philodeon

7 ms·

31.
by philodeon 10mo ago
Very very incorrect. EDIT: Adding more to my post here because it would be hypocritical for you to complain: 1. I feel like given how I can make accurate predictions about Henry’s sphere of influence, that might gain me a little credibility
32.
by philodeon 10mo ago
At least in terms of the Bada55 paper, I think he writes in a fairly jocular style that sounds unprofessional unless you read his citations as well. You seem to object to his occasional jocularity and take it as prima facie evidence of him
33.
by philodeon 10mo ago
I didn’t see anything “batshit” in either the paper or the slides.
34.
by philodeon 11mo ago
There’s also a more approachable set of slides on the topic at https://cr.yp.to/talks/2025.11.14/slides-djb-20251114-safecu...
35.
by philodeon 11mo ago
https://bada55.cr.yp.to/bada55-20150927.pdf
36.
by philodeon 11mo ago
That article is pure horsecrap: https://eindhoven.cr.yp.to/false-statements-by-henry-de-vale...
37.
No Bounty: A Story of a Serious Privacy Leak in iOS(paradisefacade.com)
4 points by philodeon 11mo ago|0 comments
38.
by philodeon 1y ago
I thought one of the benefits of diversity and inclusion in tech was that it would lead to better software quality? When does that kick in?
39.
by philodeon 1y ago
I thought the whole point of DJB’s “cache timing attacks in AES” is that Rijndael is not particularly great.
40.
by philodeon 1y ago
“Module-LWE is not breakable within a Python script” —-Ptacek, 2025 “Apache chunked encoding is not exploitable” —- Dowd, 2002
41.
by philodeon 1y ago
When someone discovers the trick necessary to decrypt ML-KEM in an hour and publishes it in the unclassified sphere, I assume your response will be “hey, I may have been wrong yet again, but at least I wasn’t impudent!”
42.
by philodeon 1y ago
I fully agree Matthew Garrett is not a secret NSA propagandist. There is a much simpler explanation. In 2016, Isis Lovecruft was romantically involved with Jacob Appelbaum. Isis lost a coveted PhD student spot studying under Bernstein to…
43.
by philodeon 1y ago
You seem blind to the obvious corollary to that fact, which is if cryptosystems based on ring-LWE hardness have been worked on by giants for 30 years, then those same cryptosystems have been cryptanalyzed for 30 years, and a significant chu
44.
by philodeon 1y ago
Why anyone thinks that the tech sphere is yearning for another “moderation team” after the past decade is beyond me.
45.
by philodeon 1y ago
ML-KEM and SIKE were both candidates in the PQ competition which ML-KEM won. SIKE was considered such a strong contender that it was used in production TLS experiments at scale by Google and Cloudflare. (I guess you didn’t read past the se
46.
by philodeon 1y ago
According to the New York Times in 2013, based on Snowden documents, the NSA allocates $250 million every year for the actions you quoted. They call it the “SIGINT Enabling Project”. They are not running out of resources.
47.
by philodeon 1y ago
You are not allowed to have a moderate opinion on gender representation in tech, and you are not allowed to have photos of steak on your NixOS discussion forum profile: https://srid.ca/nixos-mod
48.
by philodeon 1y ago
And a member of the steering committee explained in the discussion thread that “undue interference” really means that the Moderation Team is completely autonomous and unaccountable, and not moderating the community according to the official
49.
by philodeon 1y ago
Yes, that is precisely my point. “ According to an intelligence budget document leaked by Mr. Snowden, the N.S.A. spends more than $250 million a year on its Sigint Enabling Project, which "actively engages the U.S. and foreign IT indu
50.
by philodeon 1y ago
When you turn off the bad cryptography, the product becomes unusable. The purpose of a system is what it does.
51.
by philodeon 1y ago
MIE is a combination of enhanced MTE (EMTE) and some highly-overdue software allocator improvements.
52.
by philodeon 1y ago
> In 2018, we were the first in the industry to deploy Pointer Authentication Codes (PAC) in the A12 Bionic chip, to protect code flow integrity in the presence of memory corruption. The strong success of this defensive mechanism in incr
53.
by philodeon 1y ago
DNSSEC most certainly does _not_ protect any data that an end user cares about.
54.
by philodeon 1y ago
One wonders how seriously this tribute should be taken given that the educational institution referenced has the acronym NUTS.
55.
by philodeon 1y ago
Lehrer performed it charmingly on Parkinson: https://youtu.be/R6qFG0uop9k
56.
by philodeon 1y ago
As sad as today is, the one ray of sunshine here is that Tom Lehrer’s obit was written so long ago (and saved for the day it would be needed), that no one updated it with the subsequent revelation that his work at the Atomic Energy Commissi
57.
by philodeon 1y ago
He gave a lovely little performance in the late 1990s to celebrate one of his fellow mathematicians: https://youtu.be/zxFCQplZgKI
58.
by philodeon 1y ago
You’ve never read the story of the Halifax Slasher, have you? https://en.wikipedia.org/wiki/Halifax_Slasher
59.
by philodeon 1y ago
Isn’t this how a court system works?
60.
by philodeon 1y ago
You can put Asahi Linux on them.

More ›