I am a software engineer and a health nut with big dreams and deep affection for cryptography and computer security
Delaware, USA
Joined May 2014
- Tweets625
- Following158
- Followers56
- Likes470
In contrast to the threat quantum computing poses to current public-key algorithms, most current symmetric cryptographic algorithms and hash functions are considered to be relatively secure against attacks by quantum computers. pqcrypto.org/www.springer.co…
Facebook data breach: 87 million user profile details compromised.
Under Armour data breach: 150 million user records hacked from the MyFitnessPal app.
Orbitz/Expedia data breach: 880,000 users' personal information stolen itbusinessnet.com/article/Th…
We should not let this happen. Easier file security tools should be developed so sensitive health care information can be protected. healthitsecurity.com/news/mo…
The hysteria continues with PGP’s EFail vulnerabilities. The issue gets complicated when more exploits target specific client vulnerabilities. Because the OpenPGP standard is vague enough the client implementations could only do it wrong. gizmodo.com/new-pgp-encrypti…
The reality is that Security is hard. Even after thousand of eyes have looked into the OpenPGP spec and many years of adoption and evolution of the protocol have passed, an attack with this magnitude is found. It’s time to re-imagine Secure e-mail. eff.org/deeplinks/2018/05/no…
Russia’s decision to block Telegram over the dispute of encryption keys is a move in the wrong direction for security and privacy. Governments are getting more aggressive against encryption technologies they can’t surveil. What’s the alternative? gizmodo.com/russia-orders-is…
Stan retweeted
This pretty much sums up RSA. teapawt.net/hackerfantastic/status…
RSA leaked all the attendees personal details via unsecured public facing API's using hard coded credentials in a mobile application. Contact @svblxyz for further details. #rsac2018 @RSAConference 🤦♂️ teapawt.net/svblxyz/status/9871343…
Stan retweeted
I know of at least two vulnerabilities in Keeper Security. Researchers are so intimidated by that company’s legal threats that they won’t publish or even disclose to them. Don’t use their products.
An improvement over the protection of private keys using threshold cryptography where the functions (i.e signatures or decryption) are distributed so that a predetermined number of parties must cooperate in order to correctly perform the operations.
citeseerx.ist.psu.edu/viewdo…
An interesting take on globally unique identifiers that have intrinsic social values. The social aspect of unique mnemonics and usernames precludes many systems to identify users correctly based on relative names. jens.mooseyard.com/2007/12/0…
The Risks of Key Recovery Key Escrow and Trusted Third Party Encryption
schneier.com/academic/paperf…
Google scares me. It is tracking and recording everything I do for profit. It released the Activity Recognition API? catchnews.com/tech-news/goog…
Signal released a stand-alone desktop app. Now they need to get a tablet app for complete functionality. signal.org/blog/standalone-s…
Infineon, the leading security chip producer, has a devastating flaw triggered by the use of an old crypto library. arstechnica.com/information-…
A new research shows Java’s challenges in writing secure apps: crappy docs, complex APIs and bad SO advice. theregister.co.uk/2017/09/29…
Russia is becoming extremely anti-encryption. I wouldn’t trust their software anymore. It is a shame. rferl.org/a/telegram-durov-r…
Is your DNS leaking when using OpenVPN? Follow these tips to prevent leakage. dnsleaktest.com/how-to-fix-a…
Great write up on side channel attacks on Cryptography and timing attacks in specific. bearssl.org/constanttime.htm…
Improved speed for AES-GCM encryption in Firefox! blog.mozilla.org/security/20…