Marcel Böhme's paper asks why cybersecurity can never be solved, proposes vulnerability-guided hardening
mboehme_ · x · 2026-11-02
Security researcher Marcel Böhme published an arXiv paper (2402.01944) presenting the first theory of cybersecurity that explains what fundamentally prevents reliable statements about a software system's security.
- Despite decades of defensive innovation, even critical systems remain repeatedly vulnerable; offense and defense loop forever, and even provable security doesn't stop attackers finding flaws.
- Each argument is backed by demonstrations of how the corresponding challenge is routinely exploited despite credible assurances of no flaws.
- The paper proposes a philosophy of vulnerability-guided hardening to make meaningful progress under these constraints.
More from Safety
- Security researcher: offense is hard to automate, defending known vuln classes is easier — mboehme_ · 2026-11-02
- How to opt out of Meta, OpenAI, and Apple training AI on your data in the UK — HotMinuteUK · 2026-11-02
- AI safety researcher: AI companies entirely lack this kind of effective human oversight — davidmanheim · 2026-11-02
- offprompt: MIT-licensed MCP server hands agents API keys without ever exposing them — Vast_Ad_7338 · 2026-11-02
- Epoch AI: open-weight GLM 5.3 exploited the patch gap to hack 6 Firefox releases at ~$1,000 each — rohanpaul_ai · 2026-11-02
- CVSS 9.8 ingress-nginx flaw lets unauthenticated attackers get RCE and steal cluster Secrets — evilsocket · 2026-11-02