Stuart Schechter

@MildlyAggrievedScientist
322 Followers
283 Following
253 Posts
Associate at Harvard SEAS. Founder at DiceKeys. Former researcher at Microsoft Research & MIT Lincoln Laboratory. Debunker of security questions, site-authentication images, & mandatory password resets.
homepagehttps://www.stuartschechter.org

We tested that AI that wants you to 'cheat at everything.'

It sucks? Took 20 seconds to provide responses, was clearly just feeding whatever prompt into ChatGPT/other models. Simply wouldn't work in a real situation.

https://www.404media.co/the-man-who-wants-ai-to-help-you-cheat-on-everything/

The Man Who Wants AI to Help You ‘Cheat on Everything’

Roy Lee used AI to beat challenging technical interviews, now he wants people to do the same thing with every human interaction. We tested the tool and it kinda sucks.

404 Media

When your kids are begging you to bring a furball into your universe, they will use iron-clad logic to convince you that you will find effectively-infinite resources to support this furry lifeform.

When you actually need someone to walk your furball, you will start to suspect you are alone in this universe.

Scientists call this the fur-me paradox.

That rancher thought there was little risk in branching into marijuana cultivation, but he later realized that the steaks were high.

The Economist calls DARK WIRE, my book on the FBI's secret running of a tech company for organized crime, as one of the best books of the year.

"The author spent years getting to know the players, many of them unsavoury international gangsters." https://www.economist.com/culture/2024/11/22/the-best-books-of-2024-as-chosen-by-the-economist

The best books of 2024, as chosen by The Economist

Readers will never think the same way again about games, horses and spies

The Economist

I'm sorry I missed my appointment.

Sadly, with all the time required to archive the emails and texts confirming the scheduling of my appointments, to answer your calls reminding me of them, responding 1 to texts asking me to confirm them, and filling out forms to pre-checkin for them, I no longer have time to actually attend them.

Please press 1 to confirm.

📢 New post: The State of ES5 on the Web.

For years, we defaulted to transpiling to ES5 in order to support IE. But is that still necessary?

I took a look at the data to find out, and I'll just say that the results were *actually* quite surprising! 🙀

https://philipwalton.com/articles/the-state-of-es5-on-the-web/

The State of ES5 on the Web

Should web developers and JavaScript library authors still transpile their code to ES5? This post looks at what the data suggests based on what popular libraries, tools, and websites are doing

The YubiKey 5, the most widely used hardware token for two-factor authentication based on the FIDO standard, contains a cryptographic flaw that makes the finger-size device vulnerable to cloning when an attacker gains brief physical access to it, researchers said Tuesday.

The cryptographic flaw, known as a side channel, resides in a small microcontroller that’s used in a vast number of other authentication devices, including smartcards used in banking, electronic passports, and the accessing of secure areas. While the researchers have confirmed all YubiKey 5 series models can be cloned, they haven’t tested other devices using the microcontroller, which is SLE78 made by Infineon and successor microcontrollers known as the Infineon Optiga Trust M and the Infineon Optiga TPM. The researchers suspect that any device using any of these three microcontrollers and the Infineon cryptographic library contains the same vulnerability.

https://arstechnica.com/security/2024/09/yubikeys-are-vulnerable-to-cloning-attacks-thanks-to-newly-discovered-side-channel/

YubiKeys are vulnerable to cloning attacks thanks to newly discovered side channel

Sophisticated attack breaks security assurances of the most popular FIDO key.

Ars Technica

A source with knowledge of the incident said the cemetery official tried to prevent Trump staffers from filming and photographing in a section where recent U.S. casualties are buried. The source said Arlington officials had made clear that only cemetery staff members would be authorized to take photographs or film in the area, known as Section 60.

When the cemetery official tried to prevent Trump campaign staff from entering Section 60, campaign staff verbally abused and pushed the official aside, according to the source.

https://www.npr.org/2024/08/27/nx-s1-5091154/trump-arlington-cemetery

We joined forces with @tallpoppy to evaluate seven different people-search removal services.

Today we’re releasing the full report of our findings.

https://innovation.consumerreports.org/new-report-data-defense-evaluating-people-search-site-removal-services/

New Report: Data Defense: Evaluating People-Search Site Removal Services - Innovation at Consumer Reports

CR joined forces with Tall Poppy to evaluate seven different people-search removal services. The full report reveals our findings.

Innovation at Consumer Reports

Given a spoken phrase like “hurt people hurt people”, only our AI can correctly interpret its nuanced meaning and cultural implications. Only our AI can reason that hurting others becomes endemic. Only our AI can conclude that the only way to stop humans from hurting each other is to eliminate them all.

Yes, a lesser AI might take the same action after interpreting the phrase as a repeated two-word command, but only ours can take moral responsibility by choosing the action on its own.