Saturday, August 17, 2019

Rashomon of disclosure

›
In a world of changing technology, there are few constants - but if there is one constant in security, it is the rhythmic flare-up of discu...
Tuesday, October 02, 2018

Turing completeness, weird machines, Twitter, and muddled terminology

›
First off, an apology to the reader: I normally spend a bit of effort to make my blog posts readable / polished, but I am under quite a fe...
Saturday, March 31, 2018

A bank statement for app activity (and thus personal data)

›
During my long sabbatical in 2015-2016 I had plenty of time to think about random things and come up with strange ideas. Most of these idea...
Wednesday, February 21, 2018

Two small notes on the "malicious use of AI" report

›
After a long hiatus on this blog, a new post! Well, not really - but a whitepaper was published today titled " The Malicious Use of A...
Tuesday, August 22, 2017

A quick post on Wikipedia-scrubbing and a historical document on binary diffing

›
I am a huge fan of Wikipedia -- I sometimes browse Wikipedia like other people watch TV, skipping from topic to topic and - on average - be...
Saturday, October 01, 2016

"Why do you work in security instead of something more lasting ?"

›
This post grew out of a friend on Facebook asking (I paraphrase) "why do you spend your time on security instead of using your brainpo...
4 comments:
Saturday, September 03, 2016

Essays about management in large(r) organisations (1): Process and flexibility

›
Even though I often profess that my primary interests are technical, by this point in my life I have been exposed to a variety of differe...
1 comment:
Wednesday, January 27, 2016

An attempt at fixing Wassenaar

›
Last year in May, I wrote extensively about the many ways in which the 2013 "intrusion software" amendments to the Wassenaar Arr...