Avesta Hojjati, Ph.D. @sudoq7

CTO @SecurityScorecard. views == my own Earth Joined August 2015

Tweets

1K
Followers

666
Following

1K
Likes

9K

Crypto Texan @Crypto_Texan

2 years ago

to this day, this is my favorite explanation of zero knowledge proofs by zkOG @zooko it’s simple really

165 822 3K 388K 2K

View Details

Boom! Time-capsules are coming to Sui. TL;DR encrypt messages and NFTs into the future. Crazy interesting applications, see attached! 🍒 that tech was my PhD presented to NIST w/ @FBaldimtsi back in 2008 & we still have the fastest algorithm :), we were also the 1st to deploy it

34 42 184 60K 24

View Details

Matthew Green @matthew_d_green

2 years ago

So the overall point here, that E2E services leak a ton of metadata through key updates, is a good one. Same thing goes for Apple: you can more or less enumerate all devices if you reverse the Apple Directory Service APIs.

Tal Be'ery @TalBeerySec

2 years ago

1/ A technical writeup on @Meta’s @WhatsApp privacy issue: WA leaks victim devices’ end-to-end encryption (E2EE) identity information (mobile device + up to 4 linked devices) to any user, by design, even if blocked and not in contacts. medium.com/@TalBeerySec/h…

4 47 145 65K 91

2 26 67 20K 18

View Details

Bas Westerbaan @bwesterb

2 years ago

Post quantum is now in @firefox nightly!

4 42 170 31K 21

View Details

Andrew Miller @socrates1024

2 years ago

debunking TEE fud: a short argument reset to start the new year. collab with @0xQuintus collective.flashbots.net/t/debunking-te… Myth 1: “SGX is being deprecated!" Trusted hardware is over.” Actually Confidential Compute is booming. Normies are going to use this whether or not web3 does too

9 40 160 50K 52

View Details

Matthew Green @matthew_d_green

2 years ago

I threw together a quick blog post explaining the recent attack on AirDrop privacy, and how Chinese law enforcement is exploiting it. blog.cryptographyengineering.com/2024/01/11/att…

6 92 214 41K 62

View Details

Joseph Thacker @rez0__

2 years ago

🚨 Massive AI Security Release 🚨 @NIST just put out the best AI Security Publication that I've ever seen. It is 106 pages of deep, technical content. It references real-world practical attacks. In this thread is the link and I'm going to cover a few highlights. 👇

14 466 1K 243K 1K

View Details

Matthew Green @matthew_d_green

2 years ago

Article on some new research that finds ways to balance privacy and stalker detection for AirTags and other location trackers. This is a collaboration with my students @gabrie_beck, Harry Eldridge and colleagues Abhishek Jain and Nadia Heninger. wired.com/story/apple-ai…

2 115 354 49K 118

View Details

Matthew Green @matthew_d_green

3 years ago

Google is changing the way it stores and collects user location data, so that this data will remain on the phone and be encrypted in the cloud. The upshot is that Geofence warrants may become obsolete. EFF: eff.org/deeplinks/2023…

6 44 171 26K 31

View Details

Avesta Hojjati, Ph.D. @sudoq7

3 years ago

@Teslaconomics Any idea regarding the delivery date? I was able to place my order last night as well but would like to know when they will deliver it.

0 0 0 42 0

View Details

Chris Peikert @ChrisPeikert

3 years ago

💥New short paper with Yi Tang: We 𝒄𝒐𝒎𝒑𝒍𝒆𝒕𝒆𝒍𝒚 𝒃𝒓𝒆𝒂𝒌 the assumption underlying the lattice-based "proof of sequential work" candidate from CRYPTO'23. This solves a problem that was conjectured to require depth T... in depth poly(log T). web.eecs.umich.edu/~cpeikert/pubs…

7 39 181 21K 20

View Details

Lukasz Olejnik @lukOlejnik

3 years ago

They HACKED A TRAIN. For real. Train operators asked for this to see why their trains didn't run after servicing. Turns out that vendor/producer implemented a geofence lock for trains serviced somewhere else. Amazing story, one of the best hacks in 2023. social.hackerspace.pl/@q3k/111528165…

28 834 3K 312K 923

View Details

Matthew Green @matthew_d_green

3 years ago

I wrote a second, long (wonky) post on Schnorr signatures, diving into the Dilithium PQC signature scheme. blog.cryptographyengineering.com/2023/11/30/to-…

2 24 85 15K 33

View Details

Matthew Green @matthew_d_green

3 years ago

I’m very happy to see that the EU parliament is making progress in beating back these mass-message scanning proposals. But I’m still pretty nervous that the EU Commission will find some way to bring these back. edri.org/our-work/csar-…

2 21 59 11K 2

View Details

Ryan Hurst @rmhrisk

3 years ago

OpenSSL 3.2.0 has support for using Windows OS trust stores, raw public keys for TLS and third-party signature schemes enabling PQC signatures to be experimented with, certificate compression which is important for PQC certificates, and Hybrid Public Key Encryption (HPKE). All very exciting changes.

3 16 38 7K 6

View Details

Sanaz @sanazahari

3 years ago

Everyone should have secure and modern messaging regardless of what phone they have. Excited to see Apple joining our ongoing work with the GSMA to evolve RCS. 💚+💙 cnet.com/tech/mobile/ap…