Lucene search
K
SchneierRecent

2961 matches found

Schneier on Security
Schneier on Security
added 2023/02/10 10:11 p.m.17 views

Friday Squid Blogging: Squid Is a Blockchain Thingy

I had no idea--until I read this incredibly jargon-filled article: Squid is a cross-chain liquidity and messaging router that swaps across multiple chains and their native DEXs via axlUSDC. So there. As usual, you can also use this squid post to talk about the security stories in the news that I...

1.8AI score
Exploits0
Schneier on Security
Schneier on Security
added 2023/02/10 8:3 p.m.19 views

A Hacker’s Mind Is Now Published

Tuesday was the official publication date of A Hackers Mind: How the Powerful Bend Societys Rules, and How to Bend them Back. It broke into the 2000s on the Amazon best-seller list. Reviews in the New York Times, Cory Doctorows blog, Science, and the Associated Press. I wrote essays related to th...

1.2AI score
Exploits0
Schneier on Security
Schneier on Security
added 2023/02/10 11:24 a.m.16 views

Hacking the Tax Code

The tax code isn’t software. It doesn’t run on a computer. But it’s still code. It’s a series of algorithms that takes an input--financial information for the year--and produces an output: the amount of tax owed. It’s incredibly complex code; there are a bazillion details and exceptions and speci...

7AI score
Exploits0
Schneier on Security
Schneier on Security
added 2023/02/09 12:15 p.m.28 views

Mary Queen of Scots Letters Decrypted

This is a neat piece of historical research. The team of computer scientist George Lasry, pianist Norbert Biermann and astrophysicist Satoshi Tomokiyo--all keen cryptographers--initially thought the batch of encoded documents related to Italy, because that was how they were filed at the...

1.2AI score
Exploits0
Schneier on Security
Schneier on Security
added 2023/02/08 11:46 a.m.17 views

SolarWinds and Market Incentives

In early 2021, IEEE Security and Privacy asked a number of board members for brief perspectives on the SolarWinds incident while it was still breaking news. This was my response. The penetration of government and corporate networks worldwide is the result of inadequate cyberdefenses across the...

0.9AI score
Exploits0
Schneier on Security
Schneier on Security
added 2023/02/07 12:23 p.m.27 views

Malware Delivered through Google Search

Criminals using Google search ads to deliver malware isnt new, but Ars Technica declared that the problem has become much worse recently. The surge is coming from numerous malware families, including AuroraStealer, IcedID, Meta Stealer, RedLine Stealer, Vidar, Formbook, and XLoader. In the past,...

2AI score
Exploits0
Schneier on Security
Schneier on Security
added 2023/02/06 11:2 a.m.17 views

Attacking Machine Learning Systems

The field of machine learning ML security--and corresponding adversarial ML--is rapidly advancing as researchers develop sophisticated techniques to perturb, disrupt, or steal the ML model or data. It’s a heady time; because we know so little about the security of these systems, there are many...

Exploits0
Schneier on Security
Schneier on Security
added 2023/02/03 10:2 p.m.11 views

Friday Squid Blogging: Studying the Colossal Squid

A survey of giant squid science. As usual, you can also use this squid post to talk about the security stories in the news that I havent covered. Read my blog posting guidelines here...

1.9AI score
Exploits0
Schneier on Security
Schneier on Security
added 2023/02/03 8:3 p.m.19 views

A Hacker’s Mind News

A Hackers Mind will be published on Tuesday. I have done a written interview and a podcast interview about the book. Its been chosen as a "February 2023 Must-Read Book" by the Next Big Idea Club. And an "Editors Pick"--whatever that means--on Amazon. There have been three reviews so far. I am...

1AI score
Exploits0
Schneier on Security
Schneier on Security
added 2023/02/03 12:7 p.m.17 views

Manipulating Weights in Face-Recognition AI Systems

Interesting research: "Facial Misrecognition Systems: Simple Weight Manipulations Force DNNs to Err Only on Specific Persons": Abstract: In this paper we describe how to plant novel types of backdoors in any facial recognition model based on the popular architecture of deep Siamese neural network...

1.7AI score
Exploits0
Schneier on Security
Schneier on Security
added 2023/02/02 11:59 a.m.22 views

AIs as Computer Hackers

Hacker "Capture the Flag" has been a mainstay at hacker gatherings since the mid-1990s. It’s like the outdoor game, but played on computer networks. Teams of hackers defend their own computers while attacking other teams’. It’s a controlled setting for what computer hackers do in real life: findi...

0.2AI score
Exploits0
Schneier on Security
Schneier on Security
added 2023/02/01 12:8 p.m.13 views

Passwords Are Terrible (Surprising No One)

This is the result of a security audit: More than a fifth of the passwords protecting network accounts at the US Department of the Interior--including Password1234, Password1234!, and ChangeItN0w!--were weak enough to be cracked using standard methods, a recently published security audit of the...

1.3AI score
Exploits0
Schneier on Security
Schneier on Security
added 2023/01/31 12:3 p.m.18 views

Ransomware Payments Are Down

Chainalysis reports that worldwide ransomware payments were down in 2022. Ransomware attackers extorted at least $456.8 million from victims in 2022, down from $765.6 million the year before. As always, we have to caveat these findings by noting that the true totals are much higher, as there are...

1.8AI score
Exploits0
Schneier on Security
Schneier on Security
added 2023/01/30 12:13 p.m.10 views

NIST Is Updating Its Cybersecurity Framework

NIST is planning a significant update of its Cybersecurity Framework. At this point, its asking for feedback and comments to its concept paper. 1. Do the proposed changes reflect the current cybersecurity landscape standards, risks, and technologies? 2. Are the proposed changes sufficient and...

1.1AI score
Exploits0
Schneier on Security
Schneier on Security
added 2023/01/27 10:59 p.m.19 views

Friday Squid Blogging: Squid-Inspired Hydrogel

Scientists have created a hydrogel "using squid mantle and creative chemistry." As usual, you can also use this squid post to talk about the security stories in the news that I havent covered. Read my blog posting guidelines here...

0.6AI score
Exploits0
Schneier on Security
Schneier on Security
added 2023/01/27 8:19 p.m.20 views

Kevin Mitnick Hacked California Law in 1983

Early in his career, Kevin Mitnick successfully hacked California law. He told me the story when he heard about my new book, which he partially recounts his 2012 book, Ghost in the Wires. The setup is that he just discovered that theres warrant for his arrest by the California Youth Authority, an...

7.5AI score
Exploits0
Schneier on Security
Schneier on Security
added 2023/01/27 12:2 p.m.17 views

A Guide to Phishing Attacks

This is a good list of modern phishing techniques...

2.1AI score
Exploits0
Schneier on Security
Schneier on Security
added 2023/01/26 12:8 p.m.15 views

On Alec Baldwin’s Shooting

We recently learned that Alec Baldwin is being charged with involuntary manslaughter for his accidental shooting on a movie set. I dont know the details of the case, nor the intricacies of the law, but I have a question about movie props. Why was an actual gun used on the set? And why were actual...

1.7AI score
Exploits0
Schneier on Security
Schneier on Security
added 2023/01/25 12:0 p.m.25 views

US Cyber Command Operations During the 2022 Midterm Elections

The head of both US Cyber Command and the NSA, Gen. Paul Nakasone, broadly discussed that first organizations offensive cyber operations during the runup to the 2022 midterm elections. He didnt name names, of course: We did conduct operations persistently to make sure that our foreign adversaries...

0.5AI score
Exploits0
Schneier on Security
Schneier on Security
added 2023/01/24 12:14 p.m.15 views

Bulk Surveillance of Money Transfers

Just another obscure warrantless surveillance program. US law enforcement can access details of money transfers without a warrant through an obscure surveillance program the Arizona attorney generals office created in 2014. A database stored at a nonprofit, the Transaction Record Analysis Center...

0.7AI score
Exploits0
Schneier on Security
Schneier on Security
added 2023/01/23 12:2 p.m.15 views

No-Fly List Exposed

I cant remember the last time I thought about the US no-fly list: the list of people so dangerous they should never be allowed to fly on an airplane, yet so innocent that we cant arrest them. Back when I thought about it a lot, I realized that the TSAs practice of giving it to every airline meant...

0.1AI score
Exploits0
Schneier on Security
Schneier on Security
added 2023/01/21 12:18 p.m.13 views

Publisher’s Weekly Review of A Hacker’s Mind

Publishers Weekly reviewed A Hackers Mind--and its a starred review! "Hacking is something that the rich and powerful do, something that reinforces existing power structures," contends security technologist Schneier Click Here to Kill Everybody in this excellent survey of exploitation. Taking a...

1.4AI score
Exploits0
Schneier on Security
Schneier on Security
added 2023/01/20 10:0 p.m.20 views

Friday Squid Blogging: Another Giant Squid Captured on Video

Heres a new video of a giant squid, filmed in the Sea of Japan. I believe its injured. Its so close to the surface, and not really moving very much. "We didnt see the kinds of agile movements that many fish and marine creatures normally show," he said. "Its tentacles and fins were moving very...

2.6AI score
Exploits0
Schneier on Security
Schneier on Security
added 2023/01/20 12:25 p.m.16 views

Real-World Steganography

From an article about Zheng Xiaoqing, an American convicted of spying for China: According to a Department of Justice DOJ indictment, the US citizen hid confidential files stolen from his employers in the binary code of a digital photograph of a sunset, which Mr Zheng then mailed to himself...

3.1AI score
Exploits0
Schneier on Security
Schneier on Security
added 2023/01/19 12:21 p.m.54 views

Security Analysis of Threema

A group of Swiss researchers have published an impressive security analysis of Threema. We provide an extensive cryptographic analysis of Threema, a Swiss-based encrypted messaging application with more than 10 million users and 7000 corporate customers. We present seven different attacks against...

2.4AI score
Exploits0
Schneier on Security
Schneier on Security
added 2023/01/18 12:19 p.m.19 views

AI and Political Lobbying

Launched just weeks ago, ChatGPT is already threatening to upend how we draft everyday communications like emails, college essays and myriad other forms of writing. Created by the company OpenAI, ChatGPT is a chatbot that can automatically respond to written prompts in a manner that is sometimes...

7.2AI score
Exploits0
Schneier on Security
Schneier on Security
added 2023/01/17 12:2 p.m.24 views

The FBI Identified a Tor User

No details, though: According to the complaint against him, Al-Azhari allegedly visited a dark web site that hosts "unofficial propaganda and photographs related to ISIS" multiple times on May 14, 2019. In virtue of being a dark web site--­that is, one hosted on the Tor anonymity network--­it...

1.2AI score
Exploits0
Schneier on Security
Schneier on Security
added 2023/01/16 12:14 p.m.18 views

Hacked Cellebrite and MSAB Software Released

Cellebrite is an cyberweapons arms manufacturer that sells smartphone forensic software to governments around the world. MSAB is a Swedish company that does the same thing. Someone has released software and documentation from both companies...

0.4AI score
Exploits0
Schneier on Security
Schneier on Security
added 2023/01/14 5:5 p.m.13 views

Upcoming Speaking Engagements

This is a current list of where and when I am scheduled to speak: Im speaking at Capricon, a four-day science fiction convention in Chicago. My talk is on "The Coming AI Hackers" and will be held Friday, February 3 at 1:00 PM. The list is maintained on this page...

1.5AI score
Exploits0
Schneier on Security
Schneier on Security
added 2023/01/14 4:29 p.m.15 views

Booklist Review of A Hacker’s Mind

Booklist reviews A Hackers Mind: Author and public-interest security technologist Schneier Data and Goliath, 2015 defines a “hack” as an activity allowed by a system “that subverts the rules or norms of the system … at the expense of someone else affected by the system.” In accessing the security...

7.5AI score
Exploits0
Schneier on Security
Schneier on Security
added 2023/01/13 10:8 p.m.15 views

Friday Squid Blogging: How to Buy Fresh or Frozen Squid

Good advice on buying squid. I like to buy whole fresh squid and clean it myself. As usual, you can also use this squid post to talk about the security stories in the news that I havent covered. Read my blog posting guidelines here...

1.2AI score
Exploits0
Schneier on Security
Schneier on Security
added 2023/01/13 12:13 p.m.17 views

Threats of Machine-Generated Text

With the release of ChatGPT, Ive read many random articles about this or that threat from the technology. This paper is a good survey of the field: what the threats are, how we might detect machine-generated text, directions for future research. Its a solid grounding amongst all of the hype...

0.5AI score
Exploits0
Schneier on Security
Schneier on Security
added 2023/01/12 12:18 p.m.10 views

Experian Privacy Vulnerability

Brian Krebs is reporting on a vulnerability in Experians website: Identity thieves have been exploiting a glaring security weakness in the website of Experian, one of the big three consumer credit reporting bureaus. Normally, Experian requires that those seeking a copy of their credit report...

0.2AI score
Exploits0
Schneier on Security
Schneier on Security
added 2023/01/10 12:18 p.m.25 views

ChatGPT-Written Malware

I dont know how much of a thing this will end up being, but we are seeing ChatGPT-written malware in the wild. …within a few weeks of ChatGPT going live, participants in cybercrime forums--­some with little or no coding experience­--were using it to write software and emails that could be used fo...

0.7AI score
Exploits0
Schneier on Security
Schneier on Security
added 2023/01/09 12:14 p.m.21 views

Identifying People Using Cell Phone Location Data

The two people who shut down four Washington power stations in December were arrested. This is the interesting part: Investigators identified Greenwood and Crahan almost immediately after the attacks took place by using cell phone data that allegedly showed both men in the vicinity of all four...

0.3AI score
Exploits0
Schneier on Security
Schneier on Security
added 2023/01/06 10:2 p.m.12 views

Friday Squid Blogging: Squid Fetish

Seems that about 1.5% of people have a squid fetish. As usual, you can also use this squid post to talk about the security stories in the news that I havent covered. Read my blog posting guidelines here...

1AI score
Exploits0
Schneier on Security
Schneier on Security
added 2023/01/06 8:4 p.m.10 views

Schneier on Security Audiobook Sale

Im not sure why, but Audiobooks.com is offering the audiobook version of Schneier on Security at 50% off until January 17. EDITED TO ADD: The audiobook of We Have Root is 50% off until January 27 if you use this link...

2.7AI score
Exploits0
Schneier on Security
Schneier on Security
added 2023/01/06 3:46 p.m.11 views

Remote Vulnerabilities in Automobiles

This group has found a ton of remote vulnerabilities in all sorts of automobiles. Its enough to make you want to buy a car that is not Internet-connected. Unfortunately, that seems to be impossible...

3AI score
Exploits0
Schneier on Security
Schneier on Security
added 2023/01/04 12:17 p.m.15 views

Decarbonizing Cryptocurrencies through Taxation

Maintaining bitcoin and other cryptocurrencies causes about 0.3 percent of global CO2 emissions. That may not sound like a lot, but its more than the emissions of Switzerland, Croatia, and Norway combined. As many cryptocurrencies crash and the FTX bankruptcy moves into the litigation stage,...

7.2AI score
Exploits0
Schneier on Security
Schneier on Security
added 2023/01/03 5:38 p.m.38 views

Breaking RSA with a Quantum Computer

A group of Chinese researchers have just published a paper claiming that they can--although they have not yet done so--break 2048-bit RSA. This is something to take seriously. It might not be correct, but its not obviously wrong. We have long known from Shors algorithm that factoring with a quant...

6.6AI score
Exploits0
Schneier on Security
Schneier on Security
added 2022/12/30 10:56 p.m.13 views

Friday Squid Blogging: Grounded Fishing Boat Carrying 16,000 Pounds of Squid

Rough seas are hampering efforts to salvage the boat: The Speranza Marie, carrying 16,000 pounds of squid and some 1,000 gallons of diesel fuel, hit the shoreline near Chinese Harbor at about 2 a.m. on Dec. 15. Six crew members were on board, and all were rescued without injury by another fishing...

0.1AI score
Exploits0
Schneier on Security
Schneier on Security
added 2022/12/30 12:18 p.m.14 views

Recovering Smartphone Voice from the Accelerometer

Yet another smartphone side-channel attack: "EarSpy: Spying Caller Speech and Identity through Tiny Vibrations of Smartphone Ear Speakers": Abstract: Eavesdropping from the users smartphone is a well-known threat to the users safety and privacy. Existing studies show that loudspeaker reverberatio...

2.6AI score
Exploits0
Schneier on Security
Schneier on Security
added 2022/12/28 6:14 p.m.20 views

QR Code Scam

An enterprising individual made fake parking tickets with a QR code for easy payment...

2.8AI score
Exploits0
Schneier on Security
Schneier on Security
added 2022/12/27 12:1 p.m.14 views

Arresting IT Administrators

This is one way of ensuring that IT keeps up with patches: Albanian prosecutors on Wednesday asked for the house arrest of five public employees they blame for not protecting the country from a cyberattack by alleged Iranian hackers. Prosecutors said the five IT officials of the public...

2.6AI score
Exploits0
Schneier on Security
Schneier on Security
added 2022/12/26 12:6 p.m.39 views

LastPass Breach

Last August, LastPass reported a security breach, saying that no customer information--or passwords--were compromised. Turns out the full story is worse: While no customer data was accessed during the August 2022 incident, some source code and technical information were stolen from our developmen...

0.5AI score
Exploits0
Schneier on Security
Schneier on Security
added 2022/12/23 10:5 p.m.14 views

Friday Squid Blogging: Injured Giant Squid and Paddleboarder

Heres a video--I dont know where its from--of an injured juvenile male giant squid grabbing on to a paddleboard. As usual, you can also use this squid post to talk about the security stories in the news that I havent covered. Read my blog posting guidelines here...

2.5AI score
Exploits0
Schneier on Security
Schneier on Security
added 2022/12/23 12:3 p.m.12 views

Hacking the JFK Airport Taxi Dispatch System

Two men have been convicted of hacking the taxi dispatch system at the JFK airport. This enabled them to reorder the taxis on the list; they charged taxi drivers $10 to cut the line...

2.1AI score
Exploits0
Schneier on Security
Schneier on Security
added 2022/12/22 12:1 p.m.83 views

Critical Microsoft Code-Execution Vulnerability

A critical code-execution vulnerability in Microsoft Windows was patched in September. It seems that researchers just realized how serious it was and is: Like EternalBlue, CVE-2022-37958, as the latest vulnerability is tracked, allows attackers to execute malicious code with no authentication...

2.7AI score0.85646EPSS
Exploits0
Schneier on Security
Schneier on Security
added 2022/12/21 12:9 p.m.11 views

Ukraine Intercepting Russian Soldiers’ Cell Phone Calls

Theyre using commercial phones, which go through the Ukrainian telecom network: "You still have a lot of soldiers bringing cellphones to the frontline who want to talk to their families and they are either being intercepted as they go through a Ukrainian telecommunications provider or intercepted...

1AI score
Exploits0
Schneier on Security
Schneier on Security
added 2022/12/20 12:30 p.m.8 views

Trojaned Windows Installer Targets Ukraine

Mandiant is reporting on a trojaned Windows installer that targets Ukrainian users. The installer was left on various torrent sites, presumably ensnaring people downloading pirated copies of the operating system: Mandiant uncovered a socially engineered supply chain operation focused on Ukrainian...

2.1AI score
Exploits0
Total number of security vulnerabilities2961