Published file metadata, source observations, indicators, and research history in one bounded catalog.
10Reachable catalog records
1 / 1Current catalog page
24Maximum records per page
0Samples downloaded by this page
Feed collection status
Sources represented on this page. Publication and observation dates describe the content; successful batch dates describe local collection. A recent batch does not certify complete coverage or current provider availability.
src_ab195b05fb3af22e54Collection status unverifiedLast successful batch: Unverified
Stale means older than twice the recorded collection interval, with a minimum of one hour; without an interval, the threshold is 24 hours. Cached content remains available while a feed is stale, paused, or unverified.
10 MATCHING RECORDSMETADATA ONLY / SOURCE ATTRIBUTION PRESERVED
I’m coming down from spending a few days at Usenix Security, right here in my hometown of Baltimore. This means that my days have been taken up with two kinds of conversation: first, explaining to colleagues why Baltimore isn’t actually like The Wire. And second, trying not to talk about AI. Here I’m going to … Continue reading Everything is about to “go dark” →
First reported Aug 14, 2026 20:17 UTCCatalog metadata updated Oct 08, 2026 03:40 UTCOpen evidence record
Yesterday Anthropic published two new cryptanalysis results, both outputs of Claude Mythos, their (still) unreleased advanced model. The first of these results attacks a signature scheme called HAWK, while the second is an improved attack against reduced-round AES. Anthropic also released a blog post describing the research process that produced these results. A few people … Continue reading Some
First reported Jul 29, 2026 14:23 UTCCatalog metadata updated Oct 08, 2026 03:40 UTCOpen evidence record
Quick caveats: this is a post on AI safety, written by a cryptography professor. If that troubles you, you should read something else. I try hard not to work on AI (except when the topic occasionally tosses itself in my path), so in this post I’m mostly trying to referee arguments made by others. If … Continue reading Is sandboxing sufficient to contain rogue agents? →
First reported Sep 30, 2026 18:30 UTCCatalog metadata updated Oct 08, 2026 03:40 UTCOpen evidence record
Update August 11, 2026: A group of researchers from all over Europe were inspired by this post, and actually turned it into a real working attack! Check out their writeup and paper here. This is a quick post I wanted to write about a hobby project I spent a weekend on. It has little to … Continue reading Let’s talk about encrypted reasoning →
First reported May 29, 2026 03:52 UTCCatalog metadata updated Oct 08, 2026 03:40 UTCOpen evidence record
It’s not every day that we see mainstream media get excited about encryption apps! For that reason, the past several days have been fascinating, since we’ve been given not one but several unusual stories about the encryption used in WhatsApp. Or more accurately, if you read the story, a pretty wild allegation that the widely-used … Continue reading WhatsApp Encryption, a Lawsuit, and a Lot of Nois
First reported Feb 02, 2026 18:25 UTCCatalog metadata updated Oct 08, 2026 03:40 UTCOpen evidence record
I learn about cryptographic vulnerabilities all the time, and they generally fill me with some combination of jealousy (“oh, why didn’t I think of that”) or else they impress me with the brilliance of their inventors. But there’s also another class of vulnerabilities: these are the ones that can’t possibly exist in important production software, … Continue reading Kerberoasting →
First reported Sep 10, 2025 12:00 UTCCatalog metadata updated Oct 08, 2026 03:40 UTCOpen evidence record
This is the second in a series of posts about anonymous credentials. You can find the first part here. In the previous post, we introduced the notion of anonymous credentials as a technique that allows users to authenticate to a website without sacrificing their privacy. As a quick reminder, an anonymous credential system consists of … Continue reading Anonymous credentials: an illustrated primer
First reported Apr 17, 2026 17:19 UTCCatalog metadata updated Oct 08, 2026 03:40 UTCOpen evidence record
Update 6/10: Based on a short conversation with an engineering lead at X, some of the devices used at X are claimed to be using HSMs. See more further below. Matthew Garrett has a nice post about Twitter (uh, X)’s new end-to-end encryption messaging protocol, which is now called XChat. The TL;DR of Matthew’s post … Continue reading A bit more on Twitter/X’s new encrypted messaging →
First reported Jun 09, 2025 18:22 UTCCatalog metadata updated Oct 08, 2026 03:40 UTCOpen evidence record
Yesterday Apple announced a big step towards deploying real AI in their Siri ecosystem. In most ways this is good and inevitable: Siri is one of the world’s most widely-used voice agents, and it would be good if it didn’t suck. The idea that Apple would boost its capabilities with frontier models wasn’t so much … Continue reading The future of Siri, or: why private inference isn’t private enough →
First reported Jun 09, 2026 19:00 UTCCatalog metadata updated Oct 08, 2026 03:40 UTCOpen evidence record
This post has been on my back burner for well over a year. This has bothered me, since with every month that goes by, I become more convinced that anonymous authentication the most important topic we could be talking about as cryptographers. This isn’t just because I love neat cryptography: it’s that I don’t trust … Continue reading Anonymous credentials: an illustrated primer →
First reported Mar 02, 2026 17:29 UTCCatalog metadata updated Oct 08, 2026 03:40 UTCOpen evidence record
A filename, label, or report mention alone does not establish maliciousness. Observation dates describe cited sources; collection dates describe this local metadata catalog. No malware samples are stored, fetched, or executed by these pages.