Friday Squid Blogging: Squid Overfishing in the South Pacific
2026-04-12T07:23:41Z•bda5c2946f9ca79a6708e5b7716dd88c2fda6ec7747f1d6ef31d6eb420a0e4dc
ai-securitycloud-securitycrypto-agilitydocumentation-deficitencryption-keysend-to-end-encryptiongovernment-evaluationhong-konginstant-softwarelawful-accesslegal-riskmalicious-packagemicrosoftpost-quantumprivacypth-executionpypipythonsupply-chainsurveillancewebinar-recordingzoom
What happened
Collection of Bruce Schneier blog posts (Apr 2026) covering multiple security and privacy topics: a Python supply-chain compromise in the PyPI package litellm (version 1.82.8) where a malicious .pth file executes on interpreter startup; criticism of Microsoft’s cloud security and government evaluators’ inability to assess its security posture due to poor documentation; concerns about legal and privacy risks from new Hong Kong enforcement allowing police to compel disclosure of encryption keys/passwords; legal pressure on end-to-end encryption following a New Mexico ruling against Meta; Webinar
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- schneier_blog
- Record identifier
- bda5c2946f9ca79a6708e5b7716dd88c2fda6ec7747f1d6ef31d6eb420a0e4dc
- Enrichment time
- 2026-04-12T07:23:41Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.