Stan

I am a software engineer and a health nut with big dreams and deep affection for cryptography and computer security

[Stan @pradqdo]

In contrast to the threat quantum computing poses to current public-key algorithms, most current symmetric cryptographic algorithms and hash functions are considered to be relatively secure against attacks by quantum computers. https://t.co/sTrXnH0Jt7

[Stan @pradqdo]

Facebook data breach: 87 million user profile details compromised.

Under Armour data breach: 150 million user records hacked from the MyFitnessPal app.

Orbitz/Expedia data breach: 880,000 users' personal information stolen https://t.co/97qAkz2zBi

[Stan @pradqdo]

We should not let this happen. Easier file security tools should be developed so sensitive health care information can be protected. https://t.co/jp9Ha086JH

[Stan @pradqdo]

The hysteria continues with PGP’s EFail vulnerabilities. The issue gets complicated when more exploits target specific client vulnerabilities. Because the OpenPGP standard is vague enough the client implementations could only do it wrong. https://t.co/8a9CQluVG5

[Stan @pradqdo]

The reality is that Security is hard. Even after thousand of eyes have looked into the OpenPGP spec and many years of adoption and evolution of the protocol have passed, an attack with this magnitude is found. It’s time to re-imagine Secure e-mail. https://t.co/AnAnhVTxR9

[Stan @pradqdo]

Russia’s decision to block Telegram over the dispute of encryption keys is a move in the wrong direction for security and privacy. Governments are getting more aggressive against encryption technologies they can’t surveil. What’s the alternative? https://t.co/gC7uhxkVLz

[Stan @pradqdo]

@paulvixie Ah, of course that would be ideal if you’re up to the challenge of running your own DNS. I should look into it.

[Stan @pradqdo]

I finally set up DNS over TLS using cloudflare’s DNS 1.1.1.1 and stubby. It works like a charm. This should be the standard going forward for enhanced privacy and security.

[Stan @pradqdo]

@paulvixie Haven’t tried that. I am not sure what the benefit would be. But I see that Forward-confirmed reverse DNS (FCrDNS) can be used for authentication.

[Matthew Green @matthew_d_green]

This pretty much sums up RSA. https://t.co/B3CMjxOae4

[Stan @pradqdo]

@matthew_d_green I saw their booth at the RSA Conference. They were right across from LastPass which was funny.

[Matthew Green @matthew_d_green]

I know of at least two vulnerabilities in Keeper Security. Researchers are so intimidated by that company’s legal threats that they won’t publish or even disclose to them. Don’t use their products.

[Stan @pradqdo]

An improvement over the protection of private keys using threshold cryptography where the functions (i.e signatures or decryption) are distributed so that a predetermined number of parties must cooperate in order to correctly perform the operations.

https://t.co/L7cZADwka3

[Stan @pradqdo]

An interesting take on globally unique identifiers that have intrinsic social values. The social aspect of unique mnemonics and usernames precludes many systems to identify users correctly based on relative names. https://t.co/EFyHJz0FcT

[Stan @pradqdo]

The Risks of Key Recovery Key Escrow and Trusted Third Party Encryption

https://t.co/ZrDeq8YDML

[Stan @pradqdo]

Google scares me. It is tracking and recording everything I do for profit. It released the Activity Recognition API? https://t.co/CT1IIUJNtj

[Stan @pradqdo]

Signal released a stand-alone desktop app. Now they need to get a tablet app for complete functionality. https://t.co/bZ0sw1amca

[Stan @pradqdo]

Infineon, the leading security chip producer, has a devastating flaw triggered by the use of an old crypto library. https://t.co/ORMrVqdPdD

[Stan @pradqdo]

A new research shows Java’s challenges in writing secure apps: crappy docs, complex APIs and bad SO advice. https://t.co/jSclSjJmik

[Stan @pradqdo]

Russia is becoming extremely anti-encryption. I wouldn’t trust their software anymore. It is a shame. https://t.co/7Q7ui9L1hO