Ancestors

Written by Soatok Dreamseeker on 2025-01-15 at 04:24

Don’t Use Session (Signal Fork)

Last year, I outlined the specific requirements that an app needs to have in order for me to consider it a Signal competitor. Afterwards, I had several people ask me what I think of a Signal fork called Session. My answer then is the same thing I'll say today: Don't use Session. The main reason I said to avoid Session, all those months ago, was simply due to…

http://soatok.blog/2025/01/14/dont-use-session-signal-fork/

=> More informations about this toot | More toots from soatok@furry.engineer

Written by linear cannon on 2025-01-15 at 06:22

@soatok@furry.engineer on the note of the cost of the attack from the shattered paper: i did some back-of-napkin math based on the cost of renting more modern GPUs than the ones used in the attack (those were GTX 970s) on a service i presently use to inexpensively rent GPUs, which i use for testing prime number hunting software.

the cost of the attack today, based on my quick math, would be almost exactly $619, if you assume that no time was wasted in setting things up, and you are renting RTX 4090 GPUs.

last time i checked this was, i think, in late 2020. i had a reason to attempt that exact attack, if it was feasible. it was not, i would've still needed closer to $10,000-20,000 at the time (i don't remember the exact figure)

=> More informations about this toot | More toots from linear@nya.social

Written by Soatok Dreamseeker on 2025-01-15 at 06:23

@linear Oh neat!

I wonder if I could convince a cryptography-related company to offer up that much compute for a collaboration on a paper.

=> More informations about this toot | More toots from soatok@furry.engineer

Written by linear cannon on 2025-01-15 at 06:56

@soatok@furry.engineer oops, i lied, the attack i was trying to do back then was the 2020 shambles attack, not shattered.

but the math still checks out, and i ran the same napkin math for the 2020 shambles attack and got a figure of $837 (the authors quoted about $45k)

i think that's just more evidence that an attack on 64 bits of security is very much affordable now. not even 4 figures

=> More informations about this toot | More toots from linear@nya.social

Toot

Written by linear cannon on 2025-01-15 at 07:46

@soatok@furry.engineer hm. i think i may have gotten my math wrong, so don't go chasing a grant to try this without checking yourself first :P

=> More informations about this toot | More toots from linear@nya.social

Descendants