upofadown

5 ms·

1.
The XMPP Newsletter August 2026(xmpp.org)
4 points by upofadown 10h ago|0 comments
2.
by upofadown 3d ago
Unfortunately, in an end to end encrypted messaging system, an identity is denoted by some sort of long number. That is an inescapable fact. Trusting a third party to correctly map, say, a phone number to a cryptographic identity number ev
3.
Starlink Signal Leakage Threatens Radio Astronomy's Most Critical Frequencies(gadgetreview.com)
143 points by upofadown 5d ago|86 comments
4.
A Decade of Hype, 3k Roofs, and One Redirect URL: Tesla Kills the Solar Roof(gadgetreview.com)
18 points by upofadown 5d ago|7 comments
5.
by upofadown 8d ago
What does the speed of RSA have to do with anything?
6.
by upofadown 8d ago
My article: 2048 Bit RSA and the Year 2030 https://articles.59.ca/doku.php?id=em:20482030 We don't have any way to predict when and if 2048 bit RSA would be factorable at this time. We would need a breakthrough in hard
7.
by upofadown 8d ago
This article from 2000 is about estimating what would be required to factor 1024 bit RSA: A Cost-Based Security Analysis of Symmetric and Asymmetric Key Lengths https://cr.yp.to/bib/2000/silverman.pdf It was a res
8.
by upofadown 10d ago
I note that that extensive list only contains a single death, due to a power failure. Extreme civil disobedience, but not really terrorism.
9.
by upofadown 10d ago
You can attempt 15 yourself if you want: https://towardsdatascience.com/where-are-we-with-shors-algor... If you run it over and over again you will eventually get 3 or 5...
10.
by upofadown 11d ago
This article (mine) is about this: 2048 Bit RSA and the Year 2030 https://articles.59.ca/doku.php?id=em:20482030 I guess it could be updated to include this latest factoring result. Said result would not change the conclusi
11.
by upofadown 11d ago
It's not just because the GPG user is small fry that 1024 bit RSA is low risk for them. It is mostly because there is only one of them. A nation state attacker would have to spend billions of dollars and years of lost opportunity to us
12.
What is known about how Eric Lu factored the 862-bit RSA-260 after 35 years(lilting.ch)
15 points by upofadown 12d ago|1 comments
13.
The Server Called Paranoia: Defend Autistici/Inventati Before Sept25 Sabot Media(wewillfreeus.org)
15 points by upofadown 19d ago|4 comments
14.
by upofadown 21d ago
OBSD Amsterdam is pretty cool. I am currently running an instance on it. One feature that could also be considered a bug is that the VPSes run on the native OpenBSD virtualization scheme. My instance has suffered a few crashes over the year
15.
by upofadown 21d ago
OVH doesn't seem to directly support installation of arbitrary images. So installing OpenBSD can be a bit awkward. A relevant search: * https://searxng.shreven.org/search?q=openbsd+ovhcloud
16.
by upofadown 23d ago
You can always send and receive messages no matter what XEPs are supported. Not that that is a problem in practice. There is a fairly well established subset of XEPs that everyone supports. https://xmpp.org/extensions/x
17.
by upofadown 1mo ago
Wait, Mastodon has 10 million users and 8000 servers? That's way more than I would of guessed. So Mastodon is a real thing in the world now. Twitter has something like a half a billion users. So it wins I guess...
18.
(ADVANCED) Guide to not fucking up QR codes(infosec.exchange)
16 points by upofadown 1mo ago|5 comments
19.
Cellebrite zero-day exploit used to target phone of Serbian student activist(securitylab.amnesty.org)
4 points by upofadown 1mo ago|0 comments
20.
by upofadown 1mo ago
It was never allowed. Microsoft just started doing it in their email client and obnoxiously made it default. There was no standards process where anyone spent time considering the potential downsides with the aim of making HTML email practi
21.
by upofadown 1mo ago
>Neither mode is encrypted: whatever is on the sending screen is readable by any camera pointed at it. Something like this would be good for transferring the public key(s) associated with some cryptographic messaging identity. This would
22.
by upofadown 1mo ago
GPS is direct sequence spread spectrum. You might be thinking of frequency hopping, jamming that is harder, but you are only working against super weak signals from satellites. It would still be quite possible.
23.
by upofadown 1mo ago
A rehash of the paywalled Wired article: * https://futurism.com/science-energy/us-military-gps-jamming-...
24.
by upofadown 2mo ago
The point of the comic is pretty obviously to make fun of the expectations of cryptography geeks; you know, the sort of people who use 4096 bit RSA keys for the coolness factor. It is a stretch to imply it is suggesting that encryption is s
25.
by upofadown 2mo ago
To avoid a potential misunderstanding, the maintenance mode is intended to continue indefinitely. Briar project is not shutting down. * https://briarproject.org/news/2026-maintenance-mode/
26.
by upofadown 2mo ago
>...and conductive, rivaling copper. That isn't true for either thermal or electrical conductivity. So I don't know what is meant here.
27.
by upofadown 2mo ago
But claiming that your system is end to end encrypted means that you are claiming protection from you and your system. This is mainly a truth in advertising issue.
28.
by upofadown 2mo ago
>...pretty much any E2E system is falling under this definition. The definition is quite clear. It does not apply when the implementation is not distributed by the same entity that creates it for example. There are other related issues b
29.
by upofadown 2mo ago
If, say, Signal was completely controlled by the CIA[1] and was thus evil, then having incoherent cryptography as described in the article would be a feature, not a bug. Being able to reject law enforcement requests would produce a false
30.
by upofadown 2mo ago
How about GPG distributed with a Linux distribution like Debian as a counterexample? It would be fairly difficult to backdoor GPG in that case without getting caught. Everything happens in the open both at the GPG level and the Linux distri

More ›