CyberSecPolitics

So yesterday I read with interest a Project Zero Blog detailing their efforts to understand a pressing question: Will LLMs Replace VulnDev T...

I spent some time looking at which open source packages have not been maintained or updated, and how depends on those packages. The answer i...

People are having a big freakout about the Jia Tan user and I want to throw a little napalm on that kitchen fire by showing ya'll what t...

I want to start by saying that Sergey Bratus and DARPA were geniuses at foreseeing the problems that have led us to Jia Tan and XZ. One of ...

Paper linked here . One thing I liked about the new Cyber Statecraft paper is it had some POETRY to the language for once! Usually these thi...

 The news is filled with cyber hot takes on Ukraine. As someone said to me a few decades ago though - "When it's in the news, it...

Dave has kindly agreed to turn the keys to his blog over to me for a brief discussion of what may yet come to pass, as we consider the wars ...