There is significant consensus about the meaning of "security by design," but less on the definition and utility of "security by default." 

U.S. public policy can help facilitate market adoption of a relatively new, efficient, and safe programming language called Rust.

Policymakers must prioritize decentralizing decision-making power in industries before true technological decentralization can occur.

Classic arguments for AI risk assume that capable, goal-seeking systems will naturally attempt to improve themselves, but a closer look at the operative incentives reveals a more complicated story.

Insurers can bring unique evidence and legal strategies to software liability cases if the regime creates a path for subrogation.

A private certfication model, leveraging best-in-class cybersecurity assessment and audit practices, could be bolstered by public auditors and reinforced by downstream litigation models with relatively l...

NIST’s latest forays in risk management frameworks disavow concrete metrics or outcomes, and solicit voluntary participation instead of providing stable mandates.

Computer-generated child sex abuse imagery poses significant challenges to law enforcement, including constitutional limits on criminal prosecutions.