Benjamin Beurdouche

Security Researcher and Cryptography TL @Mozilla / Tweets are my own. IH-SNC7

[Firefox 🔥 @firefox]

Firefox support for uBlock Origin is not going anywhere.

[Julien Vanegue @jvanegue]

Formal verification has never been more important now that LLMs take a central place in code generation. The psychological effect of assuming capability and best intention from a human does *not* translate to the setting where a robot writes the code.

[Éric Bothorel #FluctuatNecMergitur @ebothorel]

Le chiffrement de bout en bout des communications ne saurait être fragilisé pour permettre des accès par des tiers, fûssent-ils les services de rens.
C'est tout un pan de la confiance dans les messageries qui s'en trouverait questionné.

[Jan-Ivar Bruaroey @jibrewery]

This month's Advancing #WebRTC from #Mozilla dives into the new standard video processing APIs MediaStreamTrackProcessor and VideoTrackGenerator. We cover differences across browsers, and how to polyfill the gap in all browsers, including #Firefox!

https://t.co/iXW2JFmXr5

[Anthony Leverrier @letonyo]

6100 atoms! Feels like quantum computers with thousands of qubits are just around the corner
https://t.co/jJCNfvJgUg

[Real World Crypto @RealWorldCrypto]

The program for RWC 2024 is live! https://t.co/Wc2zD6gZDP

[Ryan Hurst @rmhrisk]

I am super excited to see Apple engaging in this work—it is outstanding. However, I have been secretly hoping that both Apple and Google would adopt MLS (Messaging Layer Security) as part of their plan to both support RCS (Rich Communication Services). While the evolution of the iMessage protocol does not rule out this possibility, it seems to diminish the likelihood that any version of RCS protocol will become MLS and universally adopted. Conversely, it is now conceivable that RCS might integrate PQ3. Regardless of the long-term outcomes, it is clear that messaging solely through clear text or employing hop-to-hop encryption is not sufficient. Eventually, an end-to-end (e2e) messaging protocol will need to be incorporated into RCS.

[Nick Sullivan @grittygrease]

This was an amazing process to see. RFC 9420 is a huge achievement.

@raphaelrobert @beurdouche @JonMillican @Emad_Omara @katrielalex @rlbarnes and other contributors like @JoelAlwen @BrenTwentyTen and others really pulled together to make something great.

[Théophile Wallez @twallez]

MLS is a new secure group messaging protocol, soon coming up in a standard. https://t.co/lyOnw1LDe4
It aims to have strong confidentiality properties, with fancy names like "forward-secrecy" or "post-compromise security"!
How do we prove them?

[IACR @IACR_News]

#ePrint TreeSync: Authenticated Group Management for Messaging Layer Security: T Wallez, J Protzenko, B Beurdouche, K Bhargavan https://t.co/jvDN8jrjlh

[Benjamin Beurdouche @beurdouche]

@Serianox_ I think he meant to say that it shouldn’t be called a nonce because it is an actual secret and not a public value ?

[Jonathan Protzenko @_protz_]

My student @Kachoc_ and I are thrilled to announce Aeneas, a new verification toolchain for Rust programs. It's on arxiv https://t.co/khZ02dAVLT and conditionally accepted at ICFP 2022... 🧵

[Nikhil Swamy @lambdaNik]

The F* book is beginning to look more like a book! Lots more to go, but funny how seeing it in a different format really makes it more a book in my head.

https://t.co/1DM9P9sKAe

restructuredText is pretty nice for targeting both html and latex.

#fstarlang

[Charles Guillemet @P3b7_]

Yet another evidence that cryptography needs to pass the test of time.

📜 https://t.co/3HW1lQCtXW

[Frank @jedisct1]

JavaScript…

[Christian Janson @chrjanson]

The Security Standardisation Research Conference (SSR) will take place on June 6 in Genoa and is co-located with IEEE EuroS&P
@IEEEEUROSP. The submission deadline (firm) will be March 4 and all details can be found at https://t.co/845dYfwNDE.

[Bernard Ourghanlian @Ourghanlian]

CHERI provides fine-grained spatial memory safety at a hardware level. https://t.co/G5gbGuAk0r
#cybersecurity #ConfidentialComputing

[🎻 ➡️ BlueSky @ericlaw]

Hey, @CNN: Support HTTPS for all URLs please.

[Eric Rescorla @ekr____]

We can do a lot for DNS security by protecting the link between the endpoint and the recursive resolver, a point @tqbf has been making for years. Whether it's DoH, DoT, or DoQ doesn't really matter that much. https://t.co/Ucptq8ON2e