Ross Anderson

Professor of Security Engineering at Cambridge University and Edinburgh University

[Schneier Blog @schneierblog]

AI and the Evolution of Social Media https://t.co/4BwvYG9tUM

[Satnam Singh @satnam6502]

A video of the guest lecture I gave for a computer security course at the University of Edinburgh last week is now online. https://t.co/IBnq82K9ND

[Valentin Hofmann @vjhofmann]

💥 New paper 💥

We discover a form of covert racism in LLMs that is triggered by dialect features alone, with massive harms for affected groups.

For example, GPT-4 is more likely to suggest that defendants be sentenced to death when they speak African American English.

🧵

[cora @paging_cora]

stop ✋ be so real with me right now.. you guys did NOT try to make polyamory into an optimization problem

[fox @soft_fox_lad]

Gemini is apparently told your Google account age and will answer questions w/the appropriate caution.

Here it is refusing to help someone with C++ because they’re he’s under 18, and advanced C++ is a danger to a young mind.

https://t.co/jlcgVP0Aij

From https://t.co/hCgpCo9tsH

[Feargal Sharkey @Feargal_Sharkey]

WHAT?!!! 👇🤬

[Lilian Edwards @lilianedwards]

This is gorgeous. Any linguists know if it's actually accurate? And if so how it evolved? Are there similar rules for eg French? I dimly recall rules re when adjective goes after noun but not semantic

[Gary Marcus @GaryMarcus]

GenAI is starting to look like Typhoid Mary.

Last May, the celebrated 54-year-old LexisNexis touted hallucination-free legal citations produced by Generative AI. Instead, it is making up cases — from 2025 and 2026!!!

Talk about torching one’s reputation on the altar of GenAI.
—
[Screenshot sent to me by @conlawgeek, a law professor and reader of Marcus on AI. Failure of language models on this kind of temporal reasoning anticipated in Rebooting AI, in 2019]

[Robert Reich @RBReich]

It's my old boss's birthday. Here's why I'm not celebrating.

[Dylan Williams @dylanotes]

US law requires you to suspend military assistance to any foreign country that is restricting, directly or indirectly, the delivery of US humanitarian aid.

Until you do that, you’re not only failing to “pull out every stop” — you’re failing to follow US law you swore to enforce.

[Trail of Bits @trailofbits]

We responded to an RFI by the US Army’s PEO IEW&S on methods for implementing and automating AIBOM tools. Check out a summary of our response: https://t.co/47oBUgZIjh

[Faith 🇧🇩🇦🇺 @farazsth98]

@silviocesare @mboehme_ On the other hand, there have been bugs introduced by the compiler that don't exist in the code, but is extremely obvious when looking at the generated assembly.

My favourite is Felix Wilhelm's Xen double fetch bug: https://t.co/u4NtdQi9Ey

[Silvio Cesare @silviocesare]

@mboehme_ It’s interesting that many developers have high faith in their compilers and it’s moderately rare to come across bugs as a dev. However, once you start to write code to specifically attack the compiler/interpreter, say JavaScript bugs in browsers. It’s an entirely different game

[Ross Anderson @rossjanderson]

I got my review copy of Marc Tobias' book "Insecurity Engineering" a few days ago. It is enormously impressive, and should become the standard reference on physical security for locksmiths, HSM designers and others who worry about capable adversaries

[Swanson School of Engineering @PittEngineering]

Marc Tobias helps to design security systems - by knowing how to break into them. His newest book, “Tobias on Locks and Insecurity Engineering,” published by @WileyGlobal, seeks to reimagine engineering as an art form when designing security systems. https://t.co/1W8vUIQmv0

[Jonathan Haidt @JonHaidt]

The parents' movement to roll back the phone-based childhood just launched, spontaneously, in the UK. Parents are fed up and linking up to solve the collective action problem:

https://t.co/PYTZm9M70R

[MIT CSAIL @MIT_CSAIL]

How you know you're old: the "dragon book" was published nearly forty years ago.

https://t.co/3QJknMlxCp

[Yulia Navalnaya @yulia_navalnaya]

Путин убил Алексея

[Ross Anderson @rossjanderson]

@criscifuentes One of the most influential security theses of all time

[Lukasz Olejnik @lukOlejnik]

Signal messenger will have username feature in next release (7.0). Great!! https://t.co/rFFO40jKBd

[alan rusbridger @arusbridger]

Condemn the bigots. But the horrors of 7th Oct didn’t happen in a vacuum. It’s not “anti-Israel” to say so, nor is it “anti-Zionist”, let alone antisemitic—but how casually those three are sometimes elided. My column
https://t.co/EntNxd3sQt