Blog
•
Thoughts about Volt Typhoon
What is Volt Typhoon? A cybersecurity expert explains the Chinese hackers targeting US critical infrastructure Richard Forno, University of Maryland, Bal…
Cybersecurity
Blog
•
New Paper on AI-Generated CSAM
Today, Lawfare published my paper on the law and policy implications of AI-generated child sex abuse material (CSAM), and there’s a podcast episode accompanying…
Blog
•
Future Cybersecurity: Hybrid Threats Require Balanced Preparation
Last month, I was appointed an Honorary International Professor at the Universidad Autonoma del Estado de Hidalgo (UAEH), one of Mexico's older universities…
Blog
•
EU Member States Still Cannot Agree About End-to-End Encryption
Recently, Wired reported on documents leaked in May from the Council of the European Union’s ongoing deliberations over the draft Child Sex Abuse Regulation. Th…
Blog
•
How 'Star Trek: Picard' informs us about cybersecurity
Lessons from ‘Star Trek: Picard’ – a cybersecurity expert explains how a sci-fi series illuminates today’s threats Richard Forno, University of Maryland, Balti…
Blog
•
The STOP CSAM Act: An Anti-Encryption Stalking Horse
Recently, I wrote for Lawfare about Sen. Dick Durbin (D-IL)’s new STOP CSAM Act bill, S.1199. The bill text is available here. There are a lot of moving parts i…
Blog
•
Thoughts on the Biden National Cybersecurity Strategy
What is the National Cybersecurity Strategy? A cybersecurity expert explains what it is and what the Biden administration has changed Richard Forno, University…
Blog
•
My Comment to the UK Government on Its Proposal to Ban “Bespoke,” “Sophisticated” Encrypted Phones
The UK Government is proposing to change the law to make it easier for them to prosecute those who sell or possess “sophisticated encrypted communications devic…
Blog
•
Some Thoughts About Apple’s New Advanced Data Protection Feature
Last week, Apple announced several new security features: the ability to authenticate contacts in iMessage (reminiscent of Signal’s verification feature), suppo…
Blog
•
New law journal article on the Computer Fraud and Abuse Act
I'm pleased to announce that my latest law journal article has just been published in the new issue of the Richmond Journal of Law and Technology: Shooting…
Blog
•
Regarding Twitter, Musk, and Trust
As a cybersecurity professional, I see plenty of risks that worry me as Twitter becomes a private company – but one in particular stands out more than any other…
Blog
•
Did Twitter ignore basic security measures? Let's see.
Did Twitter ignore basic security measures? A cybersecurity expert explains a whistleblower’s claims Richard Forno, University of Maryland, Baltimore County T…