my fellow security researchers, Ive got some bad news for you
Dots are here!
A new way to use AI that works 24/7 for you; get more of your time and attention back to work at a higher level.
openai.com/index/introducing…
대나무젓가락 retweeted
Linear Algebra I
ALT 7 Spider-Man pointing at each other. The Spider-Man are captioned "det(A) != 0", "columns form basis", "rank(A)=n", "no free variables", "0 not an eigenvalue", "A invertible", and "Ax=b unique solution".
대나무젓가락 retweeted
We HypeBoy topped Plaid CTF 2024! 👑
@_Reinose_en @justlikebono @munsiwoo @real_as3617 @mhibio_ptw @howdays1 @stanzz @soo_sudo @n1net4il @1nteger_c @c2w2m2 @pr0cf51 @cmy981224 @csapp3e ironore15 G0RiYa
Thanks to the great support from dakuo & hellsonic
next time create efficient backdoor not to get caught
대나무젓가락 retweeted
Wow. A bug in the Seaborn data visualization software hid many CD=1 papers, leading Park et al to incorrectly conclude that disruption in science and technology is declining (top histogram), while it is not ( bottom histogram). @VincentGinis
Ouch, could it be, that a scandalous patter of disruptiveness decline be explained by specifics of pre-processing of the data?
arxiv.org/abs/2402.14583
what do you think @svalver ?
I've just implemented ChaCha20-Poly1305 in JavaScript, fitting it into 3 tweets. Couldn't make it fit into a single tweet, but I think it's impossible 😅
// Usage:
// All parameters are Uint8Array
// Nonce should be 12 bytes
await encrypt(plaintext, aad, key, nonce)
a=0n;p=P[l='length'],q=Q[l],k=(1<<30)*4,Q=await A(Q,(X=x=>W(x%L&&L-x%L))(q),P,X(p),new T([q,q/k,p,p/k]));for(I=0;Q[I]+1;I+=L)a=(a+F(Q,I)+(1n<<128n))*r%((1n<<130n)-5n);a+=F(Y,L);return[P,W(L).map(t=>(r=a%Z,a/=Z,`${r}`))]}
I came across this puzzle at 1AM. At that time, I thought it was a good pre-sleep puzzle, and it kept me up until 11AM when I finally solved it lmao
It's very fun, so give it a try: curta.wtf/puzzle/base:5
대나무젓가락 retweeted
Ok I found the TU Darmstadt paper that initially disclosed the flaws. TL;DR user hashing to implement a (bad) private set intersection protocol, and its trivially vulnerable to brute-force dictionary attacks.
Apple has known since 2019! usenix.org/system/files/sec2…
