
Security Researcher and Cryptography TL @Mozilla / Tweets are my own. IH-SNC7
Paris, France
Joined October 2011
- Tweets185
- Following533
- Followers642
- Likes375
Benjamin Beurdouche retweeted
Firefox support for uBlock Origin is not going anywhere.
Microsoft’s plan for Edge means that uBlock Origin users are losing one of their browser options. theverge.com/tech/976880/mic…
Benjamin Beurdouche retweeted
Formal verification has never been more important now that LLMs take a central place in code generation. The psychological effect of assuming capability and best intention from a human does *not* translate to the setting where a robot writes the code.
Benjamin Beurdouche retweeted
Le chiffrement de bout en bout des communications ne saurait être fragilisé pour permettre des accès par des tiers, fûssent-ils les services de rens.
C'est tout un pan de la confiance dans les messageries qui s'en trouverait questionné.
"Cet amendement instaure pour les plateformes une obligation de mettre en œuvre les mesures techniques nécessaires afin de permettre aux services de renseignement d’accéder au contenu intelligible des correspondances et données qui y transitent." 1/2
senat.fr/amendements/2024-20…
Benjamin Beurdouche retweeted
This month's Advancing #WebRTC from #Mozilla dives into the new standard video processing APIs MediaStreamTrackProcessor and VideoTrackGenerator. We cover differences across browsers, and how to polyfill the gap in all browsers, including #Firefox!
blog.mozilla.org/webrtc/unbu…
Benjamin Beurdouche retweeted
6100 atoms! Feels like quantum computers with thousands of qubits are just around the corner
arxiv.org/abs/2403.12021
Benjamin Beurdouche retweeted
The program for RWC 2024 is live! rwc.iacr.org/2024/program.ph…
Benjamin Beurdouche retweeted
I am super excited to see Apple engaging in this work—it is outstanding. However, I have been secretly hoping that both Apple and Google would adopt MLS (Messaging Layer Security) as part of their plan to both support RCS (Rich Communication Services). While the evolution of the iMessage protocol does not rule out this possibility, it seems to diminish the likelihood that any version of RCS protocol will become MLS and universally adopted. Conversely, it is now conceivable that RCS might integrate PQ3. Regardless of the long-term outcomes, it is clear that messaging solely through clear text or employing hop-to-hop encryption is not sufficient. Eventually, an end-to-end (e2e) messaging protocol will need to be incorporated into RCS.
So Apple has gone and updated the iMessage protocol to incorporate both forward security (very good!) and post-quantum cryptography. security.apple.com/blog/imes…
Benjamin Beurdouche retweeted
This was an amazing process to see. RFC 9420 is a huge achievement.
@raphaelrobert @beurdouche @JonMillican @Emad_Omara @katrielalex @rlbarnes and other contributors like @JoelAlwen @BrenTwentyTen and others really pulled together to make something great.
This quoted post is unavailable.
Benjamin Beurdouche retweeted
MLS is a new secure group messaging protocol, soon coming up in a standard. datatracker.ietf.org/doc/dra…
It aims to have strong confidentiality properties, with fancy names like "forward-secrecy" or "post-compromise security"!
How do we prove them?
Benjamin Beurdouche retweeted
#ePrint TreeSync: Authenticated Group Management for Messaging Layer Security: T Wallez, J Protzenko, B Beurdouche, K Bhargavan ia.cr/2022/1732
Benjamin Beurdouche retweeted
My student @Kachoc_ and I are thrilled to announce Aeneas, a new verification toolchain for Rust programs. It's on arxiv arxiv.org/abs/2206.07185 and conditionally accepted at ICFP 2022... đź§µ
Benjamin Beurdouche retweeted
The F* book is beginning to look more like a book! Lots more to go, but funny how seeing it in a different format really makes it more a book in my head.
fstar-lang.org/tutorial/proo…
restructuredText is pretty nice for targeting both html and latex.
#fstarlang
Benjamin Beurdouche retweeted
Yet another evidence that cryptography needs to pass the test of time.
📜 eprint.iacr.org/2022/111.pdf
Benjamin Beurdouche retweeted
The Security Standardisation Research Conference (SSR) will take place on June 6 in Genoa and is co-located with IEEE EuroS&P
@IEEEEUROSP. The submission deadline (firm) will be March 4 and all details can be found at ssr2022.com/.
Benjamin Beurdouche retweeted
CHERI provides fine-grained spatial memory safety at a hardware level. msrc-blog.microsoft.com/2022…
#cybersecurity #ConfidentialComputing
Benjamin Beurdouche retweeted
Hey, @CNN: Support HTTPS for all URLs please.
Benjamin Beurdouche retweeted
We can do a lot for DNS security by protecting the link between the endpoint and the recursive resolver, a point @tqbf has been making for years. Whether it's DoH, DoT, or DoQ doesn't really matter that much. educatedguesswork.org/posts/…
Benjamin Beurdouche retweeted
RiSE just announced a new position to work on proof-oriented programming, in F* and related technologies. Come work with us!
careers.microsoft.com/us/en/…























