mastodon 4.8.0-alpha.3+glitchCryptography, privacy, quantum security, infosec, retro vibes.
I am a mathematician and cryptographer, specialized in quantum security and complex cryptographic protocols. I am also a privacy hacktivist and public speaker, blahblahblah, read my Linkedin bio for this s**t, this is my Mastodon corner.
I co-develop Shufflecake, an open source privacy disk encryption tool to help journalists, activists, and whistleblowers evade unjust prosecution.
I am an advocate of digital self-sovereignty. You will see me often ranting about Big Tech, enshittification, and surveillance capitalism.
Fascinated with anime, Japan, RPGs, retro computing, and all things 80-90's. Notice I wrote "fascinated", not "knowledgeable".
Here you won't find peace nor forgiveness, but just: #cryptography #privacy #quantum #security #infosec #retro vibes!
I am happy to announce the followup to my original blog post Battle of Instant Messenger! Comments and evaluations of privacy-focused instant messengers:
https://gagliardoni.net/#20260918_im_battle_2
This is actually not a full update, but my comments to the freshly released videoguide by PrivacyGuides' Jonah Aragon (link in blog post).
#privacy #im #security #anonymity #signal #deltachat #xmpp #simplex #jami #threema #discord #slack #infosec #crypto #cryptography #quantum #postquantum #pqc
I just noticed that Google Maps now does not even allow to see business opening times if you don't log in. Surprised it took so long!
Enshittification continues!
BREAKING! Meshcore team splits over dispute over AI-generated code disclosure, and hostile trademark takeover.
Meshcore is an off-grid, decentralised mesh radio platform powered by low-cost and public access LoRa radio technology for reliable, long-range emergency text and embedded sensors communication. It can communicate across kilometres — no towers, no subscriptions, no single point of failure.
https://blog.meshcore.io/2026/04/23/the-split
#meshcore #meshtastic #lora #radio #opensource #foss #drama #privacy #security #selfsovereignty #ai #copyright #takeover
Some big news regarding mobile OSes:
First, Graphene OS has confirmed a partnership with a large OEM to bring support to non-Pixel devices (Snapdragon SoC):
https://piunikaweb.com/2025/10/13/grapheneos-ending-pixel-exclusivity-new-oem/
This is good news, but IMHO it only delays the unavoidable demise of free AOSP-based projects since Google is now finally pulling the rug.
Second, the FSF announced Librephone, an initiative to bring real freedom to mobile devices:
https://www.fsf.org/news/librephone-project
This is also good, but it must be taken in the right perspective: Librephone, as far as I understand it, is not a new mobile OS, but rather an initiative to open-source existing proprietary firmware blobs. AOSP-based open source OSes like Lineage, Graphene, and even /e/OS, will hopefully benefit from this initiative, by being able to replace binary blobs with open-source firmware. But they still remain AOSP-based solutions, and therefore bound to the Google ecosystem.
There are two problems here that really need to be addressed.
The first one is political. Legislators and citizens must come to acknowledge that a democratic society where the full mobile ecosystem is in the hands of a corporate duopoly is not acceptable.
The second one is technological: AOSP is not a fully free OS, it's a trojan horse, a trap set by Google years ago that is springing right now. We need to move away from Android and embrace full GNU/Linux solutions, or even something completely new, at this point I don't even care. I've heard good opinions of Postmarket OS. Any feedbacks here?
Say what you want about Richard Stallman, but he saw this coming.
#android #aosp #google #lineageos #grapheneos #eos #postmarketos #libre #foss #floss #opensource #privacy #security #surveillance
Oh great, just what I needed today.
Claude is rolling out identity verification through Peter Thiel's co-funded Persona.
This is like having your neighborhood crack gang selling narcotics out of convenience stores, rolling out loyalty card programmes, partnering with a contract security firm to inspect IDs of customers at checkout, and selling that data to the police in the hope of getting permission to sell inside Walmarts as well.
#palantir #politics #surveillance #ai #claude #anthropic #pentagon #usa #peterthiel #privacy #security #ageverification #idverification #anonimity #cypherpunk #humor
BREAKING! GnuPG introduces quantum-resistant ML-KEM (Kyber) as encryption algorithm!
https://lists.gnupg.org/pipermail/gnupg-announce/2026q2/000504.html
This is great news! However, as I've been saying for a while, we should stop considering Harvest-Now-Decrypt-Later as the only thing to be immediately concerned about. The problem of signatures (Trust-Now-Forge-Later) is wrongly assumed to be way less urgent, but the reality is that rolling out a certificate migration will be extremely painful, and quantum attacks against signatures will be stealthy and of difficult attribution initially. Especially for a project like GnuPG, it's extremely important to adopt quantum-resistant signatures ASAP.
#crypto #cryptography #PGP #GnuPG #quantum #security #privacy #cypherpunk
FYI, I'll be schmoozing around at EUROCRYPT 2026, May 10-14 in Rome. My employer Horizen Labs is a sponsor of this amazing cryptography conference. I'll be giving a talk at the affiliated event CAW (Cryptography Applications Workshop) on the latest updates of Shufflecake, including juicy news on hidden OS. Pass by to say hi!
#cryptography #crypto #security #privacy #eurocrypt #iacr #horizenlabs #shufflecake #caw2026
Great article by F-Droid on "What We Talk About When We Talk About Sideloading".
https://f-droid.org/2025/10/28/sideloading.html
A few excerpts:
It bears reminding that “sideload” is a made-up term. Putting software on your computer is simply called “installing” [...] the term “sideload” was coined to insinuate that there is something dark and sinister about the proces
You, the consumer, purchased your Android device believing in Google’s promise that it was an open computing platform and that you could run whatever software you choose on it. Instead, starting next year, they will be non-consensually pushing an update to your operating system that irrevocably blocks this right and leaves you at the mercy of their judgement over what software you are permitted to trust.
You, the state, are ceding the rights of your citizens and your own digital sovereignty to a company with a track record of complying with the extrajudicial demands of authoritarian regimes
#google #android #aosp #security #privacy #enshittification #bigtech #opensource #politics #fdroid
@lcamtuf@infosec.exchange I'm trying to find a meme showing myself ripping my bloody eyeballs off my skull, but I can't because I'm blind now.
