The Joy of Cryptography! joyofcryptography.com

After a stern scolding from a cryptographer colleague, my copy of his followup now sports this warning label

Holy fuck, enough of this. If you're in Arizona, contact your lawmakers. Allowing shitty regions to dictate the law for the entire Internet is going to ruin the one thing we still (kinda) have left. Fight this.

Also it's incredibly obvious, and has been from the beginning, that lawmakers are going to latch onto this hard as a way to erode privacy. Safety is almost always an excuse.

"aes-js and pyaes provide a default IV in their AES-CTR API" *screams* https://blog.trailofbits.com/2026/02/18/carelessness-versus-craftsmanship-in-cryptography/

MASSIVE rewrite of my Verification Theatre paper now on ePrint with added: - Three new bugs that are *inside* libcrux's verified core, - Comparison to Amazon's verified LibCrypto components, - Many additional sections, discussion and details! Huge rewrite! Go read it! eprint.iacr.org/2026/192

The showed us cute missing dogs & we consented to turning our doorbell cameras into a mass human tracking system. Mark my words, Ring's Search Party will become the next Flock. Only instead of just being sketchy cameras installed in parking lots, it will be everywhere. That's their play.

He came alive 😱

Guys if you see observers thank them. There’s real stress and burnout in the ranks right now. People understand they are waking up every day to chase and monitor federal thugs who can execute them. But they keep doing it nonstop to protect their neighbors

What is to give light must endure burning. — Viktor Frankl

Seems unfair that you only get to use the bouncy slide to get off a plane when things have gone wrong. The bouncy slide should be a treat they give to the best passengers who did the flight correctly.

The pink people on this website just need to all get together and stop playing prisoner’s dilemma games.

yeah. let’s serialize pointer offsets, send them over the network to other people, then fix them up when they get back. what’s the worst that could happen. live a little

Happy solstice! ❄️🌲

We recently discovered an unauthorized, modified version of one of our audit reports shared online via a deceptive URL. While we quickly resolved the issue, it served as a reminder of the importance of authenticity and provenance in security reporting. leastauthority.com/blog/lessons...

I think it’s pretty clear at this point that one of the main impacts of LLMs is to disrupt thinking: to make it so that far too many people never properly learn how to do it, and then to control the output so there are thoughts that people never learn how to think.

In case you aren't already aware of one of the nerdiest, nich-est online games: TeXnique, where the goal is to type LaTeX formulae as quickly as possible. texnique.xyz It is "fun."

Alberta: Please speak up against Bill 9 and the Notwithstanding Clause while the legislation is being debated in the Legislature. Here's two initiatives that send messages to elected officials & will keep you informed of next steps: transactionalberta.ca savethecharter.ca #ableg #abpoli #CanPoli

If you like future-bass-ish electronic music, I just posted a new track! soundcloud.com/earthrise5/t...

First drum lesson tonight. Haven’t taken a music lesson in uhhh… 20 years?? Looking forward to sucking at this. As the saying goes, “Sucking at something is the first step toward being sorta good at something”-Jake the dog

If you ever wondered, "What does it take to implement a base-256 <-> base-B codec in constant-time when B isn't a power of 2?" Well, I have some oddly specific good news for you: codeberg.org/fediverse/fe...

i hate it when something is described as "inscrutable." you have no idea the types of things im able to scrute

> In honor of spooky month, share a 4 word horror story that only someone in your profession would understand Circuit missing a gate.

>ducted fans >im a turbofan >her: eww i want jet >turbofans are jets >i am a fucking jet aircraft I will be alone forever

These people are evil. Never stop saying so. Don’t be intimidated into shutting up.

You have never been cyberd until you've been cyberd by a cyber security professional

Friend gave me a John O’Donohue book recently. It’s quite good. “To Come Home To Yourself”

Be the Mothman you wish to see in the world

I found more joy in life this way.

Saturn, rising behind its largest moon Titan. This scene is a composite of images taken by the Cassini spacecraft on 31 March 2005. At the time, Cassini was 7,000 km from Titan and 1.2 million km from Saturn. Credit: NASA/JPL/SSI/Ian Regan/Val Klavans

ChatGPT is probably the biggest honey pot of willingly-turned over highly confidential information that has ever been created in human history.

There are * 0 valid JSON strings of length 0 * 10 valid JSON strings of length 1 * 183 valid JSON strings of length 2 * 1,116,690 valid JSON strings of length 3 * 1,241,178,737,201 valid JSON strings of length 4 * 1,382,769,886,828,373,987 valid JSON strings of length 5 * ... I have up to N = 350

I hate that I can’t use the emdash anymore. Thanks AI.

The Zcash Foundation is committed to transparency and openness with the community and our stakeholders. Today we released our Q2 2025 report, highlighting our engineering work and other key activities from this quarter. zfnd.org/the-zcash-fo...

Oh look, the iOS vulnerability is yet another weird subcase of image decompression, who could possibly have predicted.

If you need to test a subwoofer... soundcloud.com/earthrise5/e...

Improving Geographical Resilience For Distributed Open Source Teams with FREON In a recent blog post, I laid out the argument that, if you have securely implemented end-to-end encryption in your software, then the jurisdiction where your ciphertext is stored is almost irrelevant. Where…

This cannot stand. I ethically cannot comply with this fascist violation of our fundamental rights. The only way to defeat it is mass protest.

Look I went on /r/ChatGPT and some of this stuff is genuinely sad to read and upvoted hundreds of time by people deeply emotionally connected or feeling assisted by 4o, not even relationship stuff. Damn.

This is the idealized model of an animal. You may not like it, but this is what peak performance looks like. 🎢⚛️🧪

TIL that the ITU has an annual "X.509 Day", wheeee www.itu.int/md/T25-TSB-C...

My favorite thing about social media is the weird people who emerge when you’re talking about basic privacy, and accuse you of having things to hide. Hey crazy person: *of course* I have things to hide. We all do. Being human means being embarrassed about personal stuff.

This is also why "accept Zcash / crypto as an alternative" is necessary but not sufficient: as long as credit card companies are a major channel for a site's revenue, they are a major source of coercion. "If you sell NSFW content via any payment rail, you can't use ours" is the barrier to overcome.

If you're a seller who wants to accept Zcash to both improve your customers' privacy and provide resilience against coercion by credit card companies, I will happily answer any questions you have.

My goal for the rest of 2025 is to make my art worse

And, for fuck's sake, take a first aid/CPR class. You will never, ever regret doing that. These are basic skills that will serve you always and makes that first aid kid more valuable. There's a lot of stuff in there and most people can't do much more than apply band aids.