Create accountLogin

Recent searches

No recent searches

Search options

Only available when logged in.
ioc.exchange is one of the many independent Mastodon servers you can use to participate in the fediverse.
INDICATORS OF COMPROMISE (IOC) InfoSec Community within the Fediverse. Newbies, experts, gurus - Everyone is Welcome! Instance is supposed to be fast and secure.

Administered by:

Server stats:

1.3K
active users

ioc.exchange: AboutStatusProfiles directoryPrivacy policy

Mastodon: AboutGet the appKeyboard shortcutsView source codev4.3.7

#academicpapers

1 post1 participant0 posts today
Public
ResearchBuzz: Firehose

Gizmodo: Million-Dollar Project Aims to Expose Bad Medical Research. “The Center for Scientific Integrity just launched the Medical Evidence Project, a two-year effort to identify published medical research with a negative effect on health guidelines—and to make sure people actually hear about it. Equipped with a $900,000 grant from Open Philanthropy and a core team of up to five […]

https://rbfirehose.com/2025/06/09/gizmodo-million-dollar-project-aims-to-expose-bad-medical-research/

ResearchBuzz: Firehose | Individual posts from ResearchBuzz · Gizmodo: Million-Dollar Project Aims to Expose Bad Medical Research | ResearchBuzz: Firehose
More from ResearchBuzz: Firehose
#academicpapers#academicpublishing#academicresearch
Public
ResearchBuzz: Firehose

Iowa University Libraries: Big Ten Academic Alliance and Springer Nature announce first-ever unlimited Open Access Publishing Agreement in the Americas . “The Big Ten Academic Alliance has signed a two-year Open Publishing Agreement with Springer Nature… This is the Big Ten Academic Alliance’s fifth Open Publishing Agreement or OPA, and its most expansive to date. This groundbreaking deal […]

https://rbfirehose.com/2025/06/04/iowa-university-libraries-big-ten-academic-alliance-and-springer-nature-announce-first-ever-unlimited-open-access-publishing-agreement-in-the-americas/

ResearchBuzz: Firehose | Individual posts from ResearchBuzz · Iowa University Libraries: Big Ten Academic Alliance and Springer Nature announce first-ever unlimited Open Access Publishing Agreement in the Americas | ResearchBuzz: Firehose
More from ResearchBuzz: Firehose
#academicpapers#academicpublishing#academicresearch
Public
ResearchBuzz: Firehose

University of Surrey: AI tools may be weakening the quality of published research, study warns. “Artificial intelligence could be affecting the scientific rigour of new research, according to a study from the University of Surrey. The research team has called for a range of measures to reduce the flood of ‘low-quality’ and ‘science fiction’ papers, including stronger peer review processes and […]

https://rbfirehose.com/2025/05/18/university-of-surrey-ai-tools-may-be-weakening-the-quality-of-published-research-study-warns/

ResearchBuzz: Firehose | Individual posts from ResearchBuzz · University of Surrey: AI tools may be weakening the quality of published research, study warns | ResearchBuzz: Firehose
More from ResearchBuzz: Firehose
#academicpapers#academicpublishing#academicresearch
Public
ResearchBuzz: Firehose

Retraction Watch: Scopus indexed a journal with a fake editorial board and a sham archive. “Scopus indexed Science of Law in July 2024. According to its profile in the database, the journal is published by the ‘Editorial Team of SoL.’ However, ‘the editorial team’ and many members of the editorial board are fake names and that such individuals do not actually exist.”

https://rbfirehose.com/2025/05/18/retraction-watch-scopus-indexed-a-journal-with-a-fake-editorial-board-and-a-sham-archive/

ResearchBuzz: Firehose | Individual posts from ResearchBuzz · Retraction Watch: Scopus indexed a journal with a fake editorial board and a sham archive | ResearchBuzz: Firehose
More from ResearchBuzz: Firehose
#academicjournals#academicpapers#academicpublishing
Public
ResearchBuzz: Firehose

TechXplore: ‘Reborn articles’: Simple approach enables direct publication of machine-readable scientific findings. “Rather than trying to teach machines our language, why not produce science in a language they already understand? In an article published in Scientific Data, the team introduces reborn articles, an open-source approach that allows researchers to produce scientific findings in a […]

https://rbfirehose.com/2025/05/02/reborn-articles-simple-approach-enables-direct-publication-of-machine-readable-scientific-findings-tech-xplore/

ResearchBuzz: Firehose | Individual posts from ResearchBuzz · ‘Reborn articles’: Simple approach enables direct publication of machine-readable scientific findings (Tech Xplore) | ResearchBuzz: Firehose
More from ResearchBuzz: Firehose
#academicpapers#academicpublishing#academicresearch
Public
Pyrzout :vm:

Applying Security Engineering to Prompt Injection Security schneier.com/blog/archives/202 #securityengineering #academicpapers #Uncategorized #Google #LLM #AI

Schneier on Security · Applying Security Engineering to Prompt Injection Security - Schneier on SecurityThis seems like an important advance in LLM security against prompt injection: Google DeepMind has unveiled CaMeL (CApabilities for MachinE Learning), a new approach to stopping prompt-injection attacks that abandons the failed strategy of having AI models police themselves. Instead, CaMeL treats language models as fundamentally untrusted components within a secure software framework, creating clear boundaries between user commands and potentially malicious content. […] To understand CaMeL, you need to understand that prompt injections happen when AI systems can’t distinguish between legitimate user commands and malicious instructions hidden in content they’re processing...
Public
Schneier on Security RSS

Applying Security Engineering to Prompt Injection Security

This seems like an important advance in LLM security against prompt injection:
G... schneier.com/blog/archives/202

Schneier on Security · Applying Security Engineering to Prompt Injection Security - Schneier on SecurityThis seems like an important advance in LLM security against prompt injection: Google DeepMind has unveiled CaMeL (CApabilities for MachinE Learning), a new approach to stopping prompt-injection attacks that abandons the failed strategy of having AI models police themselves. Instead, CaMeL treats language models as fundamentally untrusted components within a secure software framework, creating clear boundaries between user commands and potentially malicious content. […] To understand CaMeL, you need to understand that prompt injections happen when AI systems can’t distinguish between legitimate user commands and malicious instructions hidden in content they’re processing...
#securityengineering#academicpapers#Uncategorized
Public
Schneier on Security RSS

Regulating AI Behavior with a Hypervisor

Interesting research: “Guillotine: Hypervisors for Isolating Malicious AIs.”
Abstract:As AI models become more embedded in critical sectors like finance, healthca... schneier.com/blog/archives/202

Schneier on Security · Regulating AI Behavior with a Hypervisor - Schneier on SecurityInteresting research: “Guillotine: Hypervisors for Isolating Malicious AIs.” Abstract:As AI models become more embedded in critical sectors like finance, healthcare, and the military, their inscrutable behavior poses ever-greater risks to society. To mitigate this risk, we propose Guillotine, a hypervisor architecture for sandboxing powerful AI models—models that, by accident or malice, can generate existential threats to humanity. Although Guillotine borrows some well-known virtualization techniques, Guillotine must also introduce fundamentally new isolation mechanisms to handle the unique threat model posed by existential-risk AIs. For example, a rogue AI may try to introspect upon hypervisor software or the underlying hardware substrate to enable later subversion of that control plane; thus, a Guillotine hypervisor requires careful co-design of the hypervisor software and the CPUs, RAM, NIC, and storage devices that support the hypervisor software, to thwart side channel leakage and more generally eliminate mechanisms for AI to exploit reflection-based vulnerabilities. Beyond such isolation at the software, network, and microarchitectural layers, a Guillotine hypervisor must also provide physical fail-safes more commonly associated with nuclear power plants, avionic platforms, and other types of mission critical systems. Physical fail-safes, e.g., involving electromechanical disconnection of network cables, or the flooding of a datacenter which holds a rogue AI, provide defense in depth if software, network, and microarchitectural isolation is compromised and a rogue AI must be temporarily shut down or permanently destroyed. ...
#physicalsecurity#academicpapers#Uncategorized
Public
Pyrzout :vm:

Regulating AI Behavior with a Hypervisor schneier.com/blog/archives/202 #physicalsecurity #academicpapers #Uncategorized #threatmodels #AI

Schneier on Security · Regulating AI Behavior with a Hypervisor - Schneier on SecurityInteresting research: “Guillotine: Hypervisors for Isolating Malicious AIs.” Abstract:As AI models become more embedded in critical sectors like finance, healthcare, and the military, their inscrutable behavior poses ever-greater risks to society. To mitigate this risk, we propose Guillotine, a hypervisor architecture for sandboxing powerful AI models—models that, by accident or malice, can generate existential threats to humanity. Although Guillotine borrows some well-known virtualization techniques, Guillotine must also introduce fundamentally new isolation mechanisms to handle the unique threat model posed by existential-risk AIs. For example, a rogue AI may try to introspect upon hypervisor software or the underlying hardware substrate to enable later subversion of that control plane; thus, a Guillotine hypervisor requires careful co-design of the hypervisor software and the CPUs, RAM, NIC, and storage devices that support the hypervisor software, to thwart side channel leakage and more generally eliminate mechanisms for AI to exploit reflection-based vulnerabilities. Beyond such isolation at the software, network, and microarchitectural layers, a Guillotine hypervisor must also provide physical fail-safes more commonly associated with nuclear power plants, avionic platforms, and other types of mission critical systems. Physical fail-safes, e.g., involving electromechanical disconnection of network cables, or the flooding of a datacenter which holds a rogue AI, provide defense in depth if software, network, and microarchitectural isolation is compromised and a rogue AI must be temporarily shut down or permanently destroyed. ...
Public
Schneier on Security RSS

AIs as Trusted Third Parties

This is a truly fascinating paper: “Trusted Machine Learning Models Unlock Private Inference for Problems Currently Infeasible with Cryptography.” The basic idea is that AIs can act as tr... schneier.com/blog/archives/202

Schneier on Security · AIs as Trusted Third Parties - Schneier on SecurityThis is a truly fascinating paper: “Trusted Machine Learning Models Unlock Private Inference for Problems Currently Infeasible with Cryptography.” The basic idea is that AIs can act as trusted third parties: Abstract: We often interact with untrusted parties. Prioritization of privacy can limit the effectiveness of these interactions, as achieving certain goals necessitates sharing private data. Traditionally, addressing this challenge has involved either seeking trusted intermediaries or constructing cryptographic protocols that restrict how much data is revealed, such as multi-party computations or zero-knowledge proofs. While significant advances have been made in scaling cryptographic approaches, they remain limited in terms of the size and complexity of applications they can be used for. In this paper, we argue that capable machine learning models can fulfill the role of a trusted third party, thus enabling secure computations for applications that were previously infeasible. In particular, we describe Trusted Capable Model Environments (TCMEs) as an alternative approach for scaling secure computation, where capable machine learning model(s) interact under input/output constraints, with explicit information flow control and explicit statelessness. This approach aims to achieve a balance between privacy and computational efficiency, enabling private inference where classical cryptographic solutions are currently infeasible. We describe a number of use cases that are enabled by TCME, and show that even some simple classic cryptographic problems can already be solved with TCME. Finally, we outline current limitations and discuss the path forward in implementing them...
#machinelearning#academicpapers#Uncategorized
Public
Schneier on Security RSS

Is Security Human Factors Research Skewed Towards Western Ideas and Habits?

Really interesting research: “How WEIRD is Usable Privacy and Security Research?” by Ayako A. Hasegawa Daisuke Inoue, and Mitsuaki Akiyama:
<bl... schneier.com/blog/archives/202

Schneier on Security · Is Security Human Factors Research Skewed Towards Western Ideas and Habits? - Schneier on SecurityReally interesting research: “How WEIRD is Usable Privacy and Security Research?” by Ayako A. Hasegawa Daisuke Inoue, and Mitsuaki Akiyama: Abstract: In human factor fields such as human-computer interaction (HCI) and psychology, researchers have been concerned that participants mostly come from WEIRD (Western, Educated, Industrialized, Rich, and Democratic) countries. This WEIRD skew may hinder understanding of diverse populations and their cultural differences. The usable privacy and security (UPS) field has inherited many research methodologies from research on human factor fields. We conducted a literature review to understand the extent to which participant samples in UPS papers were from WEIRD countries and the characteristics of the methodologies and research topics in each user study recruiting Western or non-Western participants. We found that the skew toward WEIRD countries in UPS is greater than that in HCI. Geographic and linguistic barriers in the study methods and recruitment methods may cause researchers to conduct user studies locally. In addition, many papers did not report participant demographics, which could hinder the replication of the reported studies, leading to low reproducibility. To improve geographic diversity, we provide the suggestions including facilitate replication studies, address geographic and linguistic issues of study/recruitment methods, and facilitate research on the topics for non-WEIRD populations...
#academicpapers#Uncategorized#usability
Public
Schneier on Security RSS

Improvements in Brute Force Attacks

New paper: “GPU Assisted Brute Force Cryptanalysis of GPRS, GSM, RFID, and TETRA: Brute Force Cryptanalysis of KASUMI, SPECK, and TEA3.”
... schneier.com/blog/archives/202

Schneier on Security · Improvements in Brute Force Attacks - Schneier on SecurityNew paper: “GPU Assisted Brute Force Cryptanalysis of GPRS, GSM, RFID, and TETRA: Brute Force Cryptanalysis of KASUMI, SPECK, and TEA3.” Abstract: Key lengths in symmetric cryptography are determined with respect to the brute force attacks with current technology. While nowadays at least 128-bit keys are recommended, there are many standards and real-world applications that use shorter keys. In order to estimate the actual threat imposed by using those short keys, precise estimates for attacks are crucial. In this work we provide optimized implementations of several widely used algorithms on GPUs, leading to interesting insights on the cost of brute force attacks on several real-word applications...
#academicpapers#Uncategorized#cryptanalysis
ExploreLive feeds
About