Brutkey

Adam Shostack :donor: :rebelverified:
@adamshostack@infosec.exchange
Adam Shostack :donor: :rebelverified:
@adamshostack@infosec.exchange

Does anyone have a tool that'll convert https://www.usenix.org/conference/usenixsecurity25/technical-sessions#switcher into a useful one page at a glance bit of paper?

Adam Shostack :donor: :rebelverified:
@adamshostack@infosec.exchange

Just had to send @violetblue@mastodon.social β€˜s β€œwhat to do if you catch covid” to one of my last novid friends, who got sick at hacker summer camp. https://www.patreon.com/posts/86871700?collection=1162 stay safe folks.

Adam Shostack :donor: :rebelverified:
@adamshostack@infosec.exchange

Timo Jagush presenting on off boarding at #soups2025 , points out that frameworks are hard to navigate… framework creators have every motive to be β€œcomprehensive”, but little motive to be usable.

https://www.usenix.org/conference/soups2025/presentation/detsika

Adam Shostack :donor: :rebelverified:
@adamshostack@infosec.exchange

It’s surprising to see no mention of ecological validity, LLM flaws, or researcher-pleasing effects. #soups2025

Adam Shostack :donor: :rebelverified:
@adamshostack@infosec.exchange

Yizhu Joy presenting at #soups2025 on LLM Agrnt explainers of spam. Uses FTC data …

Adam Shostack :donor: :rebelverified:
@adamshostack@infosec.exchange

It shows as the 2nd app in swipe-up view, but I didnt open it.

Adam Shostack :donor: :rebelverified:
@adamshostack@infosec.exchange

Lyft is set to allow location services β€œwhile using”. Wtf happened here? Is β€œrunning in the background” using? Do I need to kill apps to make that work? (I used it this morning to get to the airport)

Adam Shostack :donor: :rebelverified:
@adamshostack@infosec.exchange

One of the hats I wear is editor for the @defcon@defcon.social Franklin Hackers' Almanack. If you see talks that policymakers should know about, please let me know here, tag me, etc.

I'm already seeing great stuff on voting security, resisting back doors, irresponsible behavior by thin-skinned vendors.. what else should I see?

https://defconfranklin.com/

Adam Shostack :donor: :rebelverified:
@adamshostack@infosec.exchange

The frenzied activity here at @defcon@defcon.social is just a sight to behold!

Adam Shostack :donor: :rebelverified:
@adamshostack@infosec.exchange

The "groundbreaking" NIST report is on... a hackathon where the devs are available?

The dream of the 90s is alive in the media.

"β€œIf the report was published, others could have learned more information about how the [NIST] risk framework can and cannot be applied to a red teaming context,” says Alice Qian Zhang, a PhD student at Carnegie Mellon University who took part in the exercise. Qian Zhang says the exercise was particularly rewarding because it was possible to engage with makers of tools while testing them."

https://www.wired.com/story/inside-the-biden-administrations-unpublished-report-on-ai-safety/