Notifications
15. How Public AI Can Strengthen Democracy
16. A Taxonomy of Prompt Injection Attacks
17. Essays from the Second IWORD
18. Using LLMs to Unredact Text
19. Jailbreaking LLMs with ASCII Art
20. Burglars Using Wi-Fi Jammers to Disable Security Cameras
21. Automakers Are Sharing Driver Data with Insurers without Consent

In this issue:

1. Voice Cloning with Very Short Samples
2. The Story of the Mirai Botnet
3. Code Written with AI Assistants Is Less Secure
4. Canadian Citizen Gets Phone Back from Police
5. Speaking to the CIA’s Creative Writing Group
6. Zelle Is Using My Name and Voice without My Consent
7. AI Bots on X (Twitter)
8. Side Channels Are Common
9. Poisoning AI Models
10. Quantum Computing Skeptics
11. Chatbots and Human Conversation
12. Microsoft Executives Hacked
13. NSA Buying Bulk Surveillance Data on Americans without a Warrant
14. New Images of Colossus Released
15. CFPB’s Proposed Data Rules
16. Facebook’s Extensive Surveillance Network
17. A Self-Enforcing Protocol to Solve Gerrymandering
18. David Kahn
19. Deepfake Fraud
20. Documents about the NSA’s Banning of Furby Toys in the 1990s
21. Teaching LLMs to Be Deceptive
22. On Software Liabilities
23. No, Toothbrushes Were Not Used in a Massive DDoS Attack
24. On Passkey Usability
25. Molly White Reviews Blockchain Book
26. A Hacker’s Mind is Out in Paperback
27. Improving the Cryptanalysis of Lattice-Based Public-Key Algorithms
28. Upcoming Speaking Engagements

In this issue:

1. A Robot the Size of the World
2. Police Get Medical Records without a Warrant
3. OpenAI Is Not Training on Your Dropbox Documents — Today
4. GCHQ Christmas Codebreaking Challenge
5. Cyberattack on Ukraine’s Kyivstar Seems to Be Russian Hacktivists
6. Data Exfiltration Using Indirect Prompt Injection
7. Ben Rothke’s Review of A Hacker’s Mind
8. Google Stops Collecting Location Data from Maps
9. New iPhone Security Features to Protect Stolen Devices
10. AI and Lossy Bottlenecks
11. AI Is Scarily Good at Guessing the Location of Random Photos
12. TikTok Editorial Analysis
13. Facial Recognition Systems in the US
14. New iPhone Exploit Uses Four Zero-Days
15. Improving Shor’s Algorithm
16. Second Interdisciplinary Workshop on Reimagining Democracy
17. PIN-Stealing Android Malware
18. Facial Scanning by Burger King in Brazil
19. Pharmacies Giving Patient Records to Police without Warrants
20. On IoT Devices and Software Liability
21. Upcoming Speaking Engagements