The Security Research Legal Defense Fund is now on the socials, here and Twitter (@SecurityLDF). It's my honor to be on the SRLDF Board with @harleygeiger.bsky.social and Jim Dempsey, and I am proud of the work we've been able to do and help hackers in trouble.

Watch @harleygeiger.bsky.social and Charley Snyder introduce "A Legal Defense Fund for Hackers" at Shmoocon 2024 www.youtube.com/watch?v=jRiQ...

Blindness to one’s own actions as a key contributing factor to others’ reactions is a very dangerous quality in a person, political movement, or society.

Stop.

Good morning, Night City.

Scoop: NIST's Computer Security Division — responsible for research & standards on cyber, privacy, cryptography, AI, etc. — has lost more than a dozen people, including its chief, to early retirements. www.cybersecuritydive.com/news/nist-cy... The departures could imperil key work.

BREAKING. From a reliable source. MITRE support for the CVE program is due to expire tomorrow. The attached letter was sent out to CVE Board Members.

Absolute masterclass.

“Whoever creates this stuff has no idea what pain is whatsoever. I am utterly disgusted,” Miyazaki said. “I would never wish to incorporate this technology into my work at all. I strongly feel that this is an insult to life itself.”

@sellars.bsky.social, @caseyellis.bsky.social, Dane Sherrets, Dawn Song, @harleygeiger.bsky.social, Ilona Cohen, Lauren McIlvenny, Madhulika Srikumar, Mark Jaycox, Markus Anderljung, Nadine Farid Johnson, Nicholas Carlini, Micolas Miailhe, Nik Marda, @peterhenderson.bsky.social, ...

Podcast: risky.biz/RBNEWS393/ Newsletter: risky.biz/risky-bullet... -Trump administration stops treating Russian hackers as a threat -Meta seeks permanent NSO ban -New Cellebrite 0-days come to light -3rd-party breaches are now a headache for cyber insurers -WazaWaka and Ermakov get home detention

Every effort to demolish a hierarchy is in fact an effort to establish a hierarchy.

In August 2023 I took @harleygeiger.bsky.social's "How hackers can send feedback directly to policymakers like the pros" at @defcon.bsky.social and today we have renewed interest in a 2023 letter in the military's broad use of ADS-B exemptions. norton.house.gov/media/press-...

Last Friday, I spoke on a panel at the MIT Sloan AI Conference. I discussed the broken AI Harm reporting landscape, the importance of evals, safe harbors, structured disclosures, and our proposed Coordinated Flaws Disclosure framework as a path forward. Great questions and thanks for having me!

Learning nothing from Salt Typhoon - where China hacked a backdoor built into the phone system for law enforcement use - the UK demands more backdoors for law enforcement use.

Lead with kindness

They cant get my data if i am Fully Dissolved in a bath tub full of sodium hydroxide

Thank you to the dozens of volunteers and ambassadors who helped plan, set up, and run Hackers on the Hill this year, as well as the ~150 hackers who attended and the 20+ staffers who were gracious enough to host us (many on a day their office was officially closed). ❤️ A few special thank yous

It is absolutely wild that LLM vendors have tried to file DMCA claims against researchers testing LLMs that the vendors themselves trained on unlicensed copyrighted material. Glad to see that they're losing DMCA as a weapon. www.centerforcybersecuritypolicy.org/insights-and...

If your cyber lawyer’s personal laptop isn’t covered in stickers, can you really trust them

The #SCOTUS ruling in Loper Bright Enterprises v. Raimondo reversed the long-standing Chevron doctrine. How will this impact cybersecurity regulations? Dive into our analysis by Harley Geiger, Ines Jordan-Zoob, and Tanvi Chopra. www.centerforcybersecuritypolicy.org/insights-and...

For whom doth the siren wail? These practiced attentions and intentions fly to bear thee unto comfort and recovery amidst enchanted machines and chemistry. Take heart. Take ours. Zone four, four alpha dispatch.

“Mozilla dug into 11 different AI romance chatbots, including popular apps such as Replika, Chai, Romantic AI, EVA AI Chat Bot & Soulmate, and CrushOn.AI. Every single one earned the Privacy Not Included label, putting these chatbots among the worst categories of products Mozilla has ever reviewed.”

The Hacking Policy Council's @harleygeiger.bsky.social discusses the importance of #AI red teaming and how it can test for biases, discrimination, inaccuracies, and more undesirable outcomes during his lightning talk at #SOTN2024.

I'm part of the problem. It's me. I'll pay extra for no ads.

The Hacking Policy Council's @harleygeiger.bsky.social spoke at this year's #HackersOnTheHill conference on Capitol Hill and gave cyber experts an excellent rundown on what's happening in public security policy today.

Do we trust AI providers alone to ensure fairness and prevent harm? The Hacking Policy Council recently filed comments with the Copyright Office in support of ethical AI hacking. Read below why HPC is urging the Office to establish an exemption: news.bloomberglaw.com/ip-law/ai-co...

An analysis of AI red teaming requirements in the recent Executive Order: www.centerforcybersecuritypolicy.org/insights-and... The EO defines “AI red-teaming” to include testing to identify security vulns, harmful or discriminatory outputs, unforeseen or undesirable behaviors, or potential misuse.

The SEC's new #cyber incident disclosure rules start taking effect Dec. 15. While the Cyber Coalition views the SEC's approach as problematic, other requirements of the final rule could create a helpful balance between security & transparency. www.centerforcybersecuritypolicy.org/insights-and...

Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat.