home.social

#cryptographic — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #cryptographic, aggregated by home.social.

  1. 🎉 Wow, who knew #Kubernetes needed another layer of complexity? Enter #Flox, where you can now enjoy the thrill of pulling hash-pinned packages and living in fear of #cryptographic #hashes, all while pretending your deployments are suddenly faster. 🚀 Because nothing says "cutting-edge" like making your #DevOps life an even bigger nightmare. 😜
    flox.dev/kubernetes/ #complexity #HackerNews #ngated

  2. 🎉 Wow, who knew #Kubernetes needed another layer of complexity? Enter #Flox, where you can now enjoy the thrill of pulling hash-pinned packages and living in fear of #cryptographic #hashes, all while pretending your deployments are suddenly faster. 🚀 Because nothing says "cutting-edge" like making your #DevOps life an even bigger nightmare. 😜
    flox.dev/kubernetes/ #complexity #HackerNews #ngated

  3. 🎉 Wow, who knew #Kubernetes needed another layer of complexity? Enter #Flox, where you can now enjoy the thrill of pulling hash-pinned packages and living in fear of #cryptographic #hashes, all while pretending your deployments are suddenly faster. 🚀 Because nothing says "cutting-edge" like making your #DevOps life an even bigger nightmare. 😜
    flox.dev/kubernetes/ #complexity #HackerNews #ngated

  4. 🎉 Wow, who knew #Kubernetes needed another layer of complexity? Enter #Flox, where you can now enjoy the thrill of pulling hash-pinned packages and living in fear of #cryptographic #hashes, all while pretending your deployments are suddenly faster. 🚀 Because nothing says "cutting-edge" like making your #DevOps life an even bigger nightmare. 😜
    flox.dev/kubernetes/ #complexity #HackerNews #ngated

  5. @berniethewordsmith The main way to respect is to avoid , end-to-end encrypted content at scale. Focus on:
    - and opt-in tools for local scanning.

    - checks only for data that’s already leaving the private domain.

    - that verify matches without exposing the rest of users’ data.

  6. @berniethewordsmith The main way to respect #privacy is to avoid #scanning #private, end-to-end encrypted content at scale. Focus on:
    - #Voluntary and opt-in tools for local scanning.

    - #Serverside checks only for data that’s already leaving the private domain.

    - #Cryptographic #protocols that verify matches without exposing the rest of users’ data.

  7. @berniethewordsmith The main way to respect #privacy is to avoid #scanning #private, end-to-end encrypted content at scale. Focus on:
    - #Voluntary and opt-in tools for local scanning.

    - #Serverside checks only for data that’s already leaving the private domain.

    - #Cryptographic #protocols that verify matches without exposing the rest of users’ data.

  8. @berniethewordsmith The main way to respect #privacy is to avoid #scanning #private, end-to-end encrypted content at scale. Focus on:
    - #Voluntary and opt-in tools for local scanning.

    - #Serverside checks only for data that’s already leaving the private domain.

    - #Cryptographic #protocols that verify matches without exposing the rest of users’ data.

  9. 🚀✨ Behold, a *groundbreaking* innovation: a "fast" #GUID #generator for Go! Because clearly, generating #random #numbers wasn't #fast enough without #cryptographic #safety. 😅 But hey, who needs actual #software #development when you can fiddle with GUIDs and call it a day! 🔒🎉
    github.com/sdrapkin/guid #groundbreaking #innovation #Go #HackerNews #ngated

  10. 🚀✨ Behold, a *groundbreaking* innovation: a "fast" #GUID #generator for Go! Because clearly, generating #random #numbers wasn't #fast enough without #cryptographic #safety. 😅 But hey, who needs actual #software #development when you can fiddle with GUIDs and call it a day! 🔒🎉
    github.com/sdrapkin/guid #groundbreaking #innovation #Go #HackerNews #ngated

  11. 🚀✨ Behold, a *groundbreaking* innovation: a "fast" #GUID #generator for Go! Because clearly, generating #random #numbers wasn't #fast enough without #cryptographic #safety. 😅 But hey, who needs actual #software #development when you can fiddle with GUIDs and call it a day! 🔒🎉
    github.com/sdrapkin/guid #groundbreaking #innovation #Go #HackerNews #ngated

  12. 🚀✨ Behold, a *groundbreaking* innovation: a "fast" #GUID #generator for Go! Because clearly, generating #random #numbers wasn't #fast enough without #cryptographic #safety. 😅 But hey, who needs actual #software #development when you can fiddle with GUIDs and call it a day! 🔒🎉
    github.com/sdrapkin/guid #groundbreaking #innovation #Go #HackerNews #ngated

  13. Did you know that #GNU/ #FSF has its own #darknet application and protocol stack?

    What is #GNUnet?

    GNUnet is an
    #alternative #network stack for building #secure, #decentralized and #privacy-preserving #distributed applications. Our goal is to replace the old insecure Internet protocol stack. Starting from an application for secure #publication of #files, it has grown to include all kinds of basic protocol components and applications towards the creation of a GNU internet.

    Today, the actual use and thus the social requirements for a global network differs widely from those goals of 1970. While the Internet remains suitable for military use, where the network equipment is operated by a command hierarchy and when necessary isolated from the rest of the world, the situation is less tenable for civil society.

    Due to fundamental Internet design choices, Internet traffic can be misdirected, intercepted, censored and manipulated by hostile routers on the network. And indeed, the modern Internet has evolved exactly to the point where, as Matthew Green put it, "the network is hostile".

    We believe liberal societies need a
    #network #architecture that uses the #anti-authoritarian #decentralized #peer-to-peer paradigm and #privacy-preserving #cryptographic #protocols. The goal of the GNUnet project is to provide a Free Software realization of this ideal.
    https://www.gnunet.org/en/index.html

  14. Did you know that #GNU/ #FSF has its own #darknet application and protocol stack?

    What is #GNUnet?

    GNUnet is an
    #alternative #network stack for building #secure, #decentralized and #privacy-preserving #distributed applications. Our goal is to replace the old insecure Internet protocol stack. Starting from an application for secure #publication of #files, it has grown to include all kinds of basic protocol components and applications towards the creation of a GNU internet.

    Today, the actual use and thus the social requirements for a global network differs widely from those goals of 1970. While the Internet remains suitable for military use, where the network equipment is operated by a command hierarchy and when necessary isolated from the rest of the world, the situation is less tenable for civil society.

    Due to fundamental Internet design choices, Internet traffic can be misdirected, intercepted, censored and manipulated by hostile routers on the network. And indeed, the modern Internet has evolved exactly to the point where, as Matthew Green put it, "the network is hostile".

    We believe liberal societies need a
    #network #architecture that uses the #anti-authoritarian #decentralized #peer-to-peer paradigm and #privacy-preserving #cryptographic #protocols. The goal of the GNUnet project is to provide a Free Software realization of this ideal.
    https://www.gnunet.org/en/index.html

  15. Did you know that #GNU/ #FSF has its own #darknet application and protocol stack?

    What is #GNUnet?

    GNUnet is an
    #alternative #network stack for building #secure, #decentralized and #privacy-preserving #distributed applications. Our goal is to replace the old insecure Internet protocol stack. Starting from an application for secure #publication of #files, it has grown to include all kinds of basic protocol components and applications towards the creation of a GNU internet.

    Today, the actual use and thus the social requirements for a global network differs widely from those goals of 1970. While the Internet remains suitable for military use, where the network equipment is operated by a command hierarchy and when necessary isolated from the rest of the world, the situation is less tenable for civil society.

    Due to fundamental Internet design choices, Internet traffic can be misdirected, intercepted, censored and manipulated by hostile routers on the network. And indeed, the modern Internet has evolved exactly to the point where, as Matthew Green put it, "the network is hostile".

    We believe liberal societies need a
    #network #architecture that uses the #anti-authoritarian #decentralized #peer-to-peer paradigm and #privacy-preserving #cryptographic #protocols. The goal of the GNUnet project is to provide a Free Software realization of this ideal.
    https://www.gnunet.org/en/index.html

  16. Did you know that #GNU/ #FSF has its own #darknet application and protocol stack?

    What is #GNUnet?

    GNUnet is an
    #alternative #network stack for building #secure, #decentralized and #privacy-preserving #distributed applications. Our goal is to replace the old insecure Internet protocol stack. Starting from an application for secure #publication of #files, it has grown to include all kinds of basic protocol components and applications towards the creation of a GNU internet.

    Today, the actual use and thus the social requirements for a global network differs widely from those goals of 1970. While the Internet remains suitable for military use, where the network equipment is operated by a command hierarchy and when necessary isolated from the rest of the world, the situation is less tenable for civil society.

    Due to fundamental Internet design choices, Internet traffic can be misdirected, intercepted, censored and manipulated by hostile routers on the network. And indeed, the modern Internet has evolved exactly to the point where, as Matthew Green put it, "the network is hostile".

    We believe liberal societies need a
    #network #architecture that uses the #anti-authoritarian #decentralized #peer-to-peer paradigm and #privacy-preserving #cryptographic #protocols. The goal of the GNUnet project is to provide a Free Software realization of this ideal.
    https://www.gnunet.org/en/index.html

  17. 𝗗𝘆𝗻𝗲 💜 𝗦𝗽𝗵𝗶𝗻𝘅

    SPHINX is a simple, elegant, & unconditionally secure zero-trust password manager. It stores a random numbers, not your password, ensuring the server knows nothing. Free, offline-bruteforce resistant, self-hostable, and extensible.

    Built on a well-studied #cryptographic algorithm by respected experts, SPHINX brings password management into the 21st century.

    𝗜𝗻 𝗳𝗮𝗰𝘁 𝘄𝗲 𝗹𝗼𝘃𝗲 𝗶𝘁 𝘀𝗼 𝗺𝘂𝗰𝗵 𝘁𝗵𝗮𝘁 𝘄𝗲 𝗮𝗿𝗲 𝗵𝗼𝘀𝘁𝗶𝗻𝗴 𝗮 𝗽𝘂𝗯𝗹𝗶𝗰 𝘀𝗲𝗿𝘃𝗲𝗿!

    🔗 sphinx.pm/servers.html

    #PasswordSecurity

  18. But cryptography is hard. Until recently, institutions and individuals who need to run #cryptographic operations had to rely on specialists to review the code that their applications is running. Cryptography can protect our privacy and authenticate sources of important information. For #cryptography to work for the people, the people need to understand it.

  19. The #chatmail #fosdem talk from @compl4xx is public. It goes into topics such as

    - why chatmail servers?
    - how to setup a server with your child
    - (avoiding) spam filtering
    - metadata and guaranteed end to end encryption in #deltachat
    - #cryptographic #interoperability for email message routing

    Thanks to attendees for the great energy even if was the last talk on the day and also for questions and conversations afterwards!

    ftp.fau.de/fosdem/2025/k4601/f

  20. → Chinese researchers break #RSA encryption with a #quantum computer
    csoonline.com/article/3562701/

    “In a potentially alarming development for global #cybersecurity, Chinese researchers have unveiled a method […] to #crack classic #encryption, potentially accelerating the timeline for when quantum computers could pose a real #threat to widely used #cryptographic systems”

    “data being encrypted today could be at risk if adversaries are stealing it with the intention of decrypting it in the future”

  21. @Juro With #single-#use #cryptographic #hashes, we could still enable somewhat strong #anonymity together with strong human id #verification.

    Learning from India’s Aadhar system, it is clear that a single #token isn’t good enough.

    Perhaps something similar to blockchain, where you can mine some tokens that identify you. And you can throw away like wallets to escape tracking when you need to.

  22. Scientists in #China use #quantum computers to crack military-grade #encryption — quantum attack poses a "real and substantial threat" to #RSA and #AES. According to a report published by the SCMP, the researchers utilized a #DWave #quantumcomputer to mount the first successful quantum attack on widely used #cryptographic algorithms.
    tomshardware.com/tech-industry

  23. Does anyone have suggestions that can do #cryptographic signature verification of streaming data (as in a pipe)? The problem with #gpg in this case is that it will emit all the data out the pipe, only indicating with an exit code if the signature was good - at which point most of the data may have been processed. #SequoiaPGP is slightly better, withholding the last 25MB until things are fully verified.

    I suspect I need something that signs blocks of the input. Does it exist? #askFedi

  24. #PuTTY #SSH client flaw allows recovery of #cryptographic #privatekeys
    The vulnerability (CVE-2024-31497) was discovered by Fabian Bäumer and Marcus Brinkmann of the Ruhr University Bochum and is caused by how PuTTY generates #ECDSA nonces (temporary unique cryptographic numbers) for the NIST P-521 curve used for SSH authentication. The main repercussion of recovering the private key is that it allows unauthorized access to SSH servers or sign commits as the developer.
    bleepingcomputer.com/news/secu

  25. #PuTTY #SSH client flaw allows recovery of #cryptographic #privatekeys
    The vulnerability (CVE-2024-31497) was discovered by Fabian Bäumer and Marcus Brinkmann of the Ruhr University Bochum and is caused by how PuTTY generates #ECDSA nonces (temporary unique cryptographic numbers) for the NIST P-521 curve used for SSH authentication. The main repercussion of recovering the private key is that it allows unauthorized access to SSH servers or sign commits as the developer.
    bleepingcomputer.com/news/secu

  26. client flaw allows recovery of
    The vulnerability (CVE-2024-31497) was discovered by Fabian Bäumer and Marcus Brinkmann of the Ruhr University Bochum and is caused by how PuTTY generates nonces (temporary unique cryptographic numbers) for the NIST P-521 curve used for SSH authentication. The main repercussion of recovering the private key is that it allows unauthorized access to SSH servers or sign commits as the developer.
    bleepingcomputer.com/news/secu

  27. #PuTTY #SSH client flaw allows recovery of #cryptographic #privatekeys
    The vulnerability (CVE-2024-31497) was discovered by Fabian Bäumer and Marcus Brinkmann of the Ruhr University Bochum and is caused by how PuTTY generates #ECDSA nonces (temporary unique cryptographic numbers) for the NIST P-521 curve used for SSH authentication. The main repercussion of recovering the private key is that it allows unauthorized access to SSH servers or sign commits as the developer.
    bleepingcomputer.com/news/secu

  28. #PuTTY #SSH client flaw allows recovery of #cryptographic #privatekeys
    The vulnerability (CVE-2024-31497) was discovered by Fabian Bäumer and Marcus Brinkmann of the Ruhr University Bochum and is caused by how PuTTY generates #ECDSA nonces (temporary unique cryptographic numbers) for the NIST P-521 curve used for SSH authentication. The main repercussion of recovering the private key is that it allows unauthorized access to SSH servers or sign commits as the developer.
    bleepingcomputer.com/news/secu

  29. #YubiKeys Are a #Security Gold Standard—but They Can Be Cloned

    Security researchers have discovered a #cryptographic flaw that leaves the #YubiKey 5 vulnerable to attack.
    #privacy

    wired.com/story/yubikey-vulner

  30. @jpl - Good points, but specifically your last point is indeed rather concerning. Thankfully, there is RADIUS over #TLS, which is probably anyway a good idea. Perhaps this will be an incentive to prioritize the deployment of RADIUS over TLS, which enforces modern #cryptographic #security guarantees.

  31. #Cryptographic #Research 🔐

    • Circuit complexity
    • Elliptic curve cryptography
    • Lightweight cryptography
    • Pairing-based cryptography
    • Post-quantum cryptography
    • Privacy-enhancing cryptography

  32. invites you to join co-located event "Logos Assembly Brno" with Logos core contributor Vaclav Pavlin. Join the discussion topics technical and philosophical – from the ethos of the to the latest in research – in relaxed surroundings with food, drinks, and stimulating discussions.

    📍Students Club, @FIT_VUT
    🗓️ June 13, 6:00PM

    👆Registration is required: pretalx.com/devconf-cz-2024/ta

  33. #PuTTY #SSH client flaw allows recovery of #cryptographic #private keys

    bleepingcomputer.com/news/secu

    > A vulnerability tracked as CVE-2024-31497 in PuTTY 0.68 through 0.80 could potentially allow attackers with access to 60 cryptographic signatures to recover the private key used for their generation.

  34. The important role #OpenSSL plays in securing the Internet has never been matched by the financial resources devoted to maintaining it.
    The open source #cryptographic #software library secures hundreds of thousands of Web servers and many products sold by multi-billion-dollar companies,
    but it operates on a shoestring budget.
    OpenSSL Software Foundation President Steve Marquess wrote in a blog post last week that OpenSSL typically receives about $2,000 in donations a year
    and has just one employee who works full time on the open source code.

    Given that, perhaps we shouldn’t be surprised by the existence of #Heartbleed, a security flaw in OpenSSL that can expose user passwords and the private encryption keys needed to protect websites.

    OpenSSL’s bare-bones operations are in stark contrast to some other open source projects that receive sponsorship from corporations relying on their code.
    Chief among them is probably the #Linux operating system #kernel, which has a foundation with multiple employees and funding from HP, IBM, Red Hat, Intel, Oracle, Google, Cisco, and many other companies.
    Workers at some of these firms spend large amounts of their employers’ time writing code for the Linux kernel, benefiting everyone who uses it.
    That’s never been the case with OpenSSL, but the Linux Foundation wants to change that.
    ⭐️The foundation today is announcing a three-year initiative with at least $3.9 million to help under-funded open source projects⭐️
    —with OpenSSL coming first.
    Amazon Web Services, Cisco, Dell, Facebook, Fujitsu, Google, IBM, Intel, Microsoft, NetApp, Qualcomm, Rackspace, and VMware have all pledged to commit 💥at least $100,000 a year for at least three years💥 to the “#Core #Infrastructure #Initiative,” Linux Foundation Executive Director Jim Zemlin told Ars.
    To be clear, the money will go to multiple open source projects
    —OpenSSL will get a portion of the funding but likely nowhere close to the entire $3.9 million.
    The initiative will identify important open source projects that need help in addition to OpenSSL.

    arstechnica.com/information-te

  35. "Microsoft says hackers somehow stole a cryptographic key, perhaps from its own network, that let them forge user identities and slip past cloud defenses." #microsoft #cryptographic #masterkey #hackers #cloud
    wired.com/story/microsoft-clou