Ring Glitch ℍ⊗ℌ
@ring-glitch.bsky.social
Cryptography. Privacy. Embedded/radio/firmware developer dealing with all its snafu.
* cr_mode@twatter
* https://ioc.exchange/@cr_mode on Mastodon
* cr_mode@twatter
* https://ioc.exchange/@cr_mode on Mastodon
Reposted by Ring Glitch ℍ⊗ℌ
had to see what this disambiguation hatnote was about and sure enough, apple's original thumbnail (before they fixed it):
November 13, 2025 at 7:26 PM
had to see what this disambiguation hatnote was about and sure enough, apple's original thumbnail (before they fixed it):
Reposted by Ring Glitch ℍ⊗ℌ
Reposted by Ring Glitch ℍ⊗ℌ
Every time I see physical attacks on TEEs, I wish someone would put out a position paper on @hdevalence.bsky.social 's "guy with a glock" model
x.com/hdevalence/s...
x.com/hdevalence/s...
October 29, 2025 at 4:46 PM
Every time I see physical attacks on TEEs, I wish someone would put out a position paper on @hdevalence.bsky.social 's "guy with a glock" model
x.com/hdevalence/s...
x.com/hdevalence/s...
Reposted by Ring Glitch ℍ⊗ℌ
Did a new one
August 7, 2025 at 6:46 PM
Did a new one
Yes blaming Flipper Zeros is on par with blaming literally any random electronics, you can build lot of it yourself.
Proxmark3 existed for 15? years and nobody really blinked since without Blueshark it's not that portable and harder to understand while also waaaaaaaaaaaaay more powerful.
Proxmark3 existed for 15? years and nobody really blinked since without Blueshark it's not that portable and harder to understand while also waaaaaaaaaaaaay more powerful.
I don’t understand how this represents a problem with the Flipper Zero rather than a stringing indictment of the car security industry. www.404media.co/inside-the-u...
Inside the Underground Trade of ‘Flipper Zero’ Tech to Break into Cars
“Kia Boys will be Flipper Boys by 2026,” one person in the reverse engineering community said.
www.404media.co
August 22, 2025 at 9:26 PM
Yes blaming Flipper Zeros is on par with blaming literally any random electronics, you can build lot of it yourself.
Proxmark3 existed for 15? years and nobody really blinked since without Blueshark it's not that portable and harder to understand while also waaaaaaaaaaaaay more powerful.
Proxmark3 existed for 15? years and nobody really blinked since without Blueshark it's not that portable and harder to understand while also waaaaaaaaaaaaay more powerful.
Exploring tracking persons via Wifi which is apparently not so uncommon now. With 2 ESP32 you can get person/movement tracking (ideal to change antennas though).
Responds to movement. Results heavily affected by Wifis around, needs more configuration.
Responds to movement. Results heavily affected by Wifis around, needs more configuration.
August 19, 2025 at 11:04 PM
Exploring tracking persons via Wifi which is apparently not so uncommon now. With 2 ESP32 you can get person/movement tracking (ideal to change antennas though).
Responds to movement. Results heavily affected by Wifis around, needs more configuration.
Responds to movement. Results heavily affected by Wifis around, needs more configuration.
Needed something faster than classic USB3 HDD, bought Kindstion 2 TB SSD, found out that the 1 TB serial write backup takes 3h35 min on HDD, 1h44 min on SSD.
Because they slow dowwn heat up ater writing more than ~200 GB slow down 10x (mesured pure write operations)
So...coolinh maybe?
Because they slow dowwn heat up ater writing more than ~200 GB slow down 10x (mesured pure write operations)
So...coolinh maybe?
August 1, 2025 at 12:58 AM
Needed something faster than classic USB3 HDD, bought Kindstion 2 TB SSD, found out that the 1 TB serial write backup takes 3h35 min on HDD, 1h44 min on SSD.
Because they slow dowwn heat up ater writing more than ~200 GB slow down 10x (mesured pure write operations)
So...coolinh maybe?
Because they slow dowwn heat up ater writing more than ~200 GB slow down 10x (mesured pure write operations)
So...coolinh maybe?
So ChatControl going on 6th time after saying 5 times "no", ProtectEU, both to break encryption legally (math...can't really).
Then there was the eIDAS voting in EU where text was secret which was illegal, but who you gonna sue? Age verification in eIDAS "ZKP should be" but not would be really.
Then there was the eIDAS voting in EU where text was secret which was illegal, but who you gonna sue? Age verification in eIDAS "ZKP should be" but not would be really.
It seems pretty obvious to me that western governments are looking at China and other countries with monitored/sealed Internet and slowly putting the pieces in place to do the same thing for their own Internets.
July 31, 2025 at 1:19 AM
So ChatControl going on 6th time after saying 5 times "no", ProtectEU, both to break encryption legally (math...can't really).
Then there was the eIDAS voting in EU where text was secret which was illegal, but who you gonna sue? Age verification in eIDAS "ZKP should be" but not would be really.
Then there was the eIDAS voting in EU where text was secret which was illegal, but who you gonna sue? Age verification in eIDAS "ZKP should be" but not would be really.
Reposted by Ring Glitch ℍ⊗ℌ
So this story is confusing because Google initially said some things that make no sense and is now saying different things. www.washingtonpost.com/politics/202...
Analysis | Google says U.K. hasn’t demanded ‘back door’ to users’ private data
Lawmaker’s letter suggests Apple might not be the only company the British government asked for special access to users’ private data.
www.washingtonpost.com
July 29, 2025 at 8:42 PM
So this story is confusing because Google initially said some things that make no sense and is now saying different things. www.washingtonpost.com/politics/202...
Reposted by Ring Glitch ℍ⊗ℌ
One of my students sent me the latest quantum factorization record, and I have to admit: I’m shook. eprint.iacr.org/2025/1237
Replication of Quantum Factorisation Records with an 8-bit Home Computer, an Abacus, and a Dog
This paper presents implementations that match and, where possible, exceed current quantum factorisation records using a VIC-20 8-bit home computer from 1981, an abacus, and a dog. We hope that this ...
eprint.iacr.org
July 13, 2025 at 2:53 PM
One of my students sent me the latest quantum factorization record, and I have to admit: I’m shook. eprint.iacr.org/2025/1237
Reposted by Ring Glitch ℍ⊗ℌ
Well, this horrible idea refuses to die so we should refuse to let it pass and start organizing again.
ec.europa.eu/commission/p...
ec.europa.eu/commission/p...
Commission presents Roadmap for effective and lawful access to data for law enforcement
The European Commission presented today a Roadmap setting out the way forward to ensure law enforcement authorities in the EU have effective and lawful access to data.
ec.europa.eu
July 5, 2025 at 5:25 PM
Well, this horrible idea refuses to die so we should refuse to let it pass and start organizing again.
ec.europa.eu/commission/p...
ec.europa.eu/commission/p...
Reposted by Ring Glitch ℍ⊗ℌ
So I figured I’d quickly write up a little section called “how to hash a message to an integer in the range 0…N-1” because I needed it for something else.
Five hours, three FIPS docs, four reviews of production signature implementations (some vulnerable to DoS) later here’s the output.
Five hours, three FIPS docs, four reviews of production signature implementations (some vulnerable to DoS) later here’s the output.
July 9, 2025 at 4:17 PM
So I figured I’d quickly write up a little section called “how to hash a message to an integer in the range 0…N-1” because I needed it for something else.
Five hours, three FIPS docs, four reviews of production signature implementations (some vulnerable to DoS) later here’s the output.
Five hours, three FIPS docs, four reviews of production signature implementations (some vulnerable to DoS) later here’s the output.
Reposted by Ring Glitch ℍ⊗ℌ
I am wildly skipping around to different sections today, because every time I write something I realize I’m missing five background sections. Here’s one of those.
June 13, 2025 at 8:13 PM
I am wildly skipping around to different sections today, because every time I write something I realize I’m missing five background sections. Here’s one of those.
Reposted by Ring Glitch ℍ⊗ℌ
I know this is a couple of days out of date, but I love it anyway.
June 14, 2025 at 3:17 PM
I know this is a couple of days out of date, but I love it anyway.
Reposted by Ring Glitch ℍ⊗ℌ
Somehow whenever “encryption is on the menu” in Europe it’s always something about how we’re going to smash encryption, not some new tech product that’s going to make Europeans independent from US tech companies. www.euractiv.com/section/tech...
EXCLUSIVE: Encryption on the menu at EU Justice Ministers debate - Euractiv
"Balancing" law enforcement access to digital communications with privacy rights will be discussed at Thursday's Council meeting.
www.euractiv.com
June 17, 2025 at 12:01 PM
Somehow whenever “encryption is on the menu” in Europe it’s always something about how we’re going to smash encryption, not some new tech product that’s going to make Europeans independent from US tech companies. www.euractiv.com/section/tech...
Reposted by Ring Glitch ℍ⊗ℌ
'Meredith,' some guys ask, 'why won't you shove AI into Signal?'
Because we love privacy, and we love you, and this shit is predictable and unacceptable. Use Signal ❤️
Because we love privacy, and we love you, and this shit is predictable and unacceptable. Use Signal ❤️
June 19, 2025 at 7:59 AM
'Meredith,' some guys ask, 'why won't you shove AI into Signal?'
Because we love privacy, and we love you, and this shit is predictable and unacceptable. Use Signal ❤️
Because we love privacy, and we love you, and this shit is predictable and unacceptable. Use Signal ❤️
Reposted by Ring Glitch ℍ⊗ℌ
github.com/meshtastic/f... @bmann.ca was shared this by the v cool Thomas Balthazar heads up for meshtastic folks!
Repeated Public/Private Keypairs
It was discovered that the flashing procedure of several hardware vendors was resulting in duplicated public/private keys. Additionally, while triaging this issue, it was discovered that the Meshta...
github.com
June 20, 2025 at 6:25 PM
github.com/meshtastic/f... @bmann.ca was shared this by the v cool Thomas Balthazar heads up for meshtastic folks!
Reposted by Ring Glitch ℍ⊗ℌ
Reposted by Ring Glitch ℍ⊗ℌ
📣 89 organizations and experts have united to send a strong message to the EU regarding its new Internal Security Strategy. We're deeply concerned about its plans for encryption and the future of digital security in Europe. www.globalencryption.org/2025/05/join...
May 27, 2025 at 11:17 PM
📣 89 organizations and experts have united to send a strong message to the EU regarding its new Internal Security Strategy. We're deeply concerned about its plans for encryption and the future of digital security in Europe. www.globalencryption.org/2025/05/join...
Reposted by Ring Glitch ℍ⊗ℌ
I’m having way too much fun writing about Bluetooth.
May 25, 2025 at 7:50 PM
I’m having way too much fun writing about Bluetooth.
Reposted by Ring Glitch ℍ⊗ℌ
Why is the EU so obsessed with blowing it on end-to-end encryption? therecord.media/european-com...
European Commission takes aim at end-to-end encryption and proposes Europol become an EU FBI
The Commission said it would create roadmaps regarding both the “lawful and effective access to data for law enforcement” and on encryption.
therecord.media
April 2, 2025 at 12:02 PM
Why is the EU so obsessed with blowing it on end-to-end encryption? therecord.media/european-com...
Interesting paper on how to use EM emanations to detect hidden cameras by their power signature, like Chipwhisperer side channels, just in radio
www.usenix.org/conference/u...
www.usenix.org/conference/u...
March 30, 2025 at 8:21 PM
Interesting paper on how to use EM emanations to detect hidden cameras by their power signature, like Chipwhisperer side channels, just in radio
www.usenix.org/conference/u...
www.usenix.org/conference/u...
Trying out TEMPEST attacks, it's work to set up parameters right, 5th harmonic of pixelclock seems to work best.
I'd also want to try deep-tempest, but gnuradio is always laggy and breaks. deep-tempest requires learning anyway.
Examples: orig screen, tempest view via SDR and a high-contrast sniff
I'd also want to try deep-tempest, but gnuradio is always laggy and breaks. deep-tempest requires learning anyway.
Examples: orig screen, tempest view via SDR and a high-contrast sniff
March 23, 2025 at 7:44 PM
Trying out TEMPEST attacks, it's work to set up parameters right, 5th harmonic of pixelclock seems to work best.
I'd also want to try deep-tempest, but gnuradio is always laggy and breaks. deep-tempest requires learning anyway.
Examples: orig screen, tempest view via SDR and a high-contrast sniff
I'd also want to try deep-tempest, but gnuradio is always laggy and breaks. deep-tempest requires learning anyway.
Examples: orig screen, tempest view via SDR and a high-contrast sniff
Reposted by Ring Glitch ℍ⊗ℌ
US officials knew about, and did not oppose, that secret UK order that tried to force Apple to weaken iCloud encryption, and now DNI Tulsi Gabbard says the UK order would violate Americans’ rights, @joemenn.bsky.social reports
www.washingtonpost.com/technology/2...
www.washingtonpost.com/technology/2...
February 27, 2025 at 12:38 PM
US officials knew about, and did not oppose, that secret UK order that tried to force Apple to weaken iCloud encryption, and now DNI Tulsi Gabbard says the UK order would violate Americans’ rights, @joemenn.bsky.social reports
www.washingtonpost.com/technology/2...
www.washingtonpost.com/technology/2...