Viewing profile — spr-alex

The last 3-4 years have had tax obstacles that have motivated funded models over bootstrapped businesses: 1) the jobs act introduced a toxic R&D code from 2022-2025 2) tariffs with…

These are serious security researchers and this is almost certainly a widespread vulnerability affecting mainline openwrt.

how can i upvote this twice?

this is not an ocassional bug this is still the system design today. privacy gateways upstream of big tech are the way to go on this because privacy isn't their profit center

Adding to your comment a similar letter was published as recently as September 2025 https://support.apple.com/en-us/122234 "we have never built a backdoor or master key to any of o…

So once again since I think I am not explaining it well, it might take a long time to go from factoring 21 to 35, and a long time from 35 to anything bigger, but from that point on…

We are talking to different things. There is linear engineering progress for getting from 32 bits to 256 bits being factored is my claim. If we want to talk RSA the engineering jou…

My read of this post is that there's nuance here and that by the time we see 32-bit integers being factored then the roadmap to 256 bit integers can be counted in months on ten fin…

Beware the Ides of march: this is 1 of 2 cryptographic doom papers that was released this week. This google paper with Babbush, Gidney, Boneh is authoritative. And we also have ano…

I was just very naive at 18 about program analysis. I haven't lost my imagination though. I was a self-taught IOI gold division competitor. I thought every problem had an algorithm…

I interned for the author at 18. I assumed security testing worked like this: 1. Static analysis catches nearly all bugs with near-total code coverage 2. Private tooling extends th…

Linux bitchat client using the bluer library. Vibes also came from bitchat_tui ( https://github.com/vaibhav-mattoo/bitchat-tui ) Bluez is the better choice for publishing GATT seri…

Thanks for the post!

we've happily running on routers on the pi5/cm5 since last year ( https://www.supernetworks.org ) and openwrt support is there as well.

We're adding support to gvisor for container plugins, it's a reasonable approach for limiting the rich attack surface on linux

on a related note the search space for https://www.qdayprize.org/curves seems far too small to be a meaningful contest and the rules dont seem to address how they judge the validit…

there's been advances, at least for RSA work from håstad, ekerå, gidney has brought this to O(N) qubits, on the runtime the papers are a little bit harder to read as they differ in…

blog author mentioned in the article here, previously submitted to hn at https://news.ycombinator.com/item?id=44497622 blog post here, https://www.supernetworks.org/pages/blog/agen…

i am not using it as a pejorative here, I am pretty sure that is the case for this code base, as every block has a comment describing the code that immediately follows also i do no…

bitchat has a trivial MITM flaw with the favorite's identity system. i wrote up my thoughts around vibe coding cryptographic security and rolling a new protocol

Very good

I made a CTF challenge 3 years ago that proves why local devices are not so protected. exploitv99 bypasses PNA with timing as the other commentor points out. https://github.com/adc…

The existing PNA is easily defeated for bugs that can be triggered with standard cross origin requests. For example PNA does nothing to stop a website from exploiting some EOL devi…