Ross Anderson (@rossjanderson) 's Twitter Profile
Ross Anderson

@rossjanderson

Professor of Security Engineering at Cambridge University and Edinburgh University

ID: 113470086

linkhttp://www.ross-anderson.com calendar_today11-02-2010 21:36:30

1,1K Tweet

10,10K Followers

938 Following

alan rusbridger (@arusbridger) 's Twitter Profile Photo

Condemn the bigots. But the horrors of 7th Oct didn’t happen in a vacuum. It’s not “anti-Israel” to say so, nor is it “anti-Zionist”, let alone antisemitic—but how casually those three are sometimes elided. My column prospectmagazine.co.uk/world/64896/th…

Carol Vorderman (@carolvorders) 's Twitter Profile Photo

TRUTH Over the last year or so I've been delving into Tory 'corruption' & cases of cronyism. There is so much that some days it's overwhelming & I feel I've let you down by not highlighting many of the stories. What you see on TV doesn't even touch the sides 😡 It disgusts me

Jonathan Haidt (@jonhaidt) 's Twitter Profile Photo

The parents' movement to roll back the phone-based childhood just launched, spontaneously, in the UK. Parents are fed up and linking up to solve the collective action problem: theguardian.com/technology/202…

Ross Anderson (@rossjanderson) 's Twitter Profile Photo

I got my review copy of Marc Tobias' book "Insecurity Engineering" a few days ago. It is enormously impressive, and should become the standard reference on physical security for locksmiths, HSM designers and others who worry about capable adversaries

Silvio Cesare (@silviocesare) 's Twitter Profile Photo

Marcel Böhme👨‍🔬 It’s interesting that many developers have high faith in their compilers and it’s moderately rare to come across bugs as a dev. However, once you start to write code to specifically attack the compiler/interpreter, say JavaScript bugs in browsers. It’s an entirely different game

Faith 🇧🇩🇦🇺 (@farazsth98) 's Twitter Profile Photo

Silvio Cesare Marcel Böhme👨‍🔬 On the other hand, there have been bugs introduced by the compiler that don't exist in the code, but is extremely obvious when looking at the generated assembly. My favourite is Felix Wilhelm's Xen double fetch bug: insinuator.net/2015/12/xen-xs…

<a href="/silviocesare/">Silvio Cesare</a> <a href="/mboehme_/">Marcel Böhme👨‍🔬</a> On the other hand, there have been bugs introduced by the compiler that don't exist in the code, but is extremely obvious when looking at the generated assembly.

My favourite is Felix Wilhelm's Xen double fetch bug: insinuator.net/2015/12/xen-xs…
Trail of Bits (@trailofbits) 's Twitter Profile Photo

We responded to an RFI by the US Army’s PEO IEW&S on methods for implementing and automating AIBOM tools. Check out a summary of our response: buff.ly/48tADNm

We responded to an RFI by the US Army’s PEO IEW&amp;S on methods for implementing and automating AIBOM tools. Check out a summary of our response: buff.ly/48tADNm
Dylan Williams (@dylanotes) 's Twitter Profile Photo

US law requires you to suspend military assistance to any foreign country that is restricting, directly or indirectly, the delivery of US humanitarian aid. Until you do that, you’re not only failing to “pull out every stop” — you’re failing to follow US law you swore to enforce.

foxes.bsky.social 🦊🏳️‍🌈 (@soft_fox_lad) 's Twitter Profile Photo

Gemini is apparently told your Google account age and will answer questions w/the appropriate caution. Here it is refusing to help someone with C++ because they’re he’s under 18, and advanced C++ is a danger to a young mind. gemini.google.com/share/23803238… From news.ycombinator.com/item?id=393834…

Gemini is apparently told your Google account age and will answer questions w/the appropriate caution.

Here it is refusing to help someone with C++ because they’re he’s under 18, and advanced C++ is a danger to a young mind.

gemini.google.com/share/23803238…

From news.ycombinator.com/item?id=393834…
Gary Marcus (@garymarcus) 's Twitter Profile Photo

GenAI is starting to look like Typhoid Mary. Last May, the celebrated 54-year-old LexisNexis touted hallucination-free legal citations produced by Generative AI. Instead, it is making up cases — from 2025 and 2026!!! Talk about torching one’s reputation on the altar of GenAI. —

GenAI is starting to look like Typhoid Mary.

Last May, the celebrated 54-year-old LexisNexis touted hallucination-free legal citations produced by Generative AI. Instead, it is making up cases — from 2025 and 2026!!!

Talk about torching one’s reputation on the altar of GenAI.
—
Lilian Edwards (@lilianedwards) 's Twitter Profile Photo

This is gorgeous. Any linguists know if it's actually accurate? And if so how it evolved? Are there similar rules for eg French? I dimly recall rules re when adjective goes after noun but not semantic

Valentin Hofmann (@vjhofmann) 's Twitter Profile Photo

💥 New paper 💥 We discover a form of covert racism in LLMs that is triggered by dialect features alone, with massive harms for affected groups. For example, GPT-4 is more likely to suggest that defendants be sentenced to death when they speak African American English. 🧵

💥 New paper 💥

We discover a form of covert racism in LLMs that is triggered by dialect features alone, with massive harms for affected groups.

For example, GPT-4 is more likely to suggest that defendants be sentenced to death when they speak African American English.

🧵
Satnam Singh (@satnam6502) 's Twitter Profile Photo

A video of the guest lecture I gave for a computer security course at the University of Edinburgh last week is now online. youtu.be/ujmgPCIWuU4