Create accountLogin

Recent searches

No recent searches

Search options

Only available when logged in.
eupolicy.social is one of the many independent Mastodon servers you can use to participate in the fediverse.
This Mastodon server is a friendly and respectful discussion space for people working in areas related to EU policy. When you request to create an account, please tell us something about you.

Administered by:

Server stats:

242
active users

eupolicy.social: AboutProfiles directoryPrivacy policy

Mastodon: AboutGet the appKeyboard shortcutsView source codev4.3.6

#computersecurity

2 posts2 participants0 posts today
Public
Katika Kühnreich

Finally updated my #profile at speakerinnen.org :awesome:

Are you looking for a #talk, a #workshop or an #interview on the #socialimpact of #digitalization?

On #ai, #sustainability or #ideologies behind digitalization as #cybernetics, #gamification, #longtermism, or #effectivealtruism?

Why the thoughts and theories of those in power heavily influence societies?

Are you looking for a #workshop on how to really interest people in #computersecurity?

Contact me.

And #boost if you like

Sreenshot of Katika Kuehnreich's Speakerinnen page https://speakerinnen.org/en/profiles/katika-kuhnreich
Public
Jan de Muijnck-Hughes

*Last Call*

I have a #PhD position for UK students, available with myself and @bentnib

This project will be looking at developing new methods for asserting the resilience of existing communicating systems by developing new static analysis methods derived from advanced programming language research.

*Hard Deadline*: Wednesday 16th April 2025

You will belong to @StrathCyber and @mspstrath, as well as gaining access to @spli

strath.ac.uk/studywithus/postg

(Ignore the deadline on the advert)

Please spread the words.

www.strath.ac.ukTowards Type-Driven Assurance of Communicating Systems | University of Strathclyde
#dependentTypes#formalMethods#idris
Public
Jan de Muijnck-Hughes

I have a funded #PhD position for UK students, available with myself and @bentnib

This project will be looking at developing new methods for asserting the resilience of existing communicating systems by developing new static analysis methods derived from advanced programming language research.

Deadline: Thursday 20th March 2025

You will belong to @StrathCyber and @mspstrath, as well as gaining access to @spli

For now more details about the project are on my personal website.

tyde.systems/page/position/202

Please spread the words.

Jan de Muijnck-HughesTowards Type-Driven Assurance of Communicating SystemsDeadline Thursday 20 March 2025 Duration 36 Months Start Date October 2025 Funding Home fee, Stipend Supervisors Jan de Muijnck-Hughes, Bob Atkey Groups StrathCyber, MSP This JARSS PhD studentship will develop new methods for asserting the resilience of existing communicating systems by developing new static analysis methods derived from advanced programming language research as pioneered by the supervising team, and the wider MSP and StrathCyber research groups. Contact Informal enquiries about the studentship are to be directed to Jan de Muijnck-Hughes (Jan.
#dependentTypes#formalMethods#idris
Public
Ramin Honary
Be careful if you are running an #Ollama web server

According to this article if you run Ollama as a web server, meaning you are running an LLM model locally on your server or home computer, but you have a web portal open to it so people in your organization or home can connect to your server and ask the LLM questions, the Ollama web server is apparently full of security holes. The article mentions two problems:

  • It can leave your computer vulnerable to DDoS attacks from the public Internet
  • The push/pull feature for uploading/downloading models is vulnerable to man-in-the-middle attacks (possibly? as is my understanding)

Quoting the article:

the API can be exposed to the public internet; its functions to push, pull, and delete models can put data at risk and unauthenticated users can also bombard models with requests, potentially causing costs for cloud computing resource owners. Existing vulnerabilities within Ollama could also be exploited.

Hackread - Latest Cybersecurity, Tech, Crypto & Hacking News · 7,000 Exposed Ollama APIs Leave DeepSeek AI Models Wide Open to AttackFollow us on Bluesky, Twitter (X) and Facebook at @Hackread
#tech#AI#OpSec
Public
Schneier on Security RSS

On Generative AI Security

Microsoft’s AI Red Team just published “Lessons from
Red Teaming 100 Generative AI Products.” Their <a href="https... schneier.com/blog/archives/202

Schneier on Security · On Generative AI Security - Schneier on SecurityMicrosoft’s AI Red Team just published “Lessons from Red Teaming 100 Generative AI Products.” Their blog post lists “three takeaways,” but the eight lessons in the report itself are more useful: Understand what the system can do and where it is applied. You don’t have to compute gradients to break an AI system. AI red teaming is not safety benchmarking. Automation can help cover more of the risk landscape. The human element of AI red teaming is crucial. Responsible AI harms are pervasive but difficult to measure. LLMs amplify existing security risks and introduce new ones...
#computersecurity#Uncategorized#cyberattack
Public
Schneier on Security RSS

Biden Signs New Cybersecurity Order

President Biden has signed a new cybersecurity order. It has a bunch of ... schneier.com/blog/archives/202

Schneier on Security · Biden Signs New Cybersecurity Order - Schneier on SecurityPresident Biden has signed a new cybersecurity order. It has a bunch of provisions, most notably using the US governments procurement power to improve cybersecurity practices industry-wide. Some details: The core of the executive order is an array of mandates for protecting government networks based on lessons learned from recent major incidents­—namely, the security failures of federal contractors. The order requires software vendors to submit proof that they follow secure development practices, building on a mandate that debuted in 2022 in response to ...
#computersecurity#Uncategorized#cybersecurity
Public
IT News

Does Banning TikTok solve the National Security Issue? - TikTok is set to be blocked in the U.S. after the Supreme Court upheld a law that effecti... - nytimes.com/video/technology/1 #defenseandmilitaryforces #computersandtheinternet #politicsandgovernment #decisionsandverdicts #mobileapplications #tiktok(bytedance) #computersecurity #supremecourt(us) #companyreports #unitedstates #socialmedia #rednote

www.nytimes.com · Video: Does Banning TikTok solve the National Security Issue?TikTok is set to be blocked in the U.S. after the Supreme Court upheld a law that effectively bans the app. TikTok, a Chinese-owned social media platform, has drawn scrutiny from lawmakers for its national security risks and its ties to China. Sapna Maheshwari, a business reporter for The New York Times, examines the security concerns and the reactions to the news.
ExploreLive feeds
About