Tootfinder

I have to say I preferred the original The Muppet Show. This reboot is pants.
#ycombinator

So #Fortipwn is now declared #secure.
(a bit tongue-in-cheek here, they have had a not that great track record over the last years, just like Ivanti, Palo Alto et al)

so this password manager paper: https://eprint.iacr.org/2026/058 starts with:
> We examine the extent to which security against a fully malicious server holds true for three leading vendors who make the Zero Knowledge Encryption claim: Bitwarden, LastPass and Dashlane
with

Zero Knowledge (About) Encryption: A Comparative Security Analysis of Three Cloud-based Password Managers
Zero Knowledge Encryption is a term widely used by vendors of cloud-based password managers. Although it has no strict technical meaning, the term conveys the idea that the server, who stores encrypted password vaults on behalf of users, is unable to learn anything about the contents of those vaults. The security claims made by vendors imply that this should hold even if the server is fully malicious. This threat model is justified in practice by the high sensitivity of vault data, which makes …

🤦🏿‍♀️ Zero Knowledge (About) Encryption: A Comparative Security Analysis of Three Cloud-based Password Managers
#security

looking at the program of #realworldcrypto starting tomorrow in taipei: https://rwc.iacr.org/2026/program.php
i gotta say, i'm becoming a fan of Tom Ristenpart and his work.

RWC 2026 program
Real World Crypto Symposium

#OVHcloud #Kubernetes Review: Europe's Quiet Powerhouse
https://www.eucloudcost.com/blog/ovhcloud-

🇺🇦 #NowPlaying on BBCRadio3's #NightTracks
Tommaso Iacoviello, Tommaso Iacoviello, Nazareno Caputo, Nicolò Francesco Faraglia, Ferdinando Romano & Saverio Cacopardi:
🎵 Garzaie (extract)
#TommasoIacoviello #NazarenoCaputo #NicolòFrancescoFaraglia #FerdinandoRomano

🇺🇦 #NowPlaying on KEXP's #Expansions
Atjazz:
🎵 Cardiac (feat. OVEOUS)
#Atjazz
https://atjazz.bandcamp.com/track/cardiac-feat-oveous-2
https://open.spotify.com/track/7f4MPAMimRZumwD2nMUB6C

there seems to be some ongoing feud between @… and the @… people https://

The Verification Theater: When Formal Methods Create False Assurance in Cryptographic Libraries
Formal verification of cryptographic implementations is frequently presented as providing "the highest level of assurance" against implementation defects. We examine this claim through a case study of Cryspen's libcrux and hpke-rs, two cryptographic libraries that are marketed as formally verified and high-assurance. We examine five vulnerabilities across these libraries. The first, a platform-dependent cryptographic output failure in SHA-3 intrinsics discovered by an independent researcher in…

@… talk at #realworldcrypto is very inspired, entertaining and deserves the utmost respect for what he built/done in lebanon. am very impressed how far he gone from his "humble" beginnings. kudos.

RWC 2026 program
Real World Crypto Symposium