Stopping the run at the model boundary disables an evaluator, auditor, or assessor because the tool phase never executes. In the router pattern, the model output drives tool selection and sequencing, so a terminal stop means no routing decision, no tool calls, and no evidence capture, with a stop record Read More
Skills extend AI assistants with new features. But when execution gets delegated to an agent with ambient authority (shell, network, filesystem access), you're looking at infrastructural risk. Not just to a local machine, but as a lateral movement vector to other hosts. Claude is mainstreaming. Non-technical users are Read More
If someone keeps valuable crypto at home and controls it themselves, anyone who gets the key or recovery phrase can move the money quickly. Without a bank in the middle. That is why such attacks can rely on threats or violence instead of hacking. The attacker does not need to Read More
In my book I gently touch upon a problem often framed as a technical story about algorithms and content feeds. The “information bubble” or "echo chamber" model suggests that most people are locked into agreeable content, which locks them from changing opinions and induces group animosity. Yet the Read More
Artificial intelligence (AI) will soon exert unprecedented influence over human beliefs. Not by understanding human psychology or personalising to individuals, but by generating massive volumes of factual-sounding claims. Perfect accuracy is not needed. The appearance of substantive information suffices. LLMs are the perfect tools for political persuasion. A brief conversation Read More
The recent judgment has the potential to remake the internet and websites as we know them in Europe (unless it's ignored, modified, or interpreted rationally). Let's drop the big question upfront: did the EU top court (Grand Chamber) just prohibited websites with user-generated content, or anonymous Read More
European Union is on a route to simplify regulations. Some measures in the past decade have been criticised as overbroad. European Commission plans to modify the General Data Protection Regulation. Some of the changes are great, and may limit existing lack of clarity and simply useless things, or at least Read More
European Union is on a route to simplify the notorious rule that is annoying every EU citizen. Namely, the ever present “consent popups”. You know them for sure as most people need to go through lots of clicks that are simply a waste of time. This analysis is based on Read More
European Union is on a route to simplify regulations. Some measures in the past decade have been criticised as overbroad. However, the rush risks going too far and incoherently. According to a leaked draft, the European Commission plans to modify the General Data Protection Regulation. This analysis relies on that Read More
AI-enabled browsers add an agentic layer across email, calendars, and connected apps. Or just allow mechanisation of a web browser via AI. Having been a routine user of web browser automation tools since 15+ years, I appreciate the new potential. However, it is important to note that the web platform, Read More
Quantum information processing and quantum technologies are in the spotlight. Quantum computing specifically, thanks to the reports of the Quantum Supremacy result. The field got a 2025 Nobel Prize and rightly so. The ongoing process will measurably transform technology, funding, to some degree even certain areas of policy in very Read More
There’s a steady trend in web browser threat landscape. It's about cryptocurrency wallet stealing when attackers are preparing malicious Firefox extensions that mimic real wallets to steal seed phrases. Seed phrases enable full access to a crypto wallet, allowing anyone who has them to restore, control, and Read More
The Model Context Protocol (MCP) is an open standard that enables large language models to interact with external tools and data sources. Unlike traditional API integrations, MCP provides a standardized interface for AI models to access specialized functionality without requiring custom implementations for each use case. MCP addresses the problem Read More
Online inference with large language models carries serious privacy risks that many users underestimate. Prompts—often containing passwords, emails, private thoughts, medical data, intimate details, and business data—are sent in plain text and processed by third-party servers. These prompts can be seen not only by the major providers but Read More
Qwen3, an open weight large language model (LLM) developed by Alibaba, introduced a feature that stands out: the ability to switch between reasoning-intensive “thinking” mode and lightweight “non-thinking” mode within a single model. In the thinking mode, the model generates an internal <think>...</think> block containing Read More
This may well be one of the greatest strategic and business U-turns of the century: backtracking on a project more than seven years in the making, and an attempt to reshape an entire web ecosystem and its funding model. Google’s recent decision to halt its plans to phase out Read More
Protecting personal data when using blockchain technology is tricky, may be full of surprises, and cumbersome. According to the European Data Protection Board opinion, which this assessment and advice is inspired with, the inherent characteristics of blockchain—like immutability or decentralisation—pose serious compliance issues with the General Data Protection Read More
A new proposal to reduce the granularity of the Accept-Language header aims to decrease web fingerprinting surface to improve user privacy and reduce risks. Problem Today, when we connect to a website, the browser sends an Accept-Languageheader listing all of our preferred languages — often including specific locales like en-US, fr-CA, Read More
Web browsing history powers helpful features like styling visited links differently, allowing users to see where they've been before. While this usability feature provides navigational benefits, it also introduces a privacy risk. The handling of visited links happened to be a silent backdoor of a kind, allowing malicious Read More
Ten years ago, I defended my Ph.D. thesis at the French INRIA (now: Institute for Research in Digital Science and Technology). It feels like the right time to reflect on how the privacy landscape has evolved since then. At that time, web privacy leaks and tracking were widespread. However, Read More
Pseudonymisation is a technical and organisational measure and a data protection measure under the GDPR. It is a risk-reduction measure that minimizes the likelihood and impact of data protection breaches. It allows for controlled re-identification through stored additional information (secret information). Unlike anonymisation, which irreversibly removes the ability to link Read More
The Supreme Court’s decision to uphold the Protecting Americans from Foreign Adversary Controlled Applications Act is a significant moment for both technology and geopolitics. Beginning January 19, 2025, TikTok is to be removed from U.S. app stores unless it completely severs its ties with its Chinese parent company, Read More
Meta considers a future where AI-generated bots, avatars or artificial accounts seamlessly integrate into its platforms, filling networks with artificial agents that mimic human users. I must repeat: according to the (so far vague) remarks, these bots are supposedly to interact with people, generate content, and have profiles indistinguishable from Read More
The year began with more positive tones than 2023, setting me on a trajectory to work on a second book, which I completed this year. Book I published a second book: Propaganda: From Disinformation and Influence to Operations and Information Warfare (you may get it in many places, for example Read More
While I once hoped 2017 would be the year of privacy, 2024 closes on a troubling note, a likely decrease in privacy standards across the web. I was surprised by the recent Information Commissioner’s Office post, which criticized Google’s decision to introduce device fingerprinting for advertising purposes from Read More