The Cyber Resilience Act (CRA)!
The CRA is coming and it's going to be a dramatic change for technology producers
Shostack + Friends Blog
Posts in category “legal”
Secure Boot and Liability
Secure boot presents questions that should inform the liability conversation
Watermarks
Watermarks show us wierd edges of AI work
Liability for the Second Death Star
Legal commentary on the Second Death Star Project
Thoughts on the Executive Order
A new article by Steve Bellovin and myself at Lawfare.
Van Buren
The Supreme Court has ruled in the van Buren case, and there's a good summary on the Eff's blog.
The Updates Must Go Through
The timing of updates is not coincidental.
The Uber CSO indictment
Thoughts on Mark Rasch's essay, Conceal and Fail to Report - The Uber CSO Indictment
Amicus Brief on CFAA
I recently signed onto the amicus brief on the Van Buren/Computer Fraud and Abuse Act filed by the Electronic Frontier Foundation.
India's Intermediary Guidelines
I've signed on to Access Now's letter to the Indian Ministry of Electronics and Information Technology, asking the Government of India to withdraw the draft amendments proposed to the Information Technology (Intermediary Guidelines) Rules.
Carpenter!
[no description provided]
The Carpenter Case
[no description provided]
20 Year Software: Engineering and Updates
[no description provided]
Amicus brief in “Carpenter” Supreme Court Case
[no description provided]
Warrants for Cleaning Malware in Kelihos
[no description provided]