# Security and Privacy Published articles for Security and Privacy. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## DP-Auditorium: A flexible library for auditing differential privacy DevFeed: [DP-Auditorium: A flexible library for auditing differential privacy]() Original publisher: [Read original article]() Author: Google AI (noreply@blogger.com) Published: 2024-02-13T22:11:00Z Content type: article Language: en Sources: [Google Research]() Topics: [Library](), [Testing](), [Open Source](), [Python](), [Tool]() Tags: [algorithms](), [data-protection](), [differential-privacy](), [library](), [open-source](), [privacy](), [python](), [research](), [responsible-ai](), [security-and-privacy](), [testing]() ### AI overview Google Research introduces DP-Auditorium, an open source Python library that audits differential privacy guarantees using black-box access to mechanisms. It includes testing algorithms for Rényi, pure, and approximate differential privacy and can identify guarantee violations and suggest suitable tests for particular bugs. ### Source excerpt Posted by Mónica Ribero Díaz, Research Scientist, Google Research Differential privacy (DP) is a property of randomized mechanisms that limit the influence of any individual user's information while processing and analyzing data. DP offers a robust solution to address growing concerns about data protection, enabling technologies across industries and government applications (e.g., the US census) without compromising individual user identities. As its adoption increases, it's important to identify the potential risks of developing mechanisms with faulty implementations. Researchers have recently found errors in the mathematical proofs of private mechanisms, and their implementations. For example, researchers compared six sparse vector technique (SVT) variations and found that only two of the six actually met the asserted privacy guarantee. Even when mathematical proofs are correct, the code implementing the mechanism is vulnerable to human error. However, practical and efficient DP auditing is challenging primarily due to the inherent randomness of the mechanisms and the probabilistic nature of the tested guarantees. In addition, a range of guarantee types exist, (e.g., pure DP, approximate DP, Rényi DP, and concentrated DP), and this diversity contributes to the complexity of formulating the auditing problem. Further, debugging mathematical proofs and code bases is an intractable task given the volume of proposed mechanisms. While ad hoc testing techniques exist under specific assumptions of mechanisms, few efforts have been made to develop an extensible tool for testing DP mechanisms. To that end, in "DP-Auditorium: A Large Scale Library for Auditing Differential Privacy", we introduce an open source library for auditing DP guarantees with only black-box access to a mechanism (i.e., without any knowledge of the mechanism's internal properties). DP-Auditorium is implemented in Python and provides a flexible interface that allows contributions to continuously improve ## Usable Security and Privacy for Engineers DevFeed: [Usable Security and Privacy for Engineers]() Original publisher: [Read original article]() Author: Adam Published: 2023-02-09T00:00:00Z Content type: opinion Language: en Sources: [Shostack & Friends Blog]() Topics: [Security & Privacy](), [Security]() Tags: [article](), [privacy](), [security](), [security-and-privacy]() ### AI overview A blog post highlights a special issue of IEEE Security & Privacy on usable security and privacy for security and privacy workers, and notes the author's article about how fast and cheap security tools influence adoption. ### Source excerpt The new IEEE S+P is all about usable security. ## SiriSpy - iOS bug allowed apps to eavesdrop on your conversations with Siri DevFeed: [SiriSpy - iOS bug allowed apps to eavesdrop on your conversations with Siri]() Original publisher: [Read original article]() Published: 2022-10-26T16:00:00Z Content type: article Language: en Sources: [Rambo Codes]() Topics: [iOS](), [bug](), [Security](), [sensitive data](), [Reverse Engineering]() Tags: [bluetooth](), [bug](), [ios](), [reverse-engineering](), [security](), [security-and-privacy](), [sensitive-data]() ### AI overview The article describes an iOS bug that allowed apps with Bluetooth access to record conversations with Siri and audio from keyboard dictation when users wore AirPods or Beats headsets. Recording could occur without microphone permission and without leaving a listening trace. ### Source excerpt Gui Rambo writes about his coding and reverse engineering adventures. ## Threat Model Thursday: Games DevFeed: [Threat Model Thursday: Games]() Original publisher: [Read original article]() Author: Adam Published: 2020-02-06T00:00:00Z Content type: opinion Language: en Sources: [Shostack & Friends Blog]() Topics: [Security](), [Application Security]() Tags: [appsec](), [games](), [security-and-privacy]() ### AI overview A Threat Model Thursday post announces transcriptions of a talk about using card gaming to help teams model security and privacy threats. It links to parts one and two and notes that part three will be posted later. ### Source excerpt For reasons I can't quite talk about yet, this has been a super busy time, and I look forward to sharing the exciting developments that have kept me occupied. ## (Some) iPhone Privacy Settings DevFeed: [(Some) iPhone Privacy Settings]() Original publisher: [Read original article]() Published: 2018-02-02T02:36:48Z Content type: opinion Language: en Sources: [Signs of Triviality]() Topics: [iphone](), [Security]() Tags: [iphone](), [personal](), [privacy](), [security](), [security-and-privacy](), [settings]() ### AI overview A personal overview of iPhone settings relevant to security and privacy. ### Source excerpt A quick rundown of my personal iPhone settings as far as they're relevant to security and privacy. ## (Some) Browser Privacy Settings DevFeed: [(Some) Browser Privacy Settings]() Original publisher: [Read original article]() Published: 2018-01-27T19:10:28Z Content type: article Language: en Sources: [Signs of Triviality]() Topics: [browser](), [Security]() Tags: [browser](), [highlighting](), [personal](), [privacy](), [security](), [security-and-privacy](), [settings](), [setup]() ### AI overview An overview of the author's personal browser setup, focusing on settings relevant to security and privacy. ### Source excerpt A quick rundown of my personal browser setup, highlighting the security and privacy relevant settings. ## Information Security and Privacy News Quiz Materials for Twitter Hackweek DevFeed: [Information Security and Privacy News Quiz Materials for Twitter Hackweek]() Original publisher: [Read original article]() Published: 2014-01-11T19:50:55Z Content type: article Language: en Sources: [Signs of Triviality]() Topics: [Security](), [X (Twitter)]() Tags: [information](), [information-security](), [news](), [privacy](), [security-and-privacy](), [twitter]() ### AI overview Materials, stories, and links for a variation of the NPR News Quiz focused on information security and privacy news, created for Twitter's quarterly Hackweek. ### Source excerpt For this quarter's Hackweek at Twitter, I put together a variation of the NPR News Quiz with a focus on information security and privacy news. These are the materials, stories, and links.