Filippo Valsorda

filippo.abyssdomain.expert

20 October 2026 17:54

🚨 Six WebPKI Intermediate CAs are compromised. This is bigger than Heartbleed, but a client-side issue. Anything that verifies certificates against public roots, like most TLS clients, is/was affected. Details, live test, patched versions and workarounds at emudhra.we-have-a-problem.com Act now.

Sam Jaques

sejaques.bsky.social

20 October 2026 00:21

Call for papers for PQCrypto 2027, here in Waterloo, Canada! pqcrypto2027.ca. Please submit your work related to post-quantum cryptography in all forms; see the website CFP for more details. Deadline Nov 17 (abstract), Nov 24 (full paper)

Sophie Schmieg

sophieschmieg.infosec.exchange.ap.brid.gy

16 October 2026 21:38

Finally, a good use case for an LLM: sort brute force search phrases by likelihood, in order to finally lay to rest one stupid conspiracy theory. I think @filippo had something on this? https://www.anthropic.com/research/ecdsa-curve-origins

Fredrik Dahlgren

fegge.bsky.social

16 October 2026 21:38

Anthropic used an internal model to reverse engineer the FIPS 186-2 ECDSA parameter generation, which has fueled conspiracy theories for over 20 years. www.anthropic.com/research/ecd...

Filippo Valsorda

filippo.abyssdomain.expert

16 October 2026 21:38

Anthropic found the origin of the NIST elliptic curve seeds: they were generated with drand48()! No one was seriously worried, but this should put some FUD to rest, completing the NIST ECC rehabilitation arc… just in time to be retired in favor of PQ. Also, we raised $36 Ki for ISRG. Yay!