The record
Writing
Research notes, technical essays and field notes. Each carries its own status, so you can tell what is established from what is still being worked out.
Most written about: Security, Privacy, AI ethics, AI reliability
- Essays
- 196
- Words
- 270,312
- Minutes of reading
- 1,322
- Subjects
- 25
Series
Status
Topic
+19 more subjects
Showing 24 of 196 publications
All publications
OpinionField Guide to AI, Security and Cybercrime · Part 102
AI Agents Are a New Kind of Insider
Insider-threat programmes look for a person with a motive. An agent holds the same access with no motive at all, and can be turned by what it reads.
ReadOpinionField Guide to AI, Security and Cybercrime · Part 128
AI Agents Do Not Sleep: The End of the Right to Disconnect
Autonomous AI agents create a permanent, silent workstream that makes the legal right to disconnect impossible to enforce.
Field Guide to AI, Security and Cybercrime · Part 128OpinionField Guide to AI, Security and Cybercrime · Part 107
AI Rules for a Small Business: Where to Start
You do not need a compliance department to use AI responsibly. You need four things done in order, and a page your staff will read.
Field Guide to AI, Security and Cybercrime · Part 107OpinionField Guide to AI, Security and Cybercrime · Part 106
AI Trading Bot Scams: How the Pitch Works
The bot, the dashboard and the steady profits are props. The only tests that matter are the regulator's register and a withdrawal.
Field Guide to AI, Security and Cybercrime · Part 106OpinionField Guide to AI, Security and Cybercrime · Part 134
BragJack: How a Browser Extension Hijacks Your AI Assistant's Trust
A malicious browser extension can impersonate the trusted channel between your AI assistant and its vendor, gaining its elevated privileges.
Field Guide to AI, Security and Cybercrime · Part 134OpinionField Guide to AI, Security and Cybercrime · Part 109
Chatbot Memory: What Your AI Assistant Keeps About You
Your assistant keeps three separate records about you. Deleting one does not delete the others.
Field Guide to AI, Security and Cybercrime · Part 109OpinionField Guide to AI, Security and Cybercrime · Part 117
Client-Side Scanning Explained: Checking Messages Before Encryption
A scanner on every device is a capability that can be widened, fooled and misused, which is why it breaks end-to-end encryption.
Field Guide to AI, Security and Cybercrime · Part 117OpinionField Guide to AI, Security and Cybercrime · Part 123
Deepfake Impersonation of Minors: A New Bullying Frontier
AI-generated impersonations of children are a potent new tool for bullying, exploiting legal gaps and causing unique emotional harm.
Field Guide to AI, Security and Cybercrime · Part 123
OpinionField Guide to AI, Security and Cybercrime · Part 120
Deepfake Video Calls and the Payment Nobody Should Have Made
When your boss appears on a video call demanding an urgent transfer, the video is the weakest evidence in the room.
Field Guide to AI, Security and Cybercrime · Part 120OpinionField Guide to AI, Security and Cybercrime · Part 129
Deepfakes Enter the Courtroom: A Challenge for Evidence
The established rules for authenticating video and audio evidence are breaking down in the face of AI-generated fabrication.
Field Guide to AI, Security and Cybercrime · Part 129OpinionField Guide to AI, Security and Cybercrime · Part 114
Email Encryption Explained: What PGP and S/MIME Do and Do Not Hide
The standard email you use is not end-to-end encrypted. Here is what the two main encryption systems protect, and what they leave exposed.
Field Guide to AI, Security and Cybercrime · Part 114OpinionField Guide to AI, Security and Cybercrime · Part 122
Encrypted Search: What You Give Up for Privacy
End-to-end encryption protects your queries but fundamentally limits what a search service can do for you.
Field Guide to AI, Security and Cybercrime · Part 122OpinionField Guide to AI, Security and Cybercrime · Part 127
Encryption Backdoors Are a Distraction: Metadata Is the Target
Governments and surveillance actors increasingly exploit the data around your encrypted messages, not their content.
Field Guide to AI, Security and Cybercrime · Part 127OpinionField Guide to AI, Security and Cybercrime · Part 110
End-to-End Encrypted Backups: What You Gain and What You Give Up
Moving the backup key to you shuts out the provider, its breaches and legal demands. It also makes you the only recovery desk.
Field Guide to AI, Security and Cybercrime · Part 110OpinionField Guide to AI, Security and Cybercrime · Part 101
Full-Disk Encryption: Turn It On Before You Need It
The encryption built into your laptop costs nothing. Its real failure points are the recovery key and the sleeping lid.
Field Guide to AI, Security and Cybercrime · Part 101OpinionField Guide to AI, Security and Cybercrime · Part 113
How AI Agents Turn Bad Sources Into Confident Actions
An agent does not just repeat misinformation; it converts it into actions and documents that carry your organisation's authority.
Field Guide to AI, Security and Cybercrime · Part 113OpinionField Guide to AI, Security and Cybercrime · Part 112
How to Check an AI System for Bias Before It Decides About People
Bias is found by testing outcomes across groups and examining the path from data to decision, not by reading a vendor's fairness statement.
Field Guide to AI, Security and Cybercrime · Part 112OpinionField Guide to AI, Security and Cybercrime · Part 108
Licence Plate Readers: What They Record and Who Can Look
The camera is sold as a way to find one car. It works by remembering every car, and the memory is where the harm lives.
Field Guide to AI, Security and Cybercrime · Part 108OpinionField Guide to AI, Security and Cybercrime · Part 131
MCP Authorization Attacks: Stolen OAuth Credentials, Tokens and Scopes
How malicious servers abuse OAuth discovery and token handling to steal agent identities.
Field Guide to AI, Security and Cybercrime · Part 131OpinionField Guide to AI, Security and Cybercrime · Part 115
Privacy in Public When Every Street Has a Camera
You cannot avoid being seen, but you can limit how easily scattered recordings are joined into a permanent record of you.
Field Guide to AI, Security and Cybercrime · Part 115OpinionField Guide to AI, Security and Cybercrime · Part 116
Proving Who You Are Online Without Handing Over Your Face
Authentication confirms you are the same person; identity proofing demands who you are. Most services need only the first, and passkeys do it best.
Field Guide to AI, Security and Cybercrime · Part 116OpinionField Guide to AI, Security and Cybercrime · Part 111
Recovering From Identity Theft: The Order That Matters
Creditors respond to paperwork, not distress. A methodical sequence of steps is your fastest path to resolution.
Field Guide to AI, Security and Cybercrime · Part 111OpinionField Guide to AI, Security and Cybercrime · Part 118
SIM Swap Attacks: How Someone Takes Your Phone Number
A criminal persuades your mobile operator to move your number to their SIM, then uses the text messages sent to it to hijack your digital life.
Field Guide to AI, Security and Cybercrime · Part 118OpinionField Guide to AI, Security and Cybercrime · Part 104
Someone Made a Deepfake of You: What to Do First
The first hours decide whether a fake video or cloned voice stays contained or spreads. Most of the right moves are dull, and they work.
Field Guide to AI, Security and Cybercrime · Part 104
Showing 24 of 196 publications