Ethan Heilman 😼
LightNews LightNews
banner
ethanheilman.bsky.social
Ethan Heilman 😼
@ethanheilman.bsky.social
300 followers 580 following 280 posts
Have hash function, will travel
⬡ Posts about cryptology, netsec, infosec, OpenID Connect
⬡ co-founded bastionzero.com
⬡ Works on OpenPubkey: https://github.com/openpubkey/openpubkey
⬡ Website is https://ethanheilman.com
Posts Replies Media Videos
ethanheilman.bsky.social
This is how you write a bug report

lore.kernel.org/all/14502205...
In A.D. 1582 Pope Gregory XIII found that the existing Julian calendar insufficiently represented reality, and changed the rules about calculating leap years to account for this. Similarly, in A.D. 2013 Rockchip hardware engineers found that the new Gregorian calendar still contained flaws, and that the month of November should be counted up to 31 days instead.
November 12, 2025 at 9:53 PM
ethanheilman.bsky.social
How many people are there alive on this earth that actually understand web browser security?

In 2015 it seems like common knowledge among security minded engineers.

10 years later, it has increased in complexity and libraries handle the details.
November 12, 2025 at 7:02 PM
ethanheilman.bsky.social
Why is it that time.Add and time.Sub in golang are not inverses of each other.

To add 5 seconds to the current time:

time.Now().Add(5 * time.Second)

to subtract 5 seconds from the current time:

time.Now().Add(-5 * time.Second)

not

time.Now().Sub(5 * time.Second)
October 28, 2025 at 8:46 PM
Reposted by Ethan Heilman 😼
peark.es
Dallas Fed services comments are LIT this month

"generally antibusiness policies being championed by Republican lawmakers and the Trump administration"

www.dallasfed.org/research/sur...
Accommodation The government shutdown and economic malaise are taking a toll on hotel and travel demand. Administrative and support services It feels impossible to predict what the hiring and employment market will be in six months. This year has been the most challenging in 15 years of search and staffing. Candidates have failed background checks. Employers have delayed hiring, candidates have accepted counter offers, others have continued interviewing after accepting a new role. These events used to be uncommon and rare. Now they're happening on a regular basis. Revenue swings month to month are drastic. We are trying to budget and forecast, but it is impossible, and I'm on the edge of laying off an employee now. Business has felt recessionary for over a year—no wonder we knew the jobs numbers were off and kept saying there was no way they were as good as reported, and we were correct. These are very tough times for small and midsized businesses. The level of uncertainty has increased in the face of higher interest rates and borrowing costs. Layoffs in the energy sector are just now being felt, and the federal shutdown will have a compounding impact. The government shutdown [is an issue impacting our business]. Most of our customers are federal agencies. If there is a shutdown, our business suffers. Ambulatory health care services We are seeing major price escalation resistance. There are numerous factors affecting our outlook and current performance. A general downturn in the economy and economic outlook coupled with increased layoffs and significant increases in prices for day-to-day commodities have reduced demand for those seeking our pediatric urgent care services. Healthcare fatigue is also a factor post-COVID. Couple that with the frankly baseless guidance that the Department of Health and Human Services is providing, there is also a lot of confusion among potential patients of ours of sound medical judgement. With continued angst over secured overnight fin… Educational services Uncertainty about visa approval rates and H1-B visa fees will have a potentially significant negative impact. Personal and laundry services I am concerned about the government shutdown. Pipeline transportation Lower oil prices impact producer activity and uncertainty. Professional, scientific and technical services We're seeing significant uncertainty among our oil and gas service company clients. Commodity prices are down, and there is no real cause to anticipate an upturn in drilling activities. The residential market has continued its decline due to the uncertainty of the economy. Homebuilders are having a difficult time selling homes, even with the incentives they are offering, and existing homes are just sitting. The commercial market is a little better but is being held up by energy and data center transactions. We need a major adjustment in the pricing of homes or a significant reduction in the interest rate to get this market moving again. Interest rates are still too high. Reduction in regulations is improving optimism. The Guiding and Establishing National Innovation for U.S. Stablecoins (GENIUS) Act will open new opportunities. We have seen an upturn in work flowing from clients in October in consulting engineering. All of our customers are scaling back on technology spending. I feel like our clients are more apprehensive. We are writing a lot of proposals, but they are just sitting. Projects are still being planned, but the execution is being delayed. I work globally with international companies, so uncertainty is inherently high, and it will likely increase in the coming months. Four new governments in Latin America will be decided within the next six months, and such political transitions always contribute to greater economic and business uncertainty. Commodity prices adversely affecting upstream oil and gas companies coupled with potential increased costs from renewed China tariffs creates an uncertain or negative outlook. We are … Publishing industries (except internet) There is significant inflation in regular goods prices. We continue to be concerned about compounding effects of tariffs, government shutdown, reduced federal spending, wavering consumer confidence and the levels of credit card usage and delinquency (which we expect to increase), as well as the generally antibusiness policies being championed by Republican lawmakers and the Trump administration. Real estate The sentiment we see from apartment residents, owners, vendors, employees and others is neither optimism nor excessive worry. Folks are getting by OK, reallocating spending to compensate for high food prices, and they seem resigned to their fate. Immigration and Customs Enforcement (ICE) continues to terrify immigrants, and they are keeping their heads down. Few people are moving, changing jobs or expecting more. The economy feels like it's in the doldrums, and all the outrageous politics just feels like noise. Our company is doing well enough to throw a couple of big events and make improvements to properties we own. Being conservative, focusing on fundamentals and conserving cash have paid off for us. Others see us doing well, so more prospects are coming our way. We are always hopeful things are going to move forward and upward. Our goal is to survive the next six months. Rental and leasing services I don't know that any geopolitical or political conditions have changed our business outlook. The fourth quarter is typically when we do 27 percent to 29 percent of our volume. The first two quarters of the year are typically slow due to weather and manufacturers trying to manage their budgets. Tax-incentive buying pulls purchases ahead into fourth quarter 2025. Repair and maintenance We are a naturally seasonal business. Our outlook for the future is bright. Securities, commodity contracts and other financial investments and related activities Uncertainty remains uncertain. I wish we would get clarity on tariffs. We have bee… Specialty trade contractors Volatility—including interest rates, stock market fluctuations, geopolitical issues and the government shutdown—is creating poor confidence. Support activities for transportation With the current administration taking meaningful action to address foreign labor issues, the outlook for the trucking and logistics industry has improved considerably. The decline faced in recent years has been attributable to violations of federal laws, most notably allowing those not legally authorized and without English proficiency to saturate the market and to violate cabotage restrictions. We are encouraged by the renewed emphasis on enforcement and compliance. As these measures take effect and below-market labor practices are curtailed, American motor carriers will once again be able to begin breaking even and then to profit. Telecommunications Too much funding (private equity combined with the Broadband Equity, Access and Deployment program) is flowing into the broadband industry as evident by the number of broadband providers in any given area. While it has naturally increased competition, resulting in lower pricing, it is also driving irrational investment decisions. These decisions will have consequences once the broadband market begins a correction in the next three to five years. Truck transportation Our business has died. Utilities I feel better about business activity, but the threatened tariffs do not help with the business situation. Warehousing and storage General economic conditions appear to be worsening, though it's hard to put a finger on exactly where or why. We're working through 2026 budget and are expecting revenue to either stay flat or dip. We are eliminating a small number of heads, roughly 4 percent of our workforce. We expect inflation to continue to impact the cost to provide services and will be adjusting revenue in response.
October 28, 2025 at 4:09 PM
ethanheilman.bsky.social
80% of the people in the US gov that secure US nuclear weapons have been sent home by the admin.

"NNSA has never before furloughed federal workers during funding lapses"

One of NNSA jobs is to kill terrorists if terrorists try to steal nuclear weapons.
www.newschannel10.com/2025/10/20/n...
National Nuclear Security Administration to furlough staff, including at Pantex
The federal agency Pantex is under, the National Nuclear Security Administration (NNSA), will furlough staff as the government shutdown continues.
www.newschannel10.com
October 27, 2025 at 2:58 PM
ethanheilman.bsky.social
Cyberpunk 2077 is still charging $60 for a game that came out in five years ago (2020).It doesn't feel unfair to me because they have been adding content over the last years in the form of content and support. Is this a trend? Other software doesn't get cheaper with age, why do games?
October 26, 2025 at 3:52 PM
Reposted by Ethan Heilman 😼
ryanlcooper.com
been reading a lot of medieval English history recently and it's instructive as to why the Anglo political tradition evolved away from monarchy. every 4th king or so would turn out to be a murderous lunatic, people got sick of it
tiredgenerally.bsky.social Matt @tiredgenerally.bsky.social · 23d
it is kind of interesting how not only do they openly yearn for monarchy, but they also want a system of monarchy more absolute than almost any of the historical reference points where the president can tax, spend, declare war, even suspend habeas corpus at will
ericmgarcia.bsky.social Eric Michael Garcia @ericmgarcia.bsky.social · 23d
Johnson blames the No Kings protests. Says “it is quite ironic.” Johnson says “if President Trump was a king” the government would be open.
October 20, 2025 at 2:19 PM
Reposted by Ethan Heilman 😼
indivisible.org
After a week of ridiculous Republican smears and Trump claiming that “very few people are going to be there,” you just made history. #NoKings
(around an image of the No Kings logo) IT’S OFFICIAL Nearly 7 million people have attended today's peaceful protests, which makes No Kings Day the biggest single-day protest against tyranny in American history! With more than 2,700 lawful and peaceful protests across all 50 states, No Kings Day was 14 times larger than both of Trump's presidential inaugurations (combined).
October 18, 2025 at 9:57 PM
Reposted by Ethan Heilman 😼
davidjbier.bsky.social
An ICE agent, who is being arrested for drunk driving and nearly killing his little kids & others, tries to stop the arrest by racially profiling the officers arresting him. Amazing to watch the courtesy given to him as he is belligerent and uncooperative
October 17, 2025 at 3:11 PM
Reposted by Ethan Heilman 😼
eprint.ing.bot
Graeffe-Based Attacks on Poseidon and NTT Lower Bounds (Ziyu Zhao, Antonio Sanso, Giuseppe Vitto, Jintai Ding) ia.cr/2025/1916
Abstract. Poseidon and Poseidon2 are cryptographic hash functions crafted for efficient zero-knowledge proof systems and have seen wide adoption in practical applications. We introduce the use of the Graeffe transform in univariate polynomial solving within this line of work. The proposed method streamlines the root recovery process in interpolation attacks and achieves several orders of magnitude acceleration in practical settings, enabling a new and more efficient class of attacks against Poseidon targeting round-reduced permutations and constrained input/output instances. We release open-source code and describe our method in detail, demonstrating substantial improvements over prior approaches: reductions in wall time by a factor of 2¹³ and in memory usage by a factor of 2^(4.5). Memory-access costs for NTTs turn out to be a dominant barrier in practice. And we prove that this cost increases at least as the 4/3-power of the input size (up to logarithmic factors), which suggests the commonly used pseudo-linear cost model may underestimate the true resource requirements. This behavior contrasts with multivariate equation solving, whose main bottleneck remains finite-field linear algebra. We argue that, when selecting parameters, designers should account for interpolation-based attacks explicitly, since their practical hardness is determined by different, and sometimes stronger, resource constraints than those of multivariate techniques. Image showing part 2 of abstract.
October 17, 2025 at 2:28 AM
Reposted by Ethan Heilman 😼
matthewdgreen.bsky.social
This is amazing research by Nadia Heninger and her co-authors Wenyi Morty Zhang, Annie Dai, Keegan Ryan, Dave Levin and Aaron Schulman. TL;DR a huge number of satellite links over our heads are totally unencrypted. satcom.sysnet.ucsd.edu
🛰️ SATCOM Security
Research project homepage for SATCOM Security: papers, source code, and recent satellite communications vulnerabilities.
satcom.sysnet.ucsd.edu
October 14, 2025 at 1:16 AM
ethanheilman.bsky.social
Web Application Integrity, Consistency, and Transparency (WAICT)
blog.cloudflare.com/improving-th...
Improving the trustworthiness of Javascript on the Web
Today, there's no way to audit a site’s client-side code as it changes, making it hard to trust sites that use cryptography. We preview a specification we coauthored that adds auditability to the web.
blog.cloudflare.com
October 16, 2025 at 2:37 PM
Reposted by Ethan Heilman 😼
taliajane.bsky.social
Nobody wants it as a story but I have multiple NYPD sources who voted for Mamdani, are eager for his win in November, and who say their colleagues quietly feel the same.

They like that he wants NYPD to focus on crime, not quality of life enforcement.
misoshnik.bsky.social Mark Misoshnik 🏴 @misoshnik.bsky.social · Oct 11
Lmao is this supposed to be a bad thing?
A tweet from Bari Weiss that says “"It's shaken me to my core," a lieutenant said of Mamdani's unexpected victory in June. "The absolute dread I feel is palpable. " Today in @TheFP our @Olivia_Reingold talks to the cops who say they will walk if Zohran Mamdani is elected in November:”
October 12, 2025 at 6:23 PM
Reposted by Ethan Heilman 😼
sneptech.bsky.social
October 10, 2025 at 4:51 AM
ethanheilman.bsky.social
@marthawells.com Have you ever played or looked at Citizen Sleeper? If so what do you think about it? It seems to have been inspired by MurderBot (in a good way).

en.wikipedia.org/wiki/Citizen...
Citizen Sleeper - Wikipedia
en.wikipedia.org
October 7, 2025 at 2:21 PM
Reposted by Ethan Heilman 😼
rivertam.bsky.social
By 2028 this will be a voting issue
October 2, 2025 at 6:27 PM
Reposted by Ethan Heilman 😼
buffalocia.bsky.social
If the President can raise his own revenues and direct his own spending without congressional approval we are squarely in the only situation the Constitution was actually drafted to avoid: English civil war territory
carlquintanilla.bsky.social Carl Quintanilla @carlquintanilla.bsky.social · Oct 1
File this under “essential function.” 🤡

#Shutdown
abcnews.go.com/Politics/liv...
October 1, 2025 at 6:56 PM
Reposted by Ethan Heilman 😼
laurenmeidasa.bsky.social
Longtime Pentagon reporter Helene Cooper said that she can't find any military officials who attended the meeting in Virginia with President Donald Trump and Secretary Pete Hegseth and liked what they heard.

www.rawstory.com/trump-milita...
'Disbelief': Pentagon reporter can't find one military official who liked Hegseth's speech
Longtime Pentagon reporter Helene Cooper said that she can't find any military officials who attended the meeting in Virginia with President Donald Trump and Secretary Pete Hegseth and liked what the...
www.rawstory.com
September 30, 2025 at 8:30 PM
ethanheilman.bsky.social
3b1c9115a64fd18e36f3ae7a3fe74147a08e90446373f9dde4379d487dba1ada
September 30, 2025 at 4:25 PM
Reposted by Ethan Heilman 😼
iwriteok.bsky.social
one thing that is true for everyone reading this: unless something changes dramatically the number of people who agree with you on what basic facts constitute "reality" will shrink every year for the rest of your life
September 24, 2025 at 11:46 PM
Reposted by Ethan Heilman 😼
executiveotaku.bsky.social
My car gives me an overheat warning. Swiftly I eject the warp core, the smouldering battery sliding and skipping across the street, straight into the storefront of a nearby cafe and starting what would later be called The Great Fire of 2034.
September 24, 2025 at 6:17 PM
Reposted by Ethan Heilman 😼
erosalie.infoepi.com
Looked at my data collections for state-backed activity. If the report were a picture:
September 13, 2025 at 11:47 PM
Reposted by Ethan Heilman 😼
justtheletteru.bsky.social
🎉 A huge congrats to Tufts grad Edgar Vidal on the first (of hopefully several) paper from our FIRESIDE (Far-InfraRed Extragalactic Survey and Instrument Design Exploration) project! It has been submitted to ApJ and is out on arXiv today! 🔭🧪 #JWST #MIRI #obscuredAGN #FIR 1/

arxiv.org/abs/2509.15331
Modeling the JWST MIRI Counts, Insights Into the Source Properties and Role of Dust-Obscured AGN
Understanding the co-evolution of galaxies and active galactic nuclei (AGN) requires accurate modeling of dust-obscured systems. Recent surveys using the Mid Infrared Instrument (MIRI) onboard the Jam...
arxiv.org
September 22, 2025 at 6:01 PM
Reposted by Ethan Heilman 😼
irhottakes.bsky.social
Don't worry guys, I have a genius plan to stop political violence.

Step 1: Make elite consensus be that the mild peaceful disapproval be treated as equivalent to violence.

Step 2: Have the government openly violate the law in a manner which proves it nonbinding.

Step 3: Crash the economy.
September 18, 2025 at 12:30 AM
Reposted by Ethan Heilman 😼
atrupar.com
KAMLAGER-DOVE: Dylan Roof, who followed white supremacist propaganda, murdered 9 Black parishioners in 2015. Do you deny this?

PATEL: I'm sorry. Dylan Roof? Can you give me more information?

KAMLAGER-DOVE: You're head of the FBI
September 17, 2025 at 5:02 PM