Italiano
Ian Miers
Segnala

Ian Miers

@secparam

CS Prof. Security and applied cryptography. Some highlights: Zerocash (zcash, et al. ), Zexe (Aleo, Aztec, etc ), zk-creds/zk-promises(...)

916 Seguiti12.7K Follower9.4K Post
  1. Ian Miers@secparam
    Ian Miers
    RT @MadisonMills22: SCOOP: Major U.S. banks are detecting unauthorized third-party AI agents inside customer accounts, including some attempting to take actions that appear to be independent of user instructions, sources told Axios. The findings have alarmed banking executives, who are racing to restrict access to their systems as AI moves at a velocity faster than financial institutions can respond, multiple industry and bank executives told Axios. Several banks are now preparing for worst-case and even “day after” scenarios, including how to rapidly secure or restore customer accounts if things go wrong, the people said. Several bank executives told Axios they're struggling to distinguish between human users and AI agents. One executive said banks also struggle to determine whether agents are authorized by customers or potentially operating without their permission, more akin to rogue agent behavior. Read my latest for Axios here:
    06.9K080
  2. Ian Miers@secparam
    People’s predictions for our AI future aren't creative enough. It’s Skynet or Star Trek. What if we get Iain M. Banks’ Culture series? A post-scarcity civilization which does two things: 1) throws weird orgies 2) interferes with less advanced societies.
    50101.1K
  3. Ian Miers@secparam
    The post-Watergate dream of private electronic cash is still alive. We have both private cryptocurrencies like Zcash and (mostly) private stablecoins. Funnily enough, usable wallets are one of the harder problems here.
    Eddy Lazzarin ☀️ @eddylazzarin
    The best new private stablecoin wallet right now is @alcove_wallet. Nothing else is close. - insanely fast (seconds, even for a cross-chain transfer) - comically cheap (I'm seeing $0.38 on a $10k deposit) - easy mobile UI, anybody can use I think it's the next gen leader.
    66415.4K
  4. Eddy Lazzarin ☀️✓@eddylazzarin
    The best new private stablecoin wallet right now is @alcove_wallet. Nothing else is close. - insanely fast (seconds, even for a cross-chain transfer) - comically cheap (I'm seeing $0.38 on a $10k deposit) - easy mobile UI, anybody can use I think it's the next gen leader.
    261415728.5K
  5. Ian Miers@secparam
    The AI cyber doom and gloom just isn't creative enough. Imagine a worm that updates all PHP websites, adding user-demanded features, but then makes the sites brutalist. Or there are competing swarm ideologies and you're like: the DMV website hasn't been the same since the anarcho-syndicalist hive mind patched it.
    1111788
  6. Ian Miers@secparam
    Relevant XKCD strikes again, this time for real. A certificate authority actually generated private keys where 4 was part of the key.
    Scarica
    stacksmashing @ghidraninja
    So the private-key for the eMudhra (revoked) intermediate was apparently 4. How is the root still trusted? How broken are your processes if this can happen? And honestly: How have we (as an industry) not noticed earlier :(
    82723311.3K
  7. stacksmashing✓@ghidraninja
    So the private-key for the eMudhra (revoked) intermediate was apparently 4. How is the root still trusted? How broken are your processes if this can happen? And honestly: How have we (as an industry) not noticed earlier :(
    224682792.4K
  8. Ian Miers@secparam
    "Computers now constitute or will soon constitute adangerous threat to individual privacy " Some of the first notions of cryptography, privacy , and computers came from someone at .... fucking IBM. Yes, this the Feistel of Feistel network fame. These guys were not just in it for the math. (from Steven Levy's Crypto, written in january 2001 when Crypto meant Cryptography)
    Scarica
    41241.6K
  9. Ian Miers@secparam
    Occasionally your cyberpunk future is a tragic comedy. But its never a utopia.
    Noah Smith 🐇🇺🇸🇺🇦🇹🇼 @Noahpinion
    I love the cyberpunk future
    005701
  11. Ian Miers@secparam
    Dissent is essential to democracy. And when it's needed most, you need either courage or anonymity. We've repackaged anonymity as privacy, dressing it up in friendly clothes. But no one thinks they have privacy today, and it's hard to articulate why that matters. Anonymity and privacy aren't the same thing. Even if they know everything about you, you can use AI to disguise your writing style, use Tor or Apple Private Relay, make a burner account, and still post anonymously. For now.
    57353.2K
  12. Ian Miers@secparam
    Bitcoin isn't private, but against hostile intelligence services (whether that's the CIA or the SVR), the traditional financial system isn't private either. We need better. We finally have the cryptography for the 1980s dream of both encrypted money and encrypted messaging.
    Stern Drew @SternDrewCrypto
    🚨 CIA Casually Admits Bitcoin Is Used As A Surveillance Tool CIA General Counsel: “Bitcoin isn’t truly anonymous… it’s a TOOL we use for intel gathering.” Now imagine a stablecoin economy…
    55352.3K
  13. Stern Drew✓@SternDrewCrypto
    🚨 CIA Casually Admits Bitcoin Is Used As A Surveillance Tool CIA General Counsel: “Bitcoin isn’t truly anonymous… it’s a TOOL we use for intel gathering.” Now imagine a stablecoin economy…
    Scarica
    744301.2K207K
  14. Ian Miers@secparam
    (this comment is exaggerated for comedic effect but it’s not wrong)
    Udi Wertheimer @udiWertheimer
    fun fact: satoshi refused to use the NIST seeds probably because he was somewhat of a bunker mode retard himself, instead used the more obscure secp256k1, and most other cryptocurrencies followed this is why we can’t directly use industry standards like passkeys in blockchains, and instead we ship people purpose-built hardware wallets made by fucking amateurs, leading to routine 9 figure hacks anthropic’s discovery reveals that in retrospect his panic wasn’t necessary and we could’ve just used the standards thanks bunker mode retards! (this comment is exaggerated for comedic effect but it’s not wrong)
    126812.9K
  15. Udi Wertheimer✓@udiWertheimer
    Post @udiWertheimer
    fun fact: satoshi refused to use the NIST seeds probably because he was somewhat of a bunker mode retard himself, instead used the more obscure secp256k1, and most other cryptocurrencies followed this is why we can’t directly use industry standards like passkeys in blockchains, and instead we ship people purpose-built hardware wallets made by fucking amateurs, leading to routine 9 figure hacks anthropic’s discovery reveals that in retrospect his panic wasn’t necessary and we could’ve just used the standards thanks bunker mode retards! (this comment is exaggerated for comedic effect but it’s not wrong)
    172034132.9K
  16. Ian Miers@secparam
    Why buy a quantum computer if AI keeps improving classical computing? If we can build a big enough quantum computer, we get asymptotically faster algorithms for chemistry, optimization, and finance. But the funny thing is, classical computing keeps catching up on the commercially interesting problems. So again, if classical algorithms or their AI-optimized variants are good enough for the commercially viable instances, why buy a computer to run quantum algorithms? Why invest in building one? A number of “hard” problems in theoretical computer science aren’t hard for the average commercial version of the problem. For example, checking for a low-cost route that visits all n cities is the traveling salesman problem, which is NP-hard, meaning the worst-case version is very, very hard. But real-world versions of the problem aren’t, and in fact you can solve many of them with some clever algorithms and a smartphone. A few caveats. For optimization and finance, it’s not even clear you need AI improvements, since the quantum advantage there was smaller to begin with. There's an argument for quantum in scientific computing, specifically simulating quantum physics, but that’s science, not much of a business. And AI may well improve quantum computing itself, e.g. with better error correction, but that helps the supply side, not demand.
    43181.8K
  17. Ian Miers@secparam
    Student: the demo characters in our anonymous group chat are Alice, Bob, Master Yoda and Darth Vader. Me, if you are going to do Star Wars references for real world cryptography , you really ought to do: • Cassian Andor • Luthen Rael • Kleya Marki * Lonni Jung
    00141.2K
  18. Ian Miers@secparam
    Zeroday malware delivered by targeted labs. Interesting to get confirmation of this and evidence of just how targeted ads can be.
    profdeibert @RonDeibert
    NEW @citizenlab report We uncovered an Israeli firm using online ads to run vast spy operation This is the first-ever public confirmation of zero-click mercenary spyware delivered via targeted ads. 45 devices at @AJEnglish confirmed infected
    32171.7K
  19. profdeibert@RonDeibert
    NEW @citizenlab report We uncovered an Israeli firm using online ads to run vast spy operation This is the first-ever public confirmation of zero-click mercenary spyware delivered via targeted ads. 45 devices at @AJEnglish confirmed infected
    207891.4K105K
  20. Ian Miers@secparam
    Your cyberpunk future was never going to be a utopia, Snow Crash edition. Atlanta apartments now have robot dog guards.
    Matt Van Swol @mattvanswol
    🚨#BREAKING: Absolutely WILD footage has emerged from Atlanta where an apartment complex now uses "robot security dogs" to patrol the area at night. The robot dogs also seem to speak in Indian accents to the residents. I've never seen anything like this before... insane!!!
    31163.9K
  21. Matt Van Swol✓@mattvanswol
    🚨#BREAKING: Absolutely WILD footage has emerged from Atlanta where an apartment complex now uses "robot security dogs" to patrol the area at night. The robot dogs also seem to speak in Indian accents to the residents. I've never seen anything like this before... insane!!!
    Scarica
    1.1K2.4K14.9K2.1M
  22. Ian Miers@secparam
    Your cyberpunk future was never going to be a utopia, stop building things as if it was.
    Derek Thompson @DKThomp
    massive cyberattack on european grocery refrigeration company and foiled lab espionage in the same 12 hours feels a bit too william gibson for my taste tbqh
    23271.5K
  23. Derek Thompson✓@DKThomp
    massive cyberattack on european grocery refrigeration company and foiled lab espionage in the same 12 hours feels a bit too william gibson for my taste tbqh
    81334136.9K
  24. Ian Miers@secparam
    I've long wanted to build a secure wallet as software. Repurpose an old iphone in lockdown mode, put it in a faraday bag, and only communicate via QR codes on the front facing camera. Originally the point was something more accessible than a Ledger which was both secure and made folks feel safe. Would basically eliminate the hardware supply chain risk, though increase the TCB and of course depend on Apple's software security. (The QR code part of this already exists in a few wallets and standards)
    92282.8K
  25. Ian Miers@secparam
    I've heard a lot of bad "why didn't Ledger do x" takes. To add my own: why not fill the device with epoxy? It's not foolproof at all. I've heard of folks at the NSA breaking secure epoxied hardware as a hobby, but I imagine it would decrease the attack yield.
    40301.8K