stf

i don't share any of the enthusiasm.

it is just replacing one old rightwing asshole, with a younger rightwing asshole.

unless there is wide and thorough anti-corruption investigations, convictions and large nationalization of stolen public funds, #orban wins... he retires and enjoys the spoils of stealing for decades.

#hungary

#Applied #cryptography cannot solve a #security problem. It can only convert a security problem into a key-management problem.

Corollary: If you aren’t actually solving the key-management problem, your cryptography is strictly decorative. This is not only not helpful, it is actively harmful, because it gives users a false sense of security, leading them to skip other precautions they would have otherwise taken.

src: https://www.dlp.rip/decorative-cryptography

Product Warning: do *not* buy #ebikes with #bosch motors/controllers. they are locked-down by some #evil #proprietary shit and try to #vendorlockin you into their shitty products. the motors are good, but the apps, the navigation, are horrible, and #interoperability with devices and apps of other vendors is actively hindered.

learn from my mistake, don't repeat it.

pls discuss products/vendors that are open and interoperable in comments below.

so whatever happens tomorrow (i think it is given), what we saw over the last weeks in #hungary is a masterpiece. this is how you orchestrate the #controlled collapse of a #regime - unlike the 'mericuns - and have a plan for what happens after. #orban wants to retire and be in control #succession, e.g.:
1. domestic spies vs IT admins of #magyars party
2. Foreign Policy Minister reporting to Lavrov
3. getting Vance's endorsement

same as Jeltsin -> Putin, and Kadar -> Antall, Orban et al in '89

RE: @tynstar@nerdculture.de

bah. ich hab eine 4 stellige slashdot id.

looking at the program of #realworldcrypto starting tomorrow in taipei: https://rwc.iacr.org/2026/program.php

i gotta say, i'm becoming a fan of Tom Ristenpart and his work.

repent! #realworldcrypto is nigh!

@slott56@fosstodon.org

1. apt get upgrade replaces python3.12 with python3.13
2. in the venv the python binary is stale, i update that binary (to the new version, but all the deps, arpython3.13 -m venv --upgrade venv/) e still in venv/lib/python3.12 so i have to reinstall all of those there.

this song comes with some pretty strong security guarantees: https://www.youtube.com/watch?v=zmgR7zcva-A

@hwine@vmst.io @slott56@fosstodon.org i guess my expectations (which i think are low) are like this:

packages in a virtualenv are installed in a version independent directory, instead of env/lib/python3.$minor/site-packages/ simply in env/lib/python/site-packages

upon upgrading python and running inside the virtualenv:

1. py files run without extra steps
2. pyc files are updated silently if needed
3. .so modules work without changes, if API change in cpython then a warning to reinstall, but works as expected

@drwhax@infosec.exchange you might know, hypothetically i'm an activist/journo who has an increased chance of being candiru'd or paragon'd, is there anywhere a good intro/howto/guideline how to defend, detect, report and recover from such attacks?

@drwhax sorry to disagree, but Signature type: ecdsa_secp256r1_sha256 is not pq, also shouldn't the kem be hybrid?