@badcryptobitch on Twitter/X
CEO @hashcloak - Cryptography R&D consulting, hashcloak.com
CEO @StoffelMPC - Making MPC accessible to non-cryptographers, stoffelmpc.com
Submissions
Introduction to Multiparty Computation Tutorials
docs.stoffelmpc.com
6 points·by badcryptobitch··0 comments
Introduction to Formal Verification with Lean Part 1
hashcloak.com
243 points·by badcryptobitch··52 comments
Hot Lotto Fraud Scandal (2017)
en.wikipedia.org
2 points·by badcryptobitch··0 comments
Ethereum plans to move from BLS signatures to post quantum secure signatures
hashcloak.com
2 points·by badcryptobitch··0 comments
Kettle: Attested Builds for Verifiable Software Provenance
arxiv.org
3 points·by badcryptobitch··0 comments
Introduction to Beaver Triples
stoffelmpc.com
25 points·by badcryptobitch··12 comments
LLM anomaly detectors are not a cause for concern despite Mythos
magonia.io
2 points·by badcryptobitch··0 comments
C8s: A Confidential Kubernetes Architecture
arxiv.org
14 points·by badcryptobitch··0 comments
Introduction to Secret Sharing from First Principles
stoffelmpc.com
1 points·by badcryptobitch··0 comments
The Sad Decline of Trenchant Exec Who Stole and Sold Zero Days to Russian Buyer
zetter-zeroday.com
2 points·by badcryptobitch··0 comments
Data in Use Protection: How MPC Keeps Inputs Hidden from the Cloud
stoffelmpc.com
2 points·by badcryptobitch··0 comments
Explainer for Aztec's Ultrahonk Verifier
hashcloak.com
2 points·by badcryptobitch··0 comments
Crunchyroll's customer analytics data breached via outsourcing partner Telus
twitter.com
2 points·by badcryptobitch··1 comments
Lightweight Formal Methods to Validate a Key-Value Storage Node in Amazon S3 [pdf]
assets.amazon.science
2 points·by badcryptobitch··0 comments
The first signs of burnout are coming from the people who embrace AI the most
techcrunch.com
4 points·by badcryptobitch··0 comments
Parallelizable threshold ECDSA with more than t+1 parties
There is no business that's only going to take up 3-4 hours per day of your time without having spent 3-5+ years building it out. Bootstrapped businesses are hard and a lot of work.
It's great seeing folks apply PETs to key problems, no matter how theoretical they might seem now as evidenced by the comments. PoCs like this are steps in the right direction to make such work and ideas practical.
If any of you are looking to try out Stoffel, you can check out our docs at docs.stoffelmpc.com or go to our github repo: https://github.com/Stoffel-Labs/stoffel
Yeah, his post resulted in a rise in everyone and their mother becoming formal verification "experts" now. But I think he's right. We no longer have good excuses for not trying to secure code with FV in this brave new world of agentic coding
My worse fear has materialized.
This is why I've never used an external Obsidian plugin and only my own plugins.
It was only a matter of time before some malicious code ended up in one.
Can you clarify what you mean?
The example is to show concretely the computation. It works as long as you have the basic setup for shamir secret sharing (and other linear secret sharing schemes actually but I didn't go into that in the article)
You aren't the only one that has alerted me of framer-based sites crashing on iOS.
I'm trying to find a resolution but it appears to be a framer problem. I asked one of my friends and he was able to access the article fine.
Most explanations just give formulas and no intuition. I tried to give intuition and a concrete example. If you email me, I can share the images that help with the intuition without the rest of the blog post.
This looks great but how does it differ from the many wallet services that offer link sharing built-in without the subscription? As many wallets support tokens across many chains these days, link sharing is essentially a feature and no longer its own product.
You can still derive a lot of info without having possession of the data through the use of PETs. There's a reason why companies like Google and Tik Tok make heavy use of PETs for their advertising products.
This article is kind of hilarious to read.
This is my life since getting a dog (and I've been doing versions of it before my dog too) but this guy just discovered the way Europeans have been living for hundreds of years and wrote a whole article about it.
I guess this is also one of the great things about the internet. Another person's mundane thing is another person's discovery.
> Unexplainable security features are just marketing materials.
I feel this way about a lot of hardware-based security solutions like TPMs, and TEEs. These are actually useful solutions that can help solve problems that we have (as evidenced by this article) but unfortunately, these solutions tend to be poorly publicly documented. As a result, we rely on academics to do the work for us in order to learn how to better contextualize these solutions.
My counterargument for that is that LLMs need to communicate not only between themselves and humans but LLM to LLM communication. We will get more niche and domain specific languages designed for LLMs as a result.
One thing that many of these kinds of articles don't really talk about but that also emphasizes their point is that there will be an increase in interfaces/languages for software developers to do increasingly specialized for work. As such, there will be more compilers, vms, dsls, etc which means that there will be more of a demand for developers who have this skillset. Ideally, this should lead to more folks becoming developers or at least acquiring skills that professional developers have in order to make effective use of these tools.