Viewing profile — winterdeaf

So much vitriol. I understand it's cool to hate on EA after the SBF fiasco, but this is just smearing. The key to scientific thinking is empiricism and rationalism. Some people in …

As far as I am aware, there is no way to stop malicious tags without modifying the protocol to authenticate the messages being broadcast as originating form a genuine tag. [1] Maki…

This is such a charade. Making "invisible" airtags is trivial [1], and I wouldn't be surprised if such airtags are being manufactured en-masse. We allowed the creation of a global …

I would argue that it is not misleading -- the website domain is, after all, "breakingthe3ma.app". The title of the paper presents a more academic angle, and is intended to highlig…

> well-reviewed zero-footgun nacl.SecretBox()-style thing for this use case, but there simply isn't. You'd be surprised, but I've seen designers who managed to shoot themselves in …

To put it in Igor's words, it is like "somebody baked a cake following a recipe, but without ever having tasted or seen a real cake". The crypto design is brittle, but the practica…

Tarsnap does not actually look bad. But any client-to-server protocol that is not TLS1.3 will make cryptographers twitch, and (as noted in the documentation pages) compression is b…

The same research group working on the Telegram MTProto security analysis is behind these attacks on MEGA! (I should add: disclosure, I work there too.)

This speaks volumes about the need of standardized encrypted cloud storage protocols. It always surprises me how fragmented the entire space is: Syncthing "untrusted devices" suppo…