@maxzks

Engineer and researcher, PhD in cryptography, privacy, and security

Joined March 2020
  • Tweets202
  • Following310
  • Followers463
28Media
Cryptography is how cryptographers have fun Key management is how we stay employed
1
29
6
178
destroyallsoftware.com/talks… was actually just predicting the future Fantastic talk if you haven’t seen it. Or even if you have
Brendan Dolan-Gavitt
@moyix6 Feb 2025
The ultimate goal of WebAssembly is, of course, to be able to run a full copy of Chrome inside of Chrome
3
207
let A be a PPT Turing Machine with access to a random tape. output two ciphertexts to A Hell, give it the plaintexts too PPT algorithms can’t read Laugh in IND-CCA2-illiteracy
\newcommand{\femb0t}{@__femb0t2 Oct 2022
💡: Any cipher can be a secure cipher if your enemies are unable to read
2
2
11
Is it really a privacy-enhancing technology if it allows a company to collect and use data for more invasive purposes, even if the data itself is anonymized?
4
7
25
xitter.cf/RudderbuttPinto/status… it’s ok, the Torment Nexus doesn’t know *who* it’s tormenting at any given time
2
10
New Fruit-Themed Security Guide just dropped, will be posting hot takes and then a general summary here
This quoted post is unavailable.
Try viewing anyway · View on X
1
9
1
42
more replies
These guides are fantastic and I want encourage them. But also, oh multi-trillion-dollar-company, please don't treat them like they're your gift to humanity and that the security and privacy are enough or the best we can hope for 🙏 because there are officials getting spied on
1
4
and there are activists getting forensically scanned. And until that's not the case we've got to keep striving for better, because "if it's risky just don't use the technology" is less and less of an option every day.
1
2
6
good enough for journalists, for activists, for protestors, for government officials facing pegasus, then the baseline should have an upgraded threat model. Add support for confirmed contacts or similar so that IDS can't lie to me. Make iMessage for Business chat less of an
1
1
ad-hoc server-side key switcheroo. Because as it stands the baseline is good enough for almost all of us, but *not* for people facing targeted, motivated attacks. Everything from Apple v FBI back in the 10s to Pegasus now makes that clear.
1
Load more