Lightnews — Scholar-powered news

Reposted by Adam Shostack

Brian Finucane @bcfinucane.bsky.social · 19h

Given the now fifth U.S. strike in the Caribbean, reposting my recent essay in @justsecurity.org.

There’s a word for premeditated killing outside of armed conflict.

www.justsecurity.org/120568/carib...

Asserting a License to Kill: Why the Caribbean Strike is a Dangerous Departure from the “War on Terror”

An absence of credible legal basis for the Caribbean strike suggests the Trump admin is asserting a prerogative to kill outside the law.

www.justsecurity.org

6 91 170

Adam Shostack @adamshostack.bsky.social · 11h

I think that's v2. Microsoft's on v3 of the immutable laws!

1 1

Adam Shostack @adamshostack.bsky.social · 1d

Thanks! I’m on my phone and was having trouble diving in

1

Adam Shostack @adamshostack.bsky.social · 1d

I haven’t had a chance to compare the details but sounds really similar to a bh talk in 2021 https://www.pcmag.com/news/sensitive-satellite-internet-data-is-easily-accessible

1

Adam Shostack @adamshostack.bsky.social · 1d

Publish your threat models!

Not convinced?

I'll be hosting a talk with OSTIF on Oct 29 @ 2pm CT for you to ask me questions.

Register now and have your questions, thoughts, and comments ready!

luma.com/6fvp6orm

Threat Modeling w/ Adam Shostack · Zoom · Luma

Description Publish your threat models! This talk will cover the idea of publishing threat models, the dangers associated with the idea, and why open source…

luma.com

9 16

Adam Shostack @adamshostack.bsky.social · 4d

What other countries have bases in the United States?

Aaron Rupar @atrupar.com · 4d

Hegseth: "I'm also proud that today we're signing a letter of acceptance to build a Qatari Emeri air force facility at the Mountain Home Airbase in Idaho."

Reposted by Adam Shostack

Erica C. Barnett @ericacbarnett.bsky.social · 5d

Both Ducksworth and Lin oppose police surveillance cameras; Ducksworth notes that when his house got broken into, the guy looked up at the camera and broke the door in anyway. He also opposes SOAP/SODA banishment zones; someone could get sober and jaywalk in an area 2 years later and get arrested.

1 1 27

Reposted by Adam Shostack

SwiftOnSecurity @swiftonsecurity.com · 5d

14 70 400

Adam Shostack @adamshostack.bsky.social · 5d

For them? Nothing. I'm betting their terms of service weren't written by their AI.

🤷

Reposted by Adam Shostack

Deth Veggie @dethveggie.bsky.social · 5d

WHAT COULD POSSIBLY GO WRONG.

Dan Izzo @izzos.us · 7d

git.law
Oh FUCK no...just no no no no

Screenshot of git.law showing a sample AI prompt of "I need a privacy policy for my SaaS website"
And buttons for "Draft a Contract" "Review a Contract" "Summarize a Contract"

2 2 5

Reposted by Adam Shostack

Simon Le Gross Bisson @sbisson.com · 5d

"Tell me you haven't listened to the American albums without telling me you haven't listened to the American albums."

The Wall Street Journal @wsj.com · 5d

Compared to Dylan and Springsteen, country-music legend Johnny Cash can seem deeply uncool. It took time for me to appreciate his profound, plainspoken strength, writes Jon Fasman.

Essay | Can We Finally Give Johnny Cash His Due?

Compared to Dylan and Springsteen, the country-music legend can seem deeply uncool. It took time for me to appreciate his profound, plainspoken strength.

on.wsj.com

1 2 8

Reposted by Adam Shostack

ostifofficial.bsky.social @ostifofficial.bsky.social · 5d

Join us October 29th at 14:00 CST for a meetup with @adamshostack.bsky.social!

RSVP here: luma.com/6fvp6orm

First Adam will present on threat models (he literally wrote *the* book on the subject) and a Q&A portion will follow. We look forward to him and our community connecting!

Threat Modeling w/ Adam Shostack · Zoom · Luma

Description Publish your threat models! This talk will cover the idea of publishing threat models, the dangers associated with the idea, and why open source…

luma.com

1 1

Adam Shostack @adamshostack.bsky.social · 6d

“Insurance will take care of it.”

Not with AI.

Today’s policies weren’t built for model failures, prompt injections, or regulators asking how your LLM works.

You might be covered.
You might not.
But either way?

Insurance doesn’t help you design safer AI.

That’s on you.

Full post: is.gd/nap9QY

Shostack + Friends Blog > AI Insurance Won't Save You

LLM Insurance is, and will remain, a great source of insurer profits.

is.gd

1 2

Reposted by Adam Shostack

Senator Bernie Sanders @sanders.senate.gov · 6d

If you are a federal worker, there are several credit unions and other financial institutions that are offering zero interest loans during the government shutdown.

Please go to my website for more information: www.sanders.senate.gov/resources-fo...

94 2.5K 5.2K

Reposted by Adam Shostack

Worf Email @worfemail.bsky.social · Aug 27

All crew,

Do not click on links in emails. They pose a major security risk. For more information: http://bit.ly/1MUISmu

Worf

16 140 690

Reposted by Adam Shostack

Whitney Merrill @wbm312.bsky.social · 9d

You know what I want companies to care about? Good UX/UI design for security and privacy.

Some of it is just so so bad.

5 7 39

Reposted by Adam Shostack

Dave Aitel @daveaitel.bsky.social · 10d

Who else is going to #offensiveAICon tomorrow ?

2 1 3

Adam Shostack @adamshostack.bsky.social · 10d

I'm old enough to remember when Republicans said government talking with a technology company about removing content was censorship.

1 2 10

Adam Shostack @adamshostack.bsky.social · 10d

I'm old enough to remember when Republicans said government talking with a technology company about removing content was censorship.

1 6

Adam Shostack @adamshostack.bsky.social · 10d

"All records relating to violations of 18 U.S.C. §§ 1001 (False Statements), 666
(Theft or Bribery Concerning Programs Receiving Federal Funds), and 1343 (Wire Fraud)
(collectively, the “Subject Offenses”) involving Xiaofeng WANG including, but not limited to..."

2

Reposted by Adam Shostack

Rianamator 🦇🎃👻 @riana.bsky.social · 10d

Yes!

www.courtlistener.com/docket/71543...
www.courtlistener.com/docket/71543...

United States v. SEARCH WARRANT, 1:25-mj-00286 - CourtListener.com

Docket for United States v. SEARCH WARRANT, 1:25-mj-00286 — Brought to you by Free Law Project, a non-profit dedicated to creating high quality open legal information.

www.courtlistener.com

1 1 2

Adam Shostack @adamshostack.bsky.social · 10d

Congratulations and thank you!

Are the warrants actually unsealed?

1 2

Reposted by Adam Shostack

Rianamator 🦇🎃👻 @riana.bsky.social · 10d

This is a really, REALLY good order. It unseals everything but the search warrant affidavits - the part I knew would be hardest and wasn't expecting to get. And even for those, the court says they shouldn't be sealed forever and tells DOJ to file a status report within 90 days. That's incredible.

1 3 24

Reposted by Adam Shostack

Rianamator 🦇🎃👻 @riana.bsky.social · 10d

If you've been following my six-month quest to unseal the search warrants for XiaoFeng Wang's homes, huge news:

I won.

storage.courtlistener.com/recap/gov.us...

storage.courtlistener.com

6 35 180

Adam Shostack @adamshostack.bsky.social · 11d

The Wikipedia entry about the ship of Theseus has been edited 2,052 since it was published in 2003.

Number of sentences from the original post that remain today: 0

Number of original graphics in this post: 0

Mike Masnick @mmasnick.bsky.social · 11d

Reposted with alt text. Also, from a cursory look, this appears to basically be true, which is pretty funny. Philosophers... debate.

Number of times the Wikipedia entry about the ship of Theseus has been edited since it was published in 2003: 2,052
Number of sentences from the original entry that remain today: 0

1