tomgag

7 ms·

31.
by tomgag 1y ago
Personal opinion: Bluesky is "fedi-washing". Better Mastodon or Nostr. https://gagliardoni.net/#20250818_battle_of_socials
32.
by tomgag 1y ago
Personal opinion: Bluesky is "fedi-washing". Better Mastodon or Nostr. https://gagliardoni.net/#20250818_battle_of_socials
33.
by tomgag 1y ago
I like to think I wrote a good analogy of what ChatControl/client-side scanning really is. They say "it's not a backdoor, it doesn't break E2E encryption", and they're right. > It's like asking to an al
34.
by tomgag 1y ago
Thank you for the detailed reply, your points make sense but many of these are, I think, too technical for the intended audience of my blog post, and do not change my overall impression of BlueSky. I will see if I manage to incorporate some
35.
by tomgag 1y ago
I didn't write this for the HN crowd, but here we go anyway: https://gagliardoni.net/#20250818_battle_of_socials Happy to correct any factual inaccuracies.
36.
by tomgag 1y ago
I'm Italian. On my side, I did what I could do: I emailed Italian politicians explaining why they should reject the proposal. A drop in the ocean, and far from impactful, but if it can change the odds even by an epsilon, why not? http
37.
by tomgag 1y ago
That's cool, didn't know that!
38.
by tomgag 1y ago
Interesting. Could something like this be done for Mastodon / ActivityPub?
39.
by tomgag 1y ago
The reasons you listed are exactly why the lack of factorization records should not be seen as a "critical black eye to this field", because they are not a relevant measure of progress. Again, think of the parallel with LLMs: it
40.
by tomgag 1y ago
I beg you to read the full story and to not extrapolate from the quote. Also, in the world of QC, right from its very roots, the ability of QC improved in mind boggling large steps every year. It's only that you cannot see it if you on
41.
by tomgag 1y ago
I guess I'll post it here as well. This is my personal take on the whole story: https://gagliardoni.net/#20250714_ludd_grandpas A relevant quote: "this is your daily reminder that "How large is the biggest nu
42.
by tomgag 1y ago
I, for one, would buy one. Make it small and I would buy 3.
43.
by tomgag 1y ago
Interesting idea, I also mentioned the low-background analogy back in 2024: https://gagliardoni.net/#ml_collapse_steel https://infosec.exchange/@tomgag/111815723861443432
44.
by tomgag 2y ago
Hey, this is pretty slick! I'm not into smart wearables myself, but if I change my mind (or if I have to recommend one to family or friends) I know where to look! Question: does either of the model have NFC capabilities, or is there an
45.
by tomgag 2y ago
22:04 Paris time: still "Service are back to normal to the majority of customers we continue to work so there is no impact for any customers". I guess I am in the "unlucky bunch" then. No POP/IMAP, slow SMTP, no acc
46.
by tomgag 2y ago
Yeah, same. EDIT: yes, it looks like it is not possible to disable "transfer lock". Shame on you Gandi, but you know no shame.
47.
by tomgag 2y ago
Can confirm, POP/SMTP has been down since tonight (EU). Oh well, I take this as a motivation to finally move away from them.
48.
by tomgag 2y ago
Roughly 50% chance of messing up with data in #3. There is the possibility of reducing a bit this chance at the cost of wasting more space by using error-correction, e.g. with RAID, if so desired. This is explained in the paper and in the F
49.
by tomgag 2y ago
Yes, but only if you have all three opened, i.e., you are in a "home alone scenario". Remember that Shufflecake volumes have a hierarchy, i.e. volume 1 is "less secret" than volume 2, which is "less secret" tha
50.
by tomgag 2y ago
You raise a good point, and we try our best to say that Shufflecake is not a toy, that users must be conscious, etc. I think what is missing is a proper user manual as a central source of documentation, we'll need to work on that. But
51.
by tomgag 2y ago
Yes, 100% this. And wait when we'll release a Shufflecake-powered, fully hidden multi-OS distro ;)
52.
by tomgag 2y ago
@chungy, replying to your: > Thanks, but it wasn't so much asking about storing more than you have at once, but as file systems are used, old unused space might still be occupying space in the Shufflecake scheme. Say you have that 1
53.
by tomgag 2y ago
Thanks for the question! Well, overcommitment is part of the plausible deniability design: basically we need that, whatever password secrecy level you provide, it looks like all the disk space is utilized, because if there is clearly unma
54.
by tomgag 2y ago
Oh, another thing. Just to be clear, the 15 password maximum is just an implementation choice to make our life easier, but we actually think it is a liability, and we are working to remove this limit completely . We do not think that anyon
55.
by tomgag 2y ago
Hey, Shufflecake co-author here, thanks for the questions. 1. Indeed! 2. Wow wow wow, hold on there :D there is a misunderstanding, the "Swiss Government" was never involved not even remotely. First of all, this project has roots
56.
by tomgag 2y ago
Wow, admin of the Shufflecake project here, super excited to see this on HN again! Feel free to AMA, Elia and I are busy right now working on an upcoming major release, we will give announcement and more details at the upcoming Swiss Crypto
57.
Shufflecake Research Paper Released(eprint.iacr.org)
2 points by tomgag 3y ago|1 comments
58.
by tomgag 3y ago
Hello HN, happy to announce that after a long embargo due to a conference submission, the full Shufflecake paper is now available open access on IACR's EPrint! ArXiv will follow soon. We are also proud to announce that the work has bee
59.
by tomgag 4y ago
Hello, thanks for your comment. You're right and we stress it in every disclaimer, website, blog post etc: Shuflecake is NOT production ready, do not use it for sensitive operations" etc. That said, we believe that Truecrypt and V
60.
Shufflecake: Plausible Deniability for Multiple Hidden Filesystems(research.kudelskisecurity.com)
3 points by tomgag 4y ago|3 comments

More ›