Max Smeets
maxWSmeets@infosec.exchange
<p>Senior Researcher ETH Zurich, Director European Cyber Conflict Research Initiative</p><p>Author of No Shortcuts: Why States Struggle to Develop a Military Cyber-Force- shorturl.at/kMNZ9</p>
Posts
-
View post
It seems that toots are much less likely to go viral than tweets given platform design: 1. already much discussed: Mastodon timeline is chronological instead of curated 2. less discussed: Toots don&#39;t immediately show previous interactions (favs counts and comments) on your timeline 3. And doesn&#39;t allow boosting with additional commentary (yet)?
-
View post
Are you a professor at a European university able to supervise PhDs in the field of cyber conflict &amp;/or cyber security? The European Cyber Conflict Research Initiative (ECCRI) is creating a public database of all programs for prospective candidates. Please fill out this form if you’d like to be listed: https://forms.gle/X1xEJGNbqDFMcWSYA
-
View post
&#39;Deter, Disrupt, or Deceive: Assessing Cyber Conflict as an Intelligence Contest&#39; is now available for pre-order: http://press.georgetown.edu/book/georgetown/deter-disrupt-or-deceive
-
View post
On Thursday 24 Nov, I&#39;ll discuss the trade in zero-day exploits with the Committee of Inquiry investigating Pegasus and other spyware (PEGA Committee). Other invited experts include Thorsten Schröder, Ian Beer, and Mailyn Fidler. More info and live coverage here: https://www.europarl.europa.eu/news/en/press-room/20221118IPR55802/meps-discuss-technical-vulnerabilities-related-to-spyware-with-experts
-
View post
The European Cyber Conflict Research Initiative is delighted to announce it is now opening applications for the European Cybersecurity Fellowship. This year-long program attracts and develops highly talented young European professionals who are interested in accelerating their career in cybersecurity policy. The Fellowship will accept up to 12 fellows from March 1 2023 to February 29 2024. We are looking for people from a wide variety of backgrounds, including government, civil society, the...
-
View post
This year&#39;s application essay questions for the European Cybersecurity Fellowship include: -‘ We have over-fetishized the APT threat’ (Christopher Krebs). Discuss. - What is the best piece of writing ever published on the dynamics of cyber conflict? Why? - ‘In cyberspace there is no such thing as an absence of norms – we just haven’t identified the right ones.’ Discuss. - What are the never-changing dynamics of cyber conflict? Do they exist?
-
View post
@ridt - on deceptive ops and potential for misattribution: CIA ‘UMBRAGE’ database of hacking techniques from other groups is an interesting case study too. Although the code reuse here was supposedly done to save time - as reported by @kimzetter in 2017 https://theintercept.com/2017/03/08/wikileaks-files-show-the-cia-repurposing-foreign-hacking-code-to-save-time-not-to-frame-russia/
-
View post
My opening statement for the PEGA Committee public hearing on: ‘Trade in zero-day vulnerabilities’ held last week: Over the past years, zero-day exploits have been deployed by commercial surveillance companies in order to install their spyware on target devices. These zero-day exploits often only contribute to specific parts of multi-stage operations (ie. attack chains). Sometimes, they are combined with known exploits, also referred to as n-days. The level of sophistication can be incredib...
-
View post
The Cyber Partisans is a digital resistance movement from Belarus. This group has claimed responsibility for several major cyberattacks, including a high profile operation against the Belarusian railway system that reportedly halted Russian ground artillery and troop movement into Ukraine. I interviewed Yuliana Shemetovets, spokersperson of the Cyber Partisans, at Theater Neumarkt in Zurich. We talked about the group’s motives, targeting objectives, NFTs and more. The video is now online: htt...
-
View post
&quot;... traces found on computers are only sparse manifestations from the complex intricacies of the physical world, just like shadows formed by tangible objects&quot; Timo Steffens on attribution
-
View post
Really happy to see my article with Myriam Dunn Cavelty on &#39;Regulatory cybersecurity governance in the making: the formation of ENISA and its struggle for epistemic authority&#39; published in a special issue of the Journal of European Public Policy, edited by Andreas Kruck and Moritz Weiss! https://www.tandfonline.com/doi/full/10.1080/13501763.2023.2173274 Our abstract: Over the last decades, cybersecurity has become a top priority for the European Union (EU). As a contribution to...
-
View post
Excited to announce the release of Cyberspace and Instability, edited by Bobby Chesney, James Shires, and myself. It&#39;s entirely open access! Extremely proud to have worked together with such a great group of scholars for this edited volume. You can download the book here: https://edinburghuniversitypress.com/book-cyberspace-and-instability.html
-
View post
Good news: my book &#39;No Shortcuts&#39; is being sold at a healthy rate! Bad news: It&#39;s now out of stock in Europe. But a few copies still left on Amazon UK. Hopefully new hardback copies available next month. Paperback out this summer. https://www.amazon.co.uk/No-Shortcuts-Struggle-Military-Cyber-Force/dp/1787386872
-
View post
The book proofs have arrived. One step closer to bringing this project to life!