Friday, March 27, 2026

Truly Respectable

No government, any more than an individual, will long be respected without being truly respectable; nor be truly respectable without possessing a certain portion of order and stability.

-- Alexander Hamilton (1755 or 1757 - 1804), Founding Father of the United States, one of the most influential interpreters and promoters of the U.S. Constitution, Federalist No. 62 (26 February 1788)

Thursday, March 26, 2026

If You Know

Three steps:  1) Accept what is.  2) Deliver "excellent best" right now.  3) Never quit; win it in the late innings. ...  If you know what's true but do not let that guide you, then you get what you deserve.

-- Robert Forster (1941 - 2019), American actor and TNS member, speaking to a crowd at ggg999, the General Global Gathering of the Triple Nine Society (1 September 2012)

Wednesday, March 25, 2026

From Whatever Source

One should accept the truth from whatever source it proceeds.

-- Moshe ben Maimon (1135 or 1138 - 1204), commonly known as Moses Maimonides, Jewish rabbi, physician, and philosopher, Foreword to The Eight Chapters Of Maimonides On Ethics, translated by Joseph I. Gorfinkle, Ph.D. (1912), Page 35-36

Tuesday, March 24, 2026

RIP Robert Mueller

You really don't think about it as you go through it; you just try to do the right thing at the right time.

-- Robert Swan Mueller III (7 August 1944 - 20 March 2026), American attorney who served as the 6th Director of the Federal Bureau of Investigation from 2001 to 2013 and in 2017 as Special Counsel investigating Russian interference in the 2016 US elections and related matters, interview with Aaron Harber (2015)

Monday, March 23, 2026

Goodhart's Law

When a measure becomes a target, it ceases to be a good measure.

-- Goodhart's law, named for Charles Albert Eric Goodhart, CBE, FBA (born 23 October 1936), British economist, originally (1975) expressed as "Any observed statistical regularity will tend to collapse once pressure is placed upon it for control purposes."

Friday, March 20, 2026

RIP Chuck Norris

Truth is, apart from my mother and Granny, my only role models were the cowboy heroes I saw on the screen.  Each time I walked out of the theater, I felt encouraged by the belief that there were such men.  I determined that I would grow up one day to be like them.  Those cowboy heroes offered a lot to a young boy longing for a male role model to emulate.  Their behavior in their films was governed by the "Code of the West" -- loyalty, friendship, and integrity.  They were unselfish and did what was right even when the risk was great.  Years later I would recall those Western heroes when I developed the kind of character I wanted to play as an actor.

-- Carlos Ray "Chuck" Norris Jr (10 March 1940 - 19 March 2026), American martial artist, action star, and Hollywood actor, Against All Odds: My Story (2006), Chapter 4 "A Mother's Love"

Thursday, March 19, 2026

Promptware Kill Chain

Attacks against modern generative artificial intelligence (AI) large language models (LLMs) pose a real threat.  Yet discussions around these attacks and their potential defenses are dangerously myopic.  The dominant narrative focuses on "prompt injection," a set of techniques to embed instructions into inputs to LLM intended to perform malicious activity.  This term suggests a simple, singular vulnerability.  This framing obscures a more complex and dangerous reality.  Attacks on LLM-based systems have evolved into a distinct class of malware execution mechanisms, which we term "promptware."  In a new paper, we, the authors, propose a structured seven-step "promptware kill chain" to provide policymakers and security practitioners with the necessary vocabulary and framework to address the escalating AI threat landscape.

The promptware kill chain: initial access, privilege escalation, reconnaissance, persistence, command & control, lateral movement, action on objective

The kill chain was already demonstrated.  For example, in the research "Invitation Is All You Need," attackers achieved initial access by embedding a malicious prompt in the title of a Google Calendar invitation.  The prompt then leveraged an advanced technique known as delayed tool invocation to coerce the LLM into executing the injected instructions.  Because the prompt was embedded in a Google Calendar artifact, it persisted in the long-term memory of the user's workspace.  Lateral movement occurred when the prompt instructed the Google Assistant to launch the Zoom application, and the final objective involved covertly livestreaming video of the unsuspecting user who had merely asked about their upcoming meetings.  C2 and reconnaissance weren't demonstrated in this attack.

-- Oleg Brodt, Elad Feldman, Bruce Schneier, Ben Nassi, "The Promptware Kill Chain: How Prompt Injections Gradually Evolved Into a Multistep Malware Delivery Mechanism" (14 January 2026)