Yulia

I'm fine with having a boring bio. The comet above is Lovejoy. I do cryptography & infosec

[Yulia @vveiln]

@buchmanster By making us focus on the minority of events that are evil, it plants and spreads the evil in our heads

[Yulia @vveiln]

If you are in Berlin today, don't forget to drink your electrolytes.

And check the ingredients - if it contains magnesium oxide as the only source of magnesium, find a new favorite brand. Magnesium oxide is cheap but poorly absorbed.

[Yulia @vveiln]

@badcryptobitch There is also no incentive to explain subprotocols in all detail if they introduce significant costs into the main protocol

[Yulia @vveiln]

I just want to use my own app on ios is that too much to ask for (yes)

[Yulia @vveiln]

@colludingnode I'm socialost

[Yulia @vveiln]

Remember that cleartext transactions are not vulnerable to the deanonymization threat of quantum computers. That is why I prefer cleartext - it is safer

[Howard Wu @1HowardWu]

All private transactions today will be deanonymized when quantum computers come online.

[Yulia @vveiln]

@yuvadm I noticed the change of the icon only after I opened the app and it screamed at me "hey, we are celebrating 20 years of spotify". Maybe the app didn't scream at you and didn't create all these "stories" or maybe you didn't open it, but can't say spotify kept it secret

[Yulia @vveiln]

Why do people hate it so much? It isn't the most "aesthetic", but it is appropriate for the occasion, no?

[Yuval Adam @yuvadm]

enshittification

[Yulia @vveiln]

Honestly, to me MPC feels like nothing compared by complexity to ZK, so if MPC is so fragile, what should we expect of ZK?

Interactivity makes MPC worse and it is hard to compare different categories, but then let's just think of co-SNARKs and other interactive augmentations

[Adam Back @adam3us]

@P3b7_ @jpthor as one of the few who understood the cryptography of MPC of DSA, my take is: too complex to make work securely, due to adaptive cryptography attacks, implementation/cryptography bugs, few understand enough to review. plus the shards are all ONLINE in software servers. not good!

[Yulia @vveiln]

@apriori0x Coping mechanism is a strategy

[Yulia @vveiln]

@apriori0x I doubt you can serve the society without understanding what it needs (how being insane, desperate, excited, articulate, honest, or credible are enough for it?) or the ability to productively communicate with those who help you build and integrate

[Yulia @vveiln]

Mimic AI writing style so that nobody realises they are reading your actual thoughts

[Yulia @vveiln]

@apriori0x I can stop using claude anytime I just choose not to

[Yulia @vveiln]

This imaginary scenario creates a lot of other issues and questions to answer. But perhaps it isn't the worst idea to run this experiment in our imagination while building our products. Would I trust the product I'm building?

[Yulia @vveiln]

Imagine if everyone developing products would be obliged to use them (for some time). It would certainly increase the degree of responsibility, but on the other hand, everyone involved would have to consent to releasing the product, which sounds like a nightmare

[Yulia @vveiln]

@cryptodavidw If you love writing, how can it be pointless? The point is to do something you love, AI can't possibly be better at it.

People still do a lot of things that are automated for ages not because they are better at it than machines (although many are), but because it is fulfilling

[Yulia @vveiln]

@zksecurityXYZ It gives a perfect secrecy and provable security tropes vibe.

Who fills the gap jumping from the spec proven in lean to what the agent actually implements? Do we trust the agent to interpret the spec? Who writes the spec?

[Yulia @vveiln]

Kinda related point raised in the context of Qday Prize failure:

confirming something works the way we imagine is less informative than confirming something doesn't work some other way

https://t.co/e08wQ20aVw

[Yulia @vveiln]

There is nothing special about cryptography when everything is well, it is just excessive math. The magic happens in adversarial settings, so it is more important to understand how a cryptographic system tolerates various attacks

[Yulia @vveiln]

@veorq How about this one:
🟥: elliptic-curve crypto until 2050 but vibe-coded
🟦: PQC but secure implementation and formally verified

[JP Aumasson @veorq]

I factored the number RSA1024-1 using my home-built QPU stack; alarming sign that RSA1024 will soon be broken.

I'm choosing Full Disclosure, in the interest of transparency and Science advancement: https://t.co/UyImHud2n2
Non-ZK proof that the correct RSA1024 was used: https://t.co/eLdU0xpTMU

@yuvadm your move