This can enable bad actors to hide in plain sight ( website code).īugs in our Pockets: The Risks of Client-Side Scanning is a thorough technical study of the risks involved in mandatory scanning of people's phones and other devices for illegal materials, as proposed in various forms by the US and UK governments, the EU and Apple ( blog Guardian New York Times The Register FT Forbes Lawfare NetzPolitik El Pais Observer podcast) This affected most modern computer languages when we disclosed it, and still affects some of them ( blog website code Rust blog Schneier Krebs video).īad Characters: Imperceptible NLP Attacks shows how the systems used for common natural-language processing tasks such as machine translation and toxic content filtering can be broken easily by inputs with adversarial coding. Trojan Source: Invisible Vulnerabilities shows how to make software vulnerabilities invisible to human reviewers, by using Unicode tricks that are ignored by compilers but which cause editors to display an altered version of the software under review. The most dangerous step for a whistleblower can be making initial contact by embedded an end-to-end encrypted chat function in its news app, a newspaper can make this much more unobtrusive ( blog).

Remarkably strong correlation between misogyny and terrorist violence, whetherĬoverDrop: Securing Initial Contact for Whistleblowers is a prototype we built of a better way for news organisations to support whistleblowers. Misogyny, radicalisation and hate speech. Make available to social scientists studying violent online political extremism, What parts of the disclosureĮcosystem work, and which are broken? ( blog)Ĭollected of more than 50m posts to underground extremist forums, and which we Vulnerability, which broke almost all NLP models.

Which broke almost all computer languages, and the related Bad Characters Learned from trying to get industry to fix the Trojan Source vulnerability, If Parliament really cares about child safety and terrorism, what should it do instead?

Their arguments are used to support the government's Online Safety Bill which would give Ofcom a lot of powers it shouldn't have, including the power to mandate snooping software in your phone.

Chat Control or Child Protection analyses the arguments used by GCHQ that we should circumvent the end-to-end crypto in messenger apps 'to protect children' and shows that they are not consistent with the evidence.

Dnn password decrypt software