Matter's first post-quantum change protects device attestation with ML-DSA, but its operational handshake, CASE, still derives session keys from P-256 ECDH, so recorded traffic can be decrypted once a quantum computer exists. We quantify the cost of moving CASE to ML-KEM and post-quantum signatures over Thread, where f...
Coding agents read repositories and web pages that anyone can write, and then act with their user's authority. Prompt-injection defenses make it less likely that the model is steered but do not prevent it, so the system around the model must contain an agent that is already compromised. Many exploits against deployed c...
This work model a laboratory choosing among controlled access, a defender-first window, safeguarded open weights, and minimally restricted open weights and identifies the quantities a release review should estimate: actor-specific substitution times, marginal capability gains, deployment rates, defensive reach, newly e...
Daniel Commey· arXiv.org· 0 citations
We use cookies to run the site and, with your consent, for analytics and to show ads.
See our Cookie Policy.