zmanian

I'm pretty sure magma is basically the original Lavabit code.

The thesis here is that having a personalized healthy baseline for many bookmakers will be far more powerful than comparing a diagnostic against population based averages.

Also that higher time frequency I the data will also be revealing.

There is some research in support of this idea[1] but it remains highly speculative.

[1]http://med.stanford.edu/news/all-news/2012/03/revolution-in-...

The noise protocol is great candidate for an everything crypto protocol.

http/2 and TLS1.3 are great but make some assumptions that might not be right for everything.

Whats App is using Noise now in their apps.

The poor drafting of the bill is reflective of lack of support from groups who have the expertise to produce a more realistic bill like NSA lawyers. The bill reflects the lack of cooperation from the Intelligence Community that has been reported.

Technically literate folks need to treat encryption regulation the way gun enthusiasts treat gun control. This must become utterly politically toxic to get involved with.

Take whatever money you were planning on spending to support Democrats this election and give it to Planned Parenthood and the EFF until this bill is withdraw

What Silicon Valley needs to make it's voice heard here and to do that they need to pull back donations not just to Feinstein but to the Democratic Party until this disaster is withdrawn

I'd suspect that the hardpart wouldn't be finding payloads that can surived the G forces but building a rocket that that can. If the rocket could be stored in in-compressible fluid,then the mechanism to eject the rocket from fluid would need to be safe against super high g forces.

Yes binary transparency for package managers is extremely needed esp because we've been widely publicizing this vulnerability a lot now with no real fix.

Joanna has proposed a model where we minimize the trust we put in x86 with a peripheral. Seems like a plausible path forward to me.

http://blog.invisiblethings.org/2015/12/23/state_harmful.htm...

I'm super excited to see a Mandarin speaking team building something in Spanner class of databases.

Intel ME checks to see if a certain portion of the BIOS flash memory is writable before it allows the main OS to boot.

What x86 Chromebooks do is they allow that region to be writeable but then zero that region on every boot. If your ME was backdoored, it was shipped that way from the factory.

It's so disappointing that Intel undermined the entire trusted computing stack for some unproven ideas of around ME revenue generating opportunities.

Tor 224 proposes moving hidden service addresses to full ed25519 keys rather than truncated hashes of RSA keys amongst other things.

https://gitweb.torproject.org/torspec.git/tree/proposals/224...

In 2013, the initial Snowden documents instantly clarified for me that mass surveillance was the most pressing threat to democracy.

I've been working loosely with EFF and ACLU on Surveillance issues for nearly three years.

The process of transitioning from passive interest to part time activism wasn't easy as no on ramps really existed. I had to build them myself.

I'm hoping EFA will become one of those on ramps.

I'd read it as they really want to cancel but it looks better to judge to postpone now and they say later we hacked the phone ourselves or we broke the phone and now don't need Apple anymore.

Dherman is the founder of Mozilla Research and it is spare time project for him.

There is a fair amount of activity in their slack.

https://rustbridge.slack.com/messages/general/

which you can join from here

http://rustbridge-community-slackin.herokuapp.com/

It would be great to connect this work up with the Rust Bridge project. https://github.com/rustbridge

While Hardware is often perceived to be "harder" than software.

I feel like the NextTeam where right about the system specs for graphically driven OO environment. It took them 20 years to really get their software environment to the point where developers could produce compelling experiences. In that time the same specs shrunk from a table top cube to a pocket size computer.

Leaving out this context from Bloomberg article is negligent on the part of the journalist...

Totally agree with you.

Signal for iOS desperately needs a new maintainer to replace Fred.

Here is the tracking issue for data usage.

https://github.com/WhisperSystems/Signal-iOS/issues/866

Given the security properties of Rust, it would be pretty compelling to use Servo over Tor

Police should not be accorded any presumption of correct behavior or professionalism. Any use of force by state actors should be treated with maximum skepticism.

This has never made any sense to me. What is the threat model? In almost any case where you can use QKD, it would be cheaper to send a courier with locked/handcuffed brief case.

Cryptographers are generally not interested in using quantum physics to achieve secure communications

Cryptographers interested in encryption schemes that use mathematical structures that are not amenable to any known quantum algorithm. Lattices, Ring Learning With Error

Cryptographers are also interested in how Quantum Computers will scale to large sizes. It will be important to understand what the largest quantum computers that can practically be built are.

What was the process of learning about side channels and techniques for mitigating them when developing libsecp256k1?

It's an area I'd love to better understand.

This is really neat.

How does a system like Hopper compare to the Ethereum Virtual Machine?

I've got a Gotenna and it's basically works as advertized and I'm pretty happy with it.

http://www.gotenna.com/

The thing you ideally want from a language is the ability to benefit from an ecosystem adding functionality, teaching, open sourcing libraries etc.

The Python ecosystem seems healthy to me. Interesting things are happening in the language around incremental typing and async.

Python seems like the language of choice for binding C and C++ libraries.

Python devs seems widely in demand.

There is definitely a pullback in using Python in performance critical conditions where Go seems to be making huge progress.

This bill was extremely close to becoming law in 2013 before Snowden. The nice thing that happened in the meantime is we got a stronger law passed in California that applied to all digital service customer information and not just messages.

We think what the Intel Community wants in this bills is a PRISM like program for UK law enforcement and GCHQ.

https://www.washingtonpost.com/world/national-security/the-b...