Tootfinder

For Linux users on servers/personal computers, do you use full disk encryption (FDE), if so did you know about these performance tweaks? #luks #linux
I found out after using full disk encryption on my Linux devices for a long time that there are these tweaks that make it soo much more effici…

from my link log —
Reducing metadata leakage from encrypted files with PURBs.
https://nikirill.com/publication/purbs/
saved 2019-12-31 https://d…

Reducing metadata leakage from encrypted files and communication with PURBs | Kirill Nikitin's Personal Page
Most encrypted data formats leak metadata via their plaintext headers, such as format version, encryption schemes used, number of recipients who can decrypt the data, and even the recipients’ identities. This leakage can pose security and privacy risks to users, e.g., by revealing the full membership of a group of collaboators from a single encrypted e-mail, or by enabling an eavesdropper to fingerprint the precise encryption software…

«Your End-to-End Encrypted Messages:
Aren't As Secure As You Think
Here's what end-to-end encryption protects—and what it doesn't.»
I know, this is not a new topic for most of you here, but you can forward it outside of the Fediverse ;)
💬 https://lifehacker.com/tech/en…

Your End-to-End Encrypted Messages Aren't As Secure As You Think
Messaging apps like WhatsApp, Signal, and iMessage all offer end-to-end encryption to protect your communications from third parties. But it isn’t foolproof.

Anthropic says Claude Mythos Preview was able to break a weaker version of AES and it orchestrated another improved attack against HAWK cryptographic system (Dustin Volz/New York Times)
https://www.nytimes.com/2026/07…

An Anthropic Claude AI Model Finds Flaws in Tough-to-Crack Encryption Algorithms
Claude Mythos Preview discovered new attacks in testing against weakened cryptographic algorithms, which protect online financial transactions, private communications and more.

from my link log —
Benchmarking symmetric encryption (AEAD) in Rust.
https://kerkour.com/rust-symmetric-encryption-aead-benchmark/
saved 2021-11-11

Benchmarking symmetric encryption (AEAD) in Rust
As we saw last week, when performing symmetric encryption you should use Authenticated Encryption with Additional Data (AEAD) which provides stronger guarantees than block ciphers.

Lately I installed Fedora Cosmic, and I remembered OpenSuse offered this whole setup integrated in the installer, with only the Cosmic Desktop to be added. This guide describes all that, from ISO to Desktop, and how to get there. Have fun!
#cosmic #opensuse

Each Saturday, Metacurity offers its subscribers a run-down of the top infosec-related long reads we couldn't get to during the week's news crush.
This week's selection covers
--TP-Link is fighting for its life,
--Quantum's threat to RSA encryption could be soon,
--How Russia's GPS spoofing could destroy us all,
--How cops and the courts relied on a stalker's digital evidence,
--The safety and security risks of AI distillation

Verifying reality: Best infosec long reads 5/30/26
TP-Link is fighting for its life, Quantum's threat to RSA encryption could be soon, How Russia's GPS spoofing could destroy us all, How cops and the courts relied on a stalker's digital evidence, The safety and security risks of AI distillation

My old backup solution crapped out earlier this year (it completely forgot my configuration, and don't accept the config files I had exported - or possibly I didn't save the right encryption password for these files).
So I guess I'll have to restart the offsite backup process. Unfortunately, the upload speed I can get here is ... not great.

Huh. Did Paxton’s wife catch him cheating by sniffing #WhatsApp? 😂
https://arstechnica.com/security/2026/05/texas-ag-sue…

Texas AG sues Meta over claims that WhatsApp doesn't provide end-to-end encryption
Critics note a lack of factual support in lawsuit filed by US Senate candidate.

“For security leaders, the most immediate impact comes from the cryptography order, which establishes federal migration deadlines for quantum-resistant encryption, directs agencies to inventory cryptographic assets, and signals future procurement requirements for government contractors.”
Check out my latest CSO piece for more details.

Trump sets post-quantum crypto deadlines, launches broader federal quantum initiative
New executive orders direct agencies to accelerate quantum-resistant encryption efforts and lay the groundwork for contractor compliance as the White House warns adversaries are already collecting encrypted data for future decryption.