MoreRSS

site iconAlec MuffettModify

Alec is a technologist, writer & security consultant who has worked in host and network security for more than 30 years, with 25 of those in industry.
Please copy the RSS to your reader, or quickly subscribe to:

Inoreader Feedly Follow Feedbin Local Reader

Rss preview of Blog of Alec Muffett

US Gov’t threatens sanctions on China for Open Source LLMs “because distillation is a cyber attack”

2026-07-23 12:43:11

I can’t decide whether to go with:

*OPEN SOURCE IS COMMUNISM*

…or the South Park inspired:

*THEY TOOK OUR WEIGHTS!*


Those who do not remember how ITAR failed to restrict cryptography, are doomed to repeat how ITAR failed to restrict cryptography.

We support open-source AI and the innovation it unlocks. But open source is not open season on American IP. When PRC firms conduct covert, industrial-scale distillation attacks that cross the line into IP theft, sanctions and Entity List designations will be on the table.

https://x.com/SecScottBessent/status/2080008411790368895

Apple Defeats Liability for Not Scanning iCloud for CSAM, But the Judge Was Not Pleased-Amy v. Apple | Eric Goldman

2026-07-21 13:32:24

The opinion downplays the encryption angle; it mentions encryption only twice, as if it’s an afterthought. However, encryption is the critical attribute underlying Apple’s moves. Forcing Apple to scan for CSAM in iCloud means breaking end-to-end encryption for everyone and all purposes, including: malefactors who would intercept private files for criminal purposes; and government actors who have repeatedly shown that they will break into, distribute, and weaponize privately stored file caches (I was just thinking about the North Korea Sony hack. Remember it?).

https://blog.ericgoldman.org/archives/2026/07/apple-defeats-liability-for-not-scanning-icloud-for-csam-but-the-judge-was-not-pleased-amy-v-apple.htm

EU Exempts Apple Watch and AirPods [and iPhone] From Battery Removal Requirement [due to water resistance & safety]

2026-07-20 10:15:37

The “right to repair” folk will be upset, but here’s a further thought:

If “water resistance” is legitimate grounds to sidestep “right to repair”, perhaps “hacker & abuse resistance” can be valid grounds to sidestep “interoperability”?

https://mjtsai.com/blog/2026/07/17/eu-exempts-apple-watch-and-airpods-from-battery-removal-requirement/

“Social Media Curfew” is a Digital “Purity Ring”

2026-07-15 06:14:46

Too bloody right “it can be overridden” – this is arrantly “flying a kite” to see if/how hard it fails rather than to commit to failure:

From next spring, Britain’s oldest children will be urged to refrain from using certain apps with a midnight to 6am block being switched on by default. But the curfew will not be mandatory and can be overridden.

https://www.theguardian.com/technology/2026/jul/14/uk-16-17-year-olds-midnight-social-media-curfew