ﷺ HavenLabs ﷺ

@cryptohaven's nonprofit research cadre ° birthplace of @cryptostorm_is & @cleanvpn ° focus on: network #injectionattacks x.509/ASN1 vulns #trojancerts #peakVPN

[ﷺ HavenLabs ﷺ @HavenLabs]

We're providing tech/ops support to a small activist team releasing 1+ gigs of leaked Telegram logs exposing 20 or so people who torture animals to death for fun & video it.

We're short expertise in:

1. .onion red team
2. site backend (searchable, etc.)
3. data modelling
{more}

[Daniel J. Bernstein @hashbreaker]

@hanno See https://t.co/sAYtGjl6zQ (from @hyperelliptic and me), which says in §1 that "unnecessary complexity in ECC implementations" creates "ECC security failures", and says in §11 that allowing run-time curve choices causes "obvious damage to implementation simplicity". Told ya so.

[ﷺ HavenLabs ﷺ @HavenLabs]

What would be great is if this app shared a portion of its advert revenue w/ the underlying service & thereby helped defray her operating costs.

https://t.co/Y2xdDo5qPa

[ﷺ HavenLabs ﷺ @HavenLabs]

"Eyes in the Sky: The Secret Rise of Gorgon Stare & How It Will Watch Us All."

"Fundamental to liberal democracy is the ability to have sacrosanct private spaces... where our own personal lives exist, where we are able to pursue our dreams & passions."

https://t.co/iFw0hlbWq5

[Derek @Dwek__]

@campuscodi It even worked on my Amazon Fire TV stick.
Works well on both USB and network connected devices.
- I wonder if the stick support port forwarding? 8-)

[‍‍‍‍ ‍‍‍‍ ‍‍‍‍يِ DB LeConte-Sp̜̮ink ็็้้ܝܵܢ‍‍‍‍ @LeConteSpink]

Ran out of (oral) chemo over the weekend (long story of logistics errors straight up the supply chain) so it's been 2 days off... wow, so THIS is what non-chemo life feels like?

You don't feel like you're taking poison every 12 hours - you feel GOOD?

This is very different.

[ﷺ HavenLabs ﷺ @HavenLabs]

It's almost as if... Facebook is evil?

Yeah, that's it. Evil.
That's the word.

[ProPublica @propublica]

A few months ago, Facebook executives asked us to shut down our project. Our project continued.

Then in January, it stopped working after Facebook made technical changes to their code. https://t.co/hcEYBYXVw9

[° Pattern_Juggled ° @cryptostud]

This goes back decades: bragging about hosting a BBS on some cobbled-together hot mess of a machine was a thing back then, as well.

Mostly harmless, & simply an affectation many of us picked up back when hardware cost vast $$ & thus making do w/ cheap allowed humans to use tech.

[Joseph Lorenzo Hall, PhD @JoeBeOne]

"Germany mulls giving end-to-end chat app encryption das boot: Law requiring decrypted plain-text is in the works" https://t.co/Xk2McEQVce

[Perry E. Metzger @perrymetzger]

@matthew_d_green She's risking going to prison for most of the rest of her life for what has been an unquestionably important and beneficial service for the world. The least we can do is to stop feeding the people who want to put her there.

[Perry E. Metzger @perrymetzger]

@matthew_d_green Ignoring the academic progress she's helped, Alexandra Elbakyan has saved at least thousands and possibly tens of thousands of lives. To reward her, the courts made her a fugitive. That's the crazy part. We need to honor her sacrifice by ceasing to feed the publishing paywalls.

[Nick Sullivan @grittygrease]

Cool! A new paper presented at EUROCRYPT just showed how you can create a *publicly verifiable* blind signature from an elliptic curve! It takes an extra round trip, but seems to resolve the federation issues inherent in Privacy Pass’s VOPRF. https://t.co/ykJmDIzbdb

[shubs @infosec_au]

@iangcarroll https://t.co/d9AL0lRm0B

[Ian Carroll @iangcarroll]

Today I learned that voicemail uses IMAP? And you can text people a special message that makes their phone connect to your IMAP server?!

[Matthew Green @matthew_d_green]

I realize that what I really need most for my mental health is a break from today’s cryptocurrency community. It used to be interesting tech with some opportunity for scammers. Now the scammers don’t even have to try.

[Filippo Valsorda @filippo.abyssdomain.expert @FiloSottile]

I was going to announce a newsletter, but instead I found an XSS in the service I'm using for it, so now the sign up page is a Proof of Concept and I'm not sure this story has a moral.

[Tony "Abolish ICE" Arcieri 🦀🌹 @bascule]

@MihailoBjelic @secparam @badcryptobitch Can we implement Fiat-Shamir on top of fiat-crypto (as in codegen by fiat) as part of a privacy-preserving fiat cryptostablecoin?

[Natalie Silvanovich @natashenka]

My first remote iPhone bug! https://t.co/cQu84UslIz

[Costin Raiu @craiu]

USCYBERCOM posted a new malware sample, currently 2/71 on VT (Kaspersky+Zonealarm). Looks like a Sofacy tool: https://t.co/LFyoz2DrTa

[Florian Roth ⚡️ @cyb3rops]

Everyone interested in the APT28 sample uploaded by USCYBERCOM yesterday with AV detection rate of 17/69 may find it disturbing that another, slightly modified sample was uploaded in the evening wit AV detection rate of 2/67

#1
https://t.co/eVlVSpdaPQ
#2
https://t.co/6aX8rW2PMS

[Ryan Hurst @rmhrisk]

"In conclusion, I recommend the following: Remove the Certinomis - Root CA from the Mozilla root store in an upcoming NSS release." https://t.co/NWLGM7O0Pl