Ring Glitch ℍ⊗ℌ

When cheching file checksum/signature, readi is fast converting at 800-1000 MB.s, minimum of the reading 1 TB data | sha256 or signature check.

Adding Reed-Solomon checks that can on 500 MB blocks fix N errors is not hard but the app reads maybe more than it should

Apparently other USB SSDs (even physically larger with better thermal dissipation suffer from such slowdowns).

So I got ~1 kg copper heatsink from scrap, bought thermal-conducting adhesive pad just to try out how much it could cool down (because if 55°C is on outside, inside could be maybe 80°C).

Well the experiment worked, got down the temperature to 30-40 °C, the slowdown is also lesser, around ~330 MB/s.

Needed something faster than classic USB3 HDD, bought Kindstion 2 TB SSD, found out that the 1 TB serial write backup takes 3h35 min on HDD, 1h44 min on SSD.

Because they slow dowwn heat up ater writing more than ~200 GB slow down 10x (mesured pure write operations)

So...coolinh maybe?

Do you have some link summing up Canadian perspective? Ideally sum up and link to actual text, but first would be enough.

I know EU and US perspective (also how local laws give zero fuck about EU if they want), never heard Canadian yet.

So ChatControl going on 6th time after saying 5 times "no", ProtectEU, both to break encryption legally (math...can't really).

Then there was the eIDAS voting in EU where text was secret which was illegal, but who you gonna sue? Age verification in eIDAS "ZKP should be" but not would be really.

Analysis | Google says U.K. hasn’t demanded ‘back door’ to users’ private data Lawmaker’s letter suggests Apple might not be the only company the British government asked for special access to users’ private data.

So this story is confusing because Google initially said some things that make no sense and is now saying different things. www.washingtonpost.com/politics/202...

Yeah, I knew instantly that the paper would be great with his amusing sense ripping into flesh.

Just now I realize I haven't heard from him for a long time, since some mailinglist and such went silent.

Replication of Quantum Factorisation Records with an 8-bit Home Computer, an Abacus, and a Dog This paper presents implementations that match and, where possible, exceed current quantum factorisation records using a VIC-20 8-bit home computer from 1981, an abacus, and a dog. We hope that this ...

One of my students sent me the latest quantum factorization record, and I have to admit: I’m shook. eprint.iacr.org/2025/1237

Commission presents Roadmap for effective and lawful access to data for law enforcement The European Commission presented today a Roadmap setting out the way forward to ensure law enforcement authorities in the EU have effective and lawful access to data.

Well, this horrible idea refuses to die so we should refuse to let it pass and start organizing again.

ec.europa.eu/commission/p...

So I figured I’d quickly write up a little section called “how to hash a message to an integer in the range 0…N-1” because I needed it for something else.

Five hours, three FIPS docs, four reviews of production signature implementations (some vulnerable to DoS) later here’s the output.

I am wildly skipping around to different sections today, because every time I write something I realize I’m missing five background sections. Here’s one of those.

I know this is a couple of days out of date, but I love it anyway.

EXCLUSIVE: Encryption on the menu at EU Justice Ministers debate - Euractiv "Balancing" law enforcement access to digital communications with privacy rights will be discussed at Thursday's Council meeting.

Somehow whenever “encryption is on the menu” in Europe it’s always something about how we’re going to smash encryption, not some new tech product that’s going to make Europeans independent from US tech companies. www.euractiv.com/section/tech...

Guardian headline saying, "‘It’s terrifying’: WhatsApp AI helper mistakenly shares user’s number Chatbot tries to change subject after serving up unrelated user’s mobile to man asking for rail firm helpline"

'Meredith,' some guys ask, 'why won't you shove AI into Signal?'

Because we love privacy, and we love you, and this shit is predictable and unacceptable. Use Signal ❤️

Repeated Public/Private Keypairs It was discovered that the flashing procedure of several hardware vendors was resulting in duplicated public/private keys. Additionally, while triaging this issue, it was discovered that the Meshta...

github.com/meshtastic/f... @bmann.ca was shared this by the v cool Thomas Balthazar heads up for meshtastic folks!

Real problem with C compilers is that they really to this day do not have a way to say "I really want this code here, do not optimize out".

"volatile" helps, unless compiler thinks code is unreachable (glitch protection), __attribute__((optimize()) is specific and not that helpful with nested calls

📣 89 organizations and experts have united to send a strong message to the EU regarding its new Internal Security Strategy. We're deeply concerned about its plans for encryption and the future of digital security in Europe. www.globalencryption.org/2025/05/join...

You can also relay traffic with a cheap nRF52840 + BladeRF with BTLE. E.g. with BLE locks that just need proximity and no user interaction. 1 guy near lock, 1 near victim, add logperioidic antenna for range

Minimum connection interval is 7.5 ms (default around ~30 ms), that's plenty time for relay

I'd laugh few years ago, but not now since I need to work with it.

But every protocol trying to be secure from BLEmishes uses its own encypted tunnel inside BLE.

BLE implementations on devices are so fscked in many ways, you need nRF52840 sniffer to actually check whatever is really trasmitted.

I’m having way too much fun writing about Bluetooth.

I tend to write random IP address like 1.2.3.4 or 1.1.1.1 to be hijacked by the captive portal and it mostly works.

Sometimes captive portal is extra stupid and tries to do redirects with DNS names which unbound does not like and I have to angrily turn it off for a while.

European Commission takes aim at end-to-end encryption and proposes Europol become an EU FBI The Commission said it would create roadmaps regarding both the “lawful and effective access to data for law enforcement” and on encryption.

Why is the EU so obsessed with blowing it on end-to-end encryption? therecord.media/european-com...

Interesting paper on how to use EM emanations to detect hidden cameras by their power signature, like Chipwhisperer side channels, just in radio

www.usenix.org/conference/u...

Original monitor being sniffed, though the image is enlarged, thus lost edges.

Version sniffed from HDMI emanations

An example of TEMPEST sniff from SDR when there is good combination on high-contrast elements

Trying out TEMPEST attacks, it's work to set up parameters right, 5th harmonic of pixelclock seems to work best.

I'd also want to try deep-tempest, but gnuradio is always laggy and breaks. deep-tempest requires learning anyway.

Examples: orig screen, tempest view via SDR and a high-contrast sniff

“Gabbard on Tuesday wrote to Sen. Ron Wyden (D-Oregon) and Rep. Andy Biggs (R-Arizona) saying she had directed a legal review of the order and had not known of it before it was reported by The Washington Post and confirmed by other publications. The legislators had urged her to act just after her confirmation as the top U.S. intelligence leader. “I share your grave concern about the serious implications of the United Kingdom, or any foreign country, requiring Apple or any company to create a ‘backdoor’ that would allow access to Americans’ personal encrypted data,” she wrote. “This would be a clear and egregious violation of Americans’ privacy and civil liberties, and open up a serious vulnerability for cyber exploitation by adversarial actors.””

US officials knew about, and did not oppose, that secret UK order that tried to force Apple to weaken iCloud encryption, and now DNI Tulsi Gabbard says the UK order would violate Americans’ rights, @joemenn.bsky.social reports

www.washingtonpost.com/technology/2...

One thing I’m seeing re: today’s Apple news is a lot of people blaming Apple. Saying that Apple is selling people out by withdrawing encryption features from the U.K. market. For example, here’s Tim Sweeney. I want to propose a different take.

Why is there seems to be a weird push to pretend that phones do not have filesystem? Android is weird, but the way iPhone is pretending is pure *wat*?

Signal still flabbergasts me when you choose save attachment and it saves it *somewhere*. But doesn't tell where.

How to prove false statements? (Part 1) Trigger warning: incredibly wonky theoretical cryptography post (written by a non-theorist)! Also, this will be in two parts. I plan to be back with some more thoughts on practical stuff, like clou…

One of my favorite demonstrations showing how requiring random oracle model in provable security, while physically not being able to create random oracle hash function, breaks things:

blog.cryptographyengineering.com/2025/02/04/h...

blog.cryptographyengineering.com/2025/02/06/h...