cs student, cyber enjoyer.

Last Notes

- reply

oh true, should definitely paywall the incessant compliments. maybe give them a teaser to get them hooked to how smart they are first.

2026-04-22 20:50:58 UTC

- reply

why people pay big GenAI companies for this is crazy. i'd spurt bullshit all day for free!!

2026-04-22 07:07:41 UTC

- reply

You're right. And, honestly? I shouldn't have misled you. It's not about SharePoint, it's about trust --- and I violated yours.

2026-04-21 22:45:34 UTC

- reply

if it isn't, then why is there an "open in SharePoint button"? hm???1?

2026-03-04 22:35:30 UTC

- reply

makes me want to replace all my memory with ECC stuff... if only RAM didn't cost 500% what it did a few months ago...

2026-02-05 11:46:18 UTC

- reply

if a quantum-capable nation state is targeting you, PQC is the least of your concerns. it is, imo, a nice-to-have with the current state of things.
as for qubits, it is hard to tell how they're growing at this point. it is purely speculative and i reckon the public perception of growth may be influenced by marketing.
PQC would be ideal, and it isn't all too hard to use an existing implementation. but the fact that a messaging service doesn't have it isn't at the top of the list for required features to protect your privacy against big corps.

2026-02-05 11:14:10 UTC

- reply

PQC is obviously desirable for a privacy-centric messaging service but running one of shor's algorithms for breaking RSA and ECC is still a way away. for an n-bit RSA key, you'd need 3n qubits. RSA keys are 2048-4096 bits (hopefully the latter). the current largest circuit-based quantum computer is ~1200 qubits AFAIK. that is 10x less than you'd need to break a recommended size RSA key.
even then, as far as i can tell, current PQC is mostly a guess as to what quantum computers will not have algorithms in class BQP to break them.
if your threat model truly is nation states who are actively recording your communications with near-future access to that amount of error-corrected quantum compute then sure. but for someone more concerned with big companies invading their privacy, platforms without PQC do their job perfectly well (as long as their cryptosystem provides perfect forward secrecy, IND-CPA, IND-CCA1/2, though i'm not a cryptographer so don't quote me on that).

2025-09-11 07:29:29 UTC

- reply

5 cents https://www.securityalliance.org/news/2025-09-npm-supply-chain

2025-04-29 21:39:54 UTC

- reply

i'm out of the loop, what happened?