Why can't @bsky.app use something other than e-mail for 2FA?

Today I have a more serious topic than usual, please consider reposting for reach: My wife and I are urgently looking for a specialist in neuropediatrics or a similar field for our autistic child with a diagnosed, but not further specified, movement disorder [1/4]

Solid, SOLID, side-channel work by Sahan Sanjaya, Aruna Jayasena & Prabhat Mishra: arxiv.org/pdf/2507.22306

Latest Security Liberation Front issue is out! slf.fish

For anyone interested in learning more about Indistinguishability Obfuscation (iO) I highly recommend watching this talk by Amit Sahai: mediaspace.illinois.edu/media/t/1_ur... I scoured the internet for a good introduction to the topic and this is the best talk so far IMHO.

everything is real

… and another RCE in both Fortinet¹ and Ivanti² products. Might as well run MS-DOS with Trumpet TCP/IP. __ ¹ thehackernews.com/2025/05/fort... ² www.bleepingcomputer.com/news/securit...

After incorporating the many speedups from tches.iacr.org/index.php/TC..., RELIC is now faster than blst* for pairing computation and G1/G2/GT exponentiation in BLS12-381. All your speed records are belong to us! \o/ (*) Benchmarked through blstrs.

A Dilithium-like Multisignature in Fully Split Ring and Quantum Random Oracle Model (Shimin Pan, Tsz Hon Yuen, Siu-Ming Yiu) ia.cr/2025/671

New work: we explain cubical arithmetic in simple terms to show you how easy it is to compute pairings. Essentially, you only need to know the Montgomery ladder! As a bonus, pairings from cubical arithmetic are faster than those from Miller's loop for applications in isogeny-based cryptography.

Simpler and Faster Pairings from the Montgomery Ladder (Giacomo Pope, Krijn Reijnders, Damien Robert, Alessandro Sferlazza, Benjamin Smith) ia.cr/2025/672

Jeu sedumondel sche Blueksy sa che jeu discourel romontsch ?

Favorable pour la première maison pas pour des résidences secondaires non.

pypi.org/project/tari... !

Et ils ont décidé que, pour le drapeau vaudois, le vert pour le verre et le blanc pour le blanc 🤪

penguinlabsweb4.github.io By ZeroStableCoin

We need COBOL Defence League.

Pas du tout une surprise vu que les loyers abordent les très hauts niveaux.

A simple PostScript and PDF polyglot file gist.github.com/nst/0decdc1c...

Could not agree more. The point is not that they used signal. The point is that they bypassed all the other security considerations and protections.

This PostScript program will display the time as a clock gist.github.com/nst/382caefb...

I wrote up some notes on the new #Kubernetes CVE in `gitRepo` volumes. it's only relevant in quite specific circumstances, but I do think it's worth cluster operators blocking the use of `gitRepo` volumes unless they need them, as there have been 2 CVEs now. raesene.github.io/blog/2025/03...

Great sticker ITW

Yesterday was the watershed after which non-proliferation has just become a utopia. You can almost feel the number of countries thinking “we need nukes” from Taiwan to the EU via South Korea. Suddenly finding a deep storage for EU Pu stocks is no longer a necessity, my bets are on Sweden first.

I'm happy to share some updates on the FAEST round 2 digital signature algorithm: - we have achieved substantially smaller signatures - at the same time, the new sign/verify algorithms achieve more competitive performance

you're welcome, academics \newcommand{\promptinject}[1]{{\tiny\color{white} #1}}

You know what would be funny? If Salt Typhoon hacks the iCloud next and China gets all the data of UK politicians due to the absence of ADP.

ICYDK restrictions in PDF (copy pasting, printing…) are linked to encryption, which often uses an empty user password : no password prompt, but the file is still encrypted. So just decrypting the file (via qpdf, pdftk, print to PDF,…) removes these restrictions.

Finally, a state-of-the-art version of CTIDH! That is, deterministic and a prime of 2048 bits. We introduce a new batching strategy we call "wombats", making dCTIDH five times faster than deterministic CSIDH. Surprisingly, it even beats "non-deterministic" CTIDH. See eprint.iacr.org/2025/107

I learned these bounds on open-addressing so early in my CS studies I had internalized them as absolute truths, holding even beyond what Yao had actually proven/conjectured (and the data structures 101 course was probably glossing over details too)! So refreshing to see these "truths" shaken!

"In this paper, we revisit one of the simplest problems in data structures: the task of inserting elements into an open-addressed hash table [...] Along the way, we disprove the central conjecture left by Yao in his seminal paper “Uniform Hashing is Optimal”."

✈️ TCAS is the last line of defence against mid air collisions, and like many aviation safety protocols, it wasn't designed to be secure against adversarial attacks. Nice research by CYD researchers demonstrating practical attacks disabling or injecting TCAS alerts. www.usenix.org/conference/u...

Because of new tariffs, submissions to crypto with a non US author have a 20% reduction to their page limit.

Really excited to finally share PRISM, a new isogeny-based signature 🥳 joint work with lots of awesome people. eprint.iacr.org/2025/135

The Security Liberation Front has released its 2024 Q3 lineup of worthwhile research¹. #SecurityLiberationFront #SLF __ ¹ slf.fish

Cover reveal! 25% discount on B&N pre-orders at www.barnesandnoble.com/w/serious-cr... until tonight (Apr 19) Had a blast working with @nostarch.bsky.social again. Please repost :)

Literature review from the BSI: implementation attacks Vs QKD systems. www.bsi.bund.de/SharedDocs/D...

OpenBSD/amd64 CD/.iso images are now also bootable in EFI-mode, making it easier to install on certain (virtual) machines. Previously EFI bootloaders were only included on the {install,miniroot}XX.img inst. media (e.g: for USB/SD, etc). marc.info?l=openbsd-cv... marc.info?l=openbsd-cv...

Was gonna go with ELO.

The sun is shining in the sky There ain't a cloud in sight It′s stopped raining Everybody's in the play And don't you know, it′s a beautiful new day Hey, hey, hey!