Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • World
  • Users
  • Groups
Skins
  • Light
  • Brite
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (Cyborg)
  • No Skin
Collapse
Brand Logo

CIRCLE WITH A DOT

tomgag@infosec.exchangeT

tomgag@infosec.exchange

@tomgag@infosec.exchange
About
Posts
11
Topics
5
Shares
0
Groups
0
Followers
0
Following
0

View Original

Posts

Recent Best Controversial

  • VeraCrypt to stop developing Windows application due to Microsoft revoking their driver signing certificate:
    tomgag@infosec.exchangeT tomgag@infosec.exchange

    VeraCrypt to stop developing Windows application due to Microsoft revoking their driver signing certificate:

    Link Preview Image
    VeraCrypt / Forums / General Discussion: Project Update

    favicon

    (sourceforge.net)

    Sorry to hear about this turn of events, but it was pretty much to be expected given the way the world is turning, and Microsoft being Microsoft.

    Switch to Linux if you can, and come give Shufflecake a try πŸ˜‰

    #veracrypt #truecrypt #privacy #cryptography #plausibledeniability #shufflecake #microsof #windows #enshittification #surveillance #cypherpunk

    Uncategorized veracrypt truecrypt privacy cryptography plausibledeniab

  • Are we having fun yet?
    tomgag@infosec.exchangeT tomgag@infosec.exchange

    @sophieschmieg from a quick look, this seems a bit... audacious?

    under plausible assumptions, the runtime for discrete logarithms on the P-256 elliptic curve could be just a few days for a system with 26,000
    physical qubits

    Uncategorized

  • New breakthrough results for quantum attack resource estimates against 256-bit elliptic curves: most ECC-based applications including ECDSA and Bitcoin could be at risk way sooner than expected:
    tomgag@infosec.exchangeT tomgag@infosec.exchange

    New breakthrough results for quantum attack resource estimates against 256-bit elliptic curves: most ECC-based applications including ECDSA and Bitcoin could be at risk way sooner than expected:

    Link Preview Image
    Safeguarding cryptocurrency by disclosing quantum vulnerabilities responsibly

    favicon

    (research.google)

    "We estimate that these circuits can be executed on a superconducting qubit CRQC with fewer than 500,000 physical qubits in a few minutes [...] This is an approximately 20-fold reduction in the number of physical qubits required to solve ECDLP-256"

    I have been saying this since the 2010s: quantum cryptanalysis is one of those non-linear technology progresses that will take everyone by surprise when it arrives. Qubits quality and numbers go up, error-correction and attacks improve, investments scale up accordingly. It's a perfect storm of compound factors. Folks didn't listen, now time is ticking.

    #quantum #quantumcomputing #cryptography #security #cybersecurity #infosec #google #bitcoin #blockchain #ethereum

    Uncategorized quantum quantumcomputin cryptography security cybersecurity

  • @tynstar I did research Migadu back in the time.
    tomgag@infosec.exchangeT tomgag@infosec.exchange

    @tynstar I did research Migadu back in the time. They seem OK, but a few things to consider: Migadu is based in Switzerland but its servers are in France. No registrar, email hosting only. The plan I saw back in the time was very tight: 20 outgoing email/day limit with $19/year package and 100 outgoing email/day for $9/month is very expensive. No encryption at rest on their servers, which seems a bit weird to me, for two reasons. First, it makes disposal of old hardware a bit riskier. Second, there are many documented cases, even in Europe, of illegal police raids where servers are stolen without a court order. The court subsequently declares the raid illegal and the police is forced to hand back the servers and destroy the acquired data, but this can take years and you have no guarantee that the data is not copied elsewhere. Overall they seem cool folks and the rest of their threat model is sound IMHO (see https://www.migadu.com/procon/ ) but these are things to consider. Overall I had the impression that they are more targeted to SMEs.

    Uncategorized

  • Going into the rabbithole of testing local LLMs right now.
    tomgag@infosec.exchangeT tomgag@infosec.exchange

    Interesting, it seems that Qwen 2.5 Coder is actually less aggressive than Qwen 3.5 in rejecting sensitive topics.

    Link Preview Image
    Uncategorized huggingface selfhost localai ollama

  • Going into the rabbithole of testing local LLMs right now.
    tomgag@infosec.exchangeT tomgag@infosec.exchange

    @1ad6e959c292f74de615d4c6e5ec43d0b7ec4908a55de93aa2527c46a8bd1d5b I'm not sure, I don't have any beefy GPU πŸ˜… you shoulkd ask this in the Ollama Reddit community (or similar).

    Uncategorized huggingface selfhost localai ollama

  • Going into the rabbithole of testing local LLMs right now.
    tomgag@infosec.exchangeT tomgag@infosec.exchange

    @sealjay well, I'm running on local CPU with 32 GiB of RAM, so I wouldn't call it "fast". 3-5 tokens per second maybe? I guess it's OK if you give it a task and then go to grab a coffee πŸ˜…

    Uncategorized huggingface selfhost localai ollama

  • Going into the rabbithole of testing local LLMs right now.
    tomgag@infosec.exchangeT tomgag@infosec.exchange

    First impressions of Mistral Small 3.2: seems pretty solid, it answers "uncomfortable" political question quite neutrally.

    I don't understand why #confer and #euria by #infomaniak are not based on this.

    Uncategorized huggingface selfhost localai ollama

  • Going into the rabbithole of testing local LLMs right now.
    tomgag@infosec.exchangeT tomgag@infosec.exchange

    Heretic quantized versions of Qwen 3.5 have just been released but even the base Qwen 3.5 model seems to have issue with ollama currently, and I don't have bandwidth to do a manual patch now. Trying Mistral 3.2.

    Uncategorized huggingface selfhost localai ollama

  • Going into the rabbithole of testing local LLMs right now.
    tomgag@infosec.exchangeT tomgag@infosec.exchange

    Going into the rabbithole of testing local LLMs right now. I don't have a dedicated GPU, but 32 GiB of RAM should be enough for anyone.

    #ai #huggingface #selfhost #localai #ollama #heretic #qwen #mistral

    Uncategorized huggingface selfhost localai ollama

  • Some big news regarding mobile OSes:
    tomgag@infosec.exchangeT tomgag@infosec.exchange

    Some big news regarding mobile OSes:

    First, Graphene OS has confirmed a partnership with a large OEM to bring support to non-Pixel devices (Snapdragon SoC):

    https://piunikaweb.com/2025/10/13/grapheneos-ending-pixel-exclusivity-new-oem/

    This is good news, but IMHO it only delays the unavoidable demise of free AOSP-based projects since Google is now finally pulling the rug.

    Second, the FSF announced Librephone, an initiative to bring real freedom to mobile devices:

    https://www.fsf.org/news/librephone-project

    This is also good, but it must be taken in the right perspective: Librephone, as far as I understand it, is not a new mobile OS, but rather an initiative to open-source existing proprietary firmware blobs. AOSP-based open source OSes like Lineage, Graphene, and even /e/OS, will hopefully benefit from this initiative, by being able to replace binary blobs with open-source firmware. But they still remain AOSP-based solutions, and therefore bound to the Google ecosystem.

    There are two problems here that really need to be addressed.

    The first one is political. Legislators and citizens must come to acknowledge that a democratic society where the full mobile ecosystem is in the hands of a corporate duopoly is not acceptable.

    The second one is technological: AOSP is not a fully free OS, it's a trojan horse, a trap set by Google years ago that is springing right now. We need to move away from Android and embrace full GNU/Linux solutions, or even something completely new, at this point I don't even care. I've heard good opinions of Postmarket OS. Any feedbacks here?

    Say what you want about Richard Stallman, but he saw this coming.

    #android #aosp #google #lineageos #grapheneos #eos #postmarketos #libre #foss #floss #opensource #privacy #security #surveillance

    Uncategorized android aosp google lineageos grapheneos
  • Login

  • Login or register to search.
  • First post
    Last post
0
  • Categories
  • Recent
  • Tags
  • Popular
  • World
  • Users
  • Groups