"It is obvious that, in all these instances, the more constantly the persons to be inspected are under the eyes of the persons who should inspect them, the more perfectly will the purpose of the establishment have been attained. Ideal perfection, if that were the object, would require that each person should actually be in that predicament, during every instant of time. This being impossible, the next thing to be wished for is, that, at every instant, seeing reason to believe as much, and not being able to satisfy himself to the contrary, he should conceive himself to be so."

Last week was wild, this week comparatively mild (or at least, the security story of the week hasn't happened yet). Hallowe'en approaches.

Security, General:

When AI Guardrails Expose Vulnerabilities from CrowdStrike – would you enjoy some sidechannel with your vulnerability detection? I definitely would! https://www.crowdstrike.com/en-us/blog/when-ai-guardrails-expose-vulnerabilities/

Security, Apple Platforms:

Apple fixes all the bugs, including a CoreGraphics doozy that may have been under active exploitation in older OSes: https://support.apple.com/en-us/100100

Interesting Paper:

Nuance warfare and the right to remain unread in the age of smart glasses, by Kenji Yamada https://link.springer.com/article/10.1007/s44564-026-00031-0

Interesting Tool:

ponytail-sec: The smallest change that ruins an attacker's day. https://github.com/andypitcher/ponytail-sec

Apple Platforms Security Concept of the Week:

Backing up a file-based Keychain in macOS 26.4 and later: https://developer.apple.com/documentation/technotes/tn3137-on-mac-keychains#Backing-up-a-file-based-keychain