I have been in this field for a good long while. Some things have always been true, some have never been true, some were once true but now are not, and some may become true. When someone says, “I have been in this field for a good long while,” the first words out of your mouth should be “Well, if you’ve been doing this for a long time, then why haven’t you fixed it yet?” It’s a fair question, and the longer you are in the field the more you will need a ready answer for when you get that question.

Biology and artificial intelligence, two areas of rapid technical advance, are converging. By converging, I mean the two areas are on the hunt to solve steering problems that, if viewed in a particular light, are restatements each of the other.

To get started, what is a bounded definition of software?

To kick-start the discussion, let’s first review some of the recent attacks. In the node-ipc case1 a developer pushed an update that deliberately but stealthily included code that sabotaged the computer of the users who installed the updated component. Such an attack was selective: a DarkSide in reverse. If the computer Internet Protocol (IP) was geolocated in Russia, the attack would be launched. Several days and a few million downloads later, the “spurious code” was actually noticed and investigated. Linus’s law on the many eyes eventually made the bug shallow,2 and the developer pulled back the changes.

To kick-start the discussion, let's first review some of the recent attacks. In the node-ipc case1 a developer pushed an update that deliberately but stealthily included code that sabotaged the computer of the users who installed the updated component. Such an attack was selective: a DarkSide in reverse. If the computer Internet Protocol (IP) was geolocated in Russia, the attack would be launched. Several days and a few million downloads later, the "spurious code" was actually noticed and investigated. Linus's law on the many eyes eventually made the bug shallow,2 and the developer pulled back the changes.

Examines the viability of deploying an auto-update as the solution for security engineering applications.

Some technologies exhibit positive feedback loops; the effect of their own progress is to accelerate their own further progress, constant acceleration in other words. Using ever more powerful computational models to design ever more powerful computational models is obviously such a case. Obtaining (and holding) a technologic lead in the presence of a positive feedback loop is inherently different than doing so in a field where persistence—just doggedly slogging it out—is the driving mechanism for progress. Put differently, under constant acceleration the distance between two entities can only increase.

Presents corrections to affiliation information in the above named paper.

Personal responsibility, economic liberty, and the owning of property are how we got to where we are. They are how we get to a future that we can tolerate, indeed enjoy. In societies without effective property rights, the poor can never escape their poverty— the lack of effective property rights keeps the poor in their place. The question we consider here is what is “effective property rights” and what is “poverty” in the digitalized world. Because no machinery can sit idle indefinitely and be expected to still run when asked, we might ask how long a people who do have these rights can choose not to use them yet still have exercisable rights should they later want to do so. Which brings us to XYZ-as-a-service business models and the triad of property rights, liberty, and personal responsibility. This being a word-count-limited column for readers of IEEE Security & Privacy magazine, let’s be crisp. If you own something, your ownership includes the ineluctable liberty to use the thing you own as you see fit. In addition to my day job in cybersecurity,

Cybersecurity is perhaps best understood as a constraint-based design problem: what are the failure modes the design team is unwilling to accept? Th e countervailing argument -that cybersecurity design is all about enablement-is less utile. Security failures that are unacceptable seem often to trace to a constraint ignored in design stages. 'This being a column, let's jump straight to current issu...

Every line of application glue code there is exists for one reason—to make omnivorous ingestion possible.

To benefit fully from today's technology, we must complement it with a mandatory reporting system that is comprehensive, inexpensive, adequately protective of confidentiality, and valuably informative about the volume, pattern, and character of digital attacks.

Hostile action in cyberspace offers perpetrators considerable advantages, underscoring the importance of attribution. With the futures of humanity and cybersecurity so intertwined, it’s time to geocode the Internet: nation-states must take strict liability for their citizens’ cyberactions with respect to other states.

Kinyarwanda grammar, particularly its parts of speech, includes modifiers of nouns among which "Adjectival noun (Izina ntera)" plays a crucial role. This category, a combination of a noun and an adjective of quality, has been a source of confusion among students due to ambiguous explanations by Kinyarwanda grammarians. Two distinct structures have been adopted for this grammatical category; however, the confirmed structure does not fully meet the necessary criteria, while the appropriate structure has not been widely accepted. This study addresses the discrepancies surrounding the "izina ntera" category in secondary schools and proposes a clearer explanation for its definition in Kinyarwanda grammar. Employing a mixed-method approach blending qualitative and quantitative methods, and drawing on critical and structuralism theories, the research involved 58 upper-level secondary school students and 30 Kinyarwanda teachers purposively selected from three schools in Gicumbi district. Data collection utilized both hard and soft questionnaires, and analysis was conducted using SPSS software. The research proposed an updated definition of Kinyarwanda adjectival noun, supplemented with examples, to alleviate ambiguity in its usage and enhance student understanding of this grammatical category. The findings indicate that current textbooks perpetuate confusion by presenting conflicting definitions and structures for "izina ntera." Recommendations include the standardization of educational materials to reflect a single structure, acceptance of the revised definition by grammarians and educators, and the organization of seminars and training to facilitate the adoption of these changes. Continued research on Kinyarwanda grammar is encouraged to further refine and innovate the teaching of parts of speech.

Is the paradigm of privacy science in enough of a crisis that resolution of the crisis requires a change of paradigm? If the crisis is sufficient to require a reformulation of the privacy paradigm, then a scientific revolution is upon us.

There is a cacophony of calls for cybersecurity automation. The most experienced people are no longer directly solving problems but instead are supervising largely automated processes. More and more, digital devices are tuning out small failures, from attacks and misconfigurations to version mismatches and service disconnects.

Explores the need to protect the content and information gleamed from the Internet while, at the same time, ensure that freedom of access and quality of content remains intact. Claims that there is a choice - do we want to make protection of individual Internet elements the owners’ problem for all values of “owner,” subject to unpredictable differentiation and a picking of winners and losers by emergent processes that we can perhaps still influence but never again control? Or do we want near monocultures of a few winning platforms whose vastness represents empire and thus requires a level of defense that only a nationstate can provide, if at all? On the former lies the path of so much science fiction, especially if the Singularity is imminent. On the latter lies the path to a state-level control far more invasive than fiat currency and secret standing armies. If neither of these options appeals, now is the time to apply the brakes. Now is the time, individually and collectively, to tamp down risk by tamping down dependence on the Internet. Now is the time to say that target richness is a disease for which the cure is intolerable.

In the face of the snowballing bigness of the institutions of globalized human life, we must reserve privacy rights explicitly so that we can misrepresent ourselves to those against whom we have no other defense.