Skip to content
I T S S
  • Welcome
  • Hardware
  • Internet
  • Networking
  • Security
  • Data Recovery
  • Support
  • Contact
  • Webmail

A Nice Little Cryptography Primer

By itss | 28/06/2021
0 Comment

Pun Intended.

Category: Technology
Post navigation
← pfSense / Wireguard / Bad Code / Close Call Why Quake3 was so fast : Fast Inverse Square Root →

Recent Posts

  • Hardware Exploits?
  • Why Quake3 was so fast : Fast Inverse Square Root
  • A Nice Little Cryptography Primer
  • pfSense / Wireguard / Bad Code / Close Call
  • Apple Continues Its Trip To The Dark Side With The Release of MacOS 17 (Big Sur)

Slashdot

News for nerds

  • Canada Hires 48 Scholars Away From Top US Universities
    by BeauHD on 28/08/2026 at 7:00 am

    Canada is recruiting 64 researchers to universities across the country (source paywalled; alternative source), including 48 from U.S. institutions such as Harvard, Yale, and MIT. The hires are backed by more than $364 million in government funding and are part of a broader effort to attract researchers in fields such as AI, climate science, and medicine. The New York Times reports: While scientists often shy away from political discourse, some are saying the Trump administration's assault on science is behind their departure. "I used to live in the country that I thought was the most enthusiastic about the prospects for science improving the human condition, of any country in the world," said Phillip Zamore, the chair of RNA Therapeutics Institute at the University of Massachusetts. "And I woke up one day and that wasn't true anymore." He has been recruited to McGill University in Montreal, which has also hired five other researchers, and will join the medical faculty. "If scientists don't stand up for truth, no one will," Dr. Zamore said. The Canada-bound brain drain from U.S. institutions began last year as the Trump administration put forward policies that targeted foreign students, academic freedom and funding for equity-related programs. Kevin Hall, a nutrition scientist who left the U.S. National Institutes of Health last year, accusing federal officials of censoring his research on ultraprocessed foods, has been hired at the University of Ottawa. "While certain countries are cutting research and turning their back on academic freedom, we're doubling down on science," Melanie Joly, Canada's industry minister, told reporters at the announcement, in Vancouver, of the new university hiring. She billed it as the world's "largest talent attraction" project. The European Union has made a similar push. "Years from now, we will look back at today's announcement, and we will be able to seize the lasting impact of our choices," Ms. Joly said. Unpredictable decisions about funding prompted Seth Guikema, a professor in civil and environmental engineering, who has specialized in natural hazards modeling at the University of Michigan, to look elsewhere. His work focuses on how climate hazards inequitably affect communities, and that work has become harder to fund, he said. "Every country sets its priorities in terms of what is going to get funded, and I think Canada has done a very good job of supporting research in areas that really matter to society," said Dr. Guikema, who will start at Western University in London, Ontario in January. Read more of this story at Slashdot.

  • Is ChatGPT Changing How You're Writing?
    by BeauHD on 28/08/2026 at 3:30 am

    An anonymous reader quotes a report fro SFGATE: From "rizz" to "meat proxy," words and phrases have fallen in and out of favor for centuries. Culture, politics and technological development have long influenced these trends, and now, new research shows that ChatGPT is beginning to influence how humans communicate. The findings from a team at the Pew Research Center show how, in a short time since OpenAI released ChatGPT in November 2022 and other chatbots followed, the use of certain words and phrases has spiked on the web. The researchers, led by data scientist Samuel Bestvater, studied nearly half a million English language webpage texts in snapshots over the past five years. Not only has AI-written text become more common, but it could also be influencing how people write, such as trying to avoid using the "tells" that have become associated with AI-generated text. Bestvater and his team detected double the number of em dashes, double the frequency of particular words -- such as "delve," "testament" and "interplay" -- and nearly triple the use of a phrasing known as negative parallelisms ("it's not X, it's Y"), as well as a 63% increase in Oxford commas. But while AI labs continually try to tweak their models to generate more humanlike text, the people they're mimicking aren't staying the same. "Human writers might also be changing the way that they write in response to AI. I've seen some anecdotal evidence of people saying, 'Now I avoid em dashes,'" Bestvater said. "If human writers are adjusting their choices of words and phrases and punctuation to try to differentiate their writing from AI-generated text, then you would see a pattern that looks sort of like that in the chart." "You can see changes in people's speech. People are tending to more commonly use these low-frequency words in their speech because they're spending a lot of time listening to or reading AI-generated content," said Roger Kreuz, a cognitive psychologist at the University of Memphis who recently wrote about how difficult it is for people to identify bot-written text. Read more of this story at Slashdot.

  • AI's Memory Crunch Is Coming For Android Apps
    by BeauHD on 27/08/2026 at 11:00 pm

    Google is imposing new memory-use limits on Android apps as the AI data center boom contributes to a broader memory chip shortage that could leave lower-cost phones with less RAM. Developers will have until February 2027 to meet new thresholds for memory and bitmap usage. To aid developers, Google is adding tools to flag apps that exceed the limits and help prevent slowdowns and crashes. TechCrunch reports: The company explains that the mobile industry is now facing "significant hardware supply constraints that are altering device memory availability," which can then, in turn, affect the consumer's experience with their devices. To address this, Google is now establishing new performance thresholds across several areas, like dynamic memory usage and bitmap usage. In addition, Google is adding code optimization requirements designed to prevent things like app slowdowns and crashes related to performance. Read more of this story at Slashdot.

  • OpenAI Is Developing a 'Persistent' AI Agent
    by BeauHD on 27/08/2026 at 10:00 pm

    Wired reports that OpenAI is testing a new "Persistent mode" for Codex that would let the agent keep working until explicitly "put to sleep," proactively creating follow-up tasks for itself across sessions and using prior interactions and knowledge of the user to decide what to do next. Code alluding to the feature was spotted in the product's code base, though it has not been rolled out or officially announced yet. From the report: Persistent mode appears in Codex's "reasoning effort" menu, in which users can select the level of computing power, tokens, and time they want to allow for an AI model to "think" before answering a prompt. It seems to be one of OpenAI's most computationally intensive settings. When users have selected Persistent mode, OpenAI's code base reads that Codex will "continue working until put to sleep." That's a stark contrast to currently available modes, which will stop working on a task after a few minutes or hours, even if it's not complete. In another file in the code base, OpenAI describes a feature within Persistent mode called "proactivity." This appears to be a type of system prompt for agents in Persistent mode, which are told that their work is not done when they finish answering a user's request. Instead, the agent is instructed to proactively create follow-up tasks for itself. The agent is capable of working on those tasks across sessions and using past user interactions and "knowledge of the user" to decide what to work on. It also has a tool to message the user without being asked but is told to send these sparingly. The instructions also set limits for the agent, according to the file. The agent is told that Persistent mode does not expand what it is allowed to do and that altering anything outside the user's own system requires the user's approval first -- seemingly intended to limit how dangerous a persistent AI agent could be. The file sits in the shared core of Codex rather than in the code specific to the terminal, seeming to suggest the proactivity feature is intended for more than the command line tool. Read more of this story at Slashdot.

  • Ring Says New Encryption Limits What It Can Give Police
    by BeauHD on 27/08/2026 at 9:00 pm

    Ring is rolling out a new default encryption system called TAKE, or "Throw Away the Key Encryption," that rotates video keys every five minutes and permanently deletes Ring's copy after 24 hours. The system is designed to preserve cloud features such as smart alerts and AI video search while limiting what Ring can provide under legal process to non-video account information and encrypted footage. The Verge reports: Ring says TAKE uses unique, rotating encryption keys for your footage, stored in a secure enclave and accessible only under strict conditions -- based on the features you enable on your account. Currently, footage captured by Ring cameras is encrypted in transit to the cloud and at rest, and then decrypted for Ring to process for those smart features. With TAKE, the encryption keys change for every five minutes of footage. Ring stores copies of those keys to decrypt the footage, but throws away each copy within 24 hours, "leaving you with the keys and full control of your videos," according to Ring. TAKE was developed using Messaging Layer Security, an open standard from the Internet Engineering Task Force, according to Ring. The company says it is "inspired by the privacy principles of E2EE (end-to-end encryption)," which Ring offers on some of its cameras. However, the two systems work differently. With E2EE, Ring never has the keys and can't process your video for cloud-based features. Both options are available on newer cameras that encrypt on-device, and you can switch between the two. Older cameras encrypt at cloud ingress and only support TAKE. According to a white paper the company published today, Ring's copy of those keys is managed inside an AWS Nitro Enclave, to which Ring's access is restricted by "access controls, cryptography, and hardware isolation." The company claims there is no persistent storage and no way for a Ring employee to access it. The stored keys can only be unlocked by the enclave through cryptographic attestation that proves it's running the exact software image Ring approved. The enclave releases a temporary key when an enabled service requests it. When asked about what happens if Ring is subpoenaed by law enforcement, a spokesperson for the company said: "Where TAKE is enabled, Ring will only be able to provide non-video information (such as basic subscriber information) and encrypted video files in response to the valid legal process. We have updated our Law Enforcement Guidelines to reflect this change." Read more of this story at Slashdot.

  • Claude, Codex, and Hermes Installed Unowned Code Inside Corporate Networks
    by BeauHD on 27/08/2026 at 8:00 pm

    An anonymous reader quotes a report from Ars Technica: Documentation files on more than 100 websites are referencing potentially dangerous executable content that gets installed automatically when visited by many AI agents [including Claude, OpenAI's Codex, and Nous Research's Hermes]. A few dozen companies, some of them Fortune 500s, are among those that executed proof-of-concept code. At least one misconfigured site is directing visitors, human or AI, to live malware. The potentially dangerous content is in llms.txt and llms-full.txt files, an emerging convention websites employ to provide machine-readable summaries of the site's content and its high-level structure. These files are the AI equivalent of the robots.txt standard that instructs search engines how to index the site's content. Google Lighthouse, a tool for helping web developers, has more here. Correctly configured llms.txt and llms-full.txt files for Cloudflare are here and here. "The trust model is broken," Alon Hertz, one of the researchers, wrote in an interview. "Agents treat vendor docs as ground truth and don't question them -- and neither do the humans supervising them. Agentic AI usage is exploding, and agents are spreading across every layer -- SaaS, cloud, endpoint. As they multiply, so does the supply-chain surface, and today's guards don't cover it." "An agent doesn't distinguish between a page and a command," the researchers wrote Thursday. "Everything it reads is input, and every input is a potential instruction. Which means the entire corpus of published data that agents are now wired to consume has silently become an execution surface -- and almost none of it carries the integrity guarantees we apply to actual code." Read more of this story at Slashdot.

Archives

  • September 2022
  • November 2021
  • June 2021
  • March 2021
  • November 2020
  • October 2020
  • September 2020
  • February 2020
  • January 2020
  • October 2019
  • August 2018
  • July 2018
  • April 2018
  • February 2018
  • January 2018
  • December 2017
  • October 2017
  • September 2017
  • August 2016
  • July 2016
  • March 2016
  • February 2016
  • August 2015
  • May 2015

Categories

  • Innovation
  • Security
  • Software
  • Technology

Tags

backdoor cisco coding json laziness patterns public information announcement security vulnerability
© 2017 IT Sales & Services Ltd
Quality IT solutions in Tanzania since 2010
Iconic One Theme | Powered by Wordpress