PHP2Shell: the patch is only half the job
An emergency update is useful only when somebody can prove the running service actually received it.
The author
Noah Nelson
A secure tunnel still needs someone to maintain its trust
The eMudhra incident exposes the maintenance hidden beneath a reassuring connection status.
Your car’s app belongs on the privacy inspection sheet
A vehicle’s data trail extends beyond the dashboard and into the software on your phone.
Consent belongs in the design, not just the paperwork
The GM and OnStar order raises a practical question: can a driver understand the bargain before making it?
The AI security story is also a staffing story
Automation can change how much harm one operator can attempt without inventing a new class of attack.
Deleting your data should not be a second job
California’s DROP system puts the burden of coordinating deletion closer to where it belongs.
An incident deadline is useful. A completed repair is better.
Europe’s new reporting duties should produce information people can use, not just faster paperwork.
A dating profile is not spare training material
The OkCupid case is a reminder that intimate disclosures carry expectations beyond a policy document.
Stop making the scam victim do all the explaining
The latest FTC findings call for better systems, not another lecture about being careful online.
School AI needs a contract parents can understand
A vendor’s privacy commitment should become something a district can inspect and enforce.
A right to repair needs a working path to the part
A legal entitlement becomes useful when an ordinary owner can complete the repair.
Your AI assistant needs an expiry date on its authority
An agent that can act on your behalf should not inherit unlimited access for an unlimited time.