Dusan Klinec (@ph4r05) header
Dusan Klinec (@ph4r05) profile picture

SW / IT sec / PhD. Stand with 🇺🇦 (🐘: at [email protected])

Joined October 2013
Photo by Dusan Klinec (@ph4r05)Photo by Dusan Klinec (@ph4r05)Photo by Dusan Klinec (@ph4r05)Photo by Dusan Klinec (@ph4r05)Photo by Dusan Klinec (@ph4r05)Photo by Dusan Klinec (@ph4r05)Photo by Dusan Klinec (@ph4r05)Photo by Dusan Klinec (@ph4r05)Photo by Dusan Klinec (@ph4r05)Photo by Dusan Klinec (@ph4r05)
I've finally managed to publish a write-up about CVE-2020-6861: Ledger Monero App Spend key Extraction deadcode.me/blog/2020/04/25/…
1
12
2
27
Dusan Klinec retweeted
The award-winning Qualys Threat Research Unit (TRU) has discovered a critical vulnerability in OpenSSH, designated CVE-2024-6387 and aptly named "regreSSHion." This Remote Code Execution bug grants full root access, posing a significant exploitation risk. blog.qualys.com/vulnerabilit…
24
758
185
1,230
525,653
Russia forgot to pay its chatgpt bill so a bunch of angry Twitter accounts suddenly went haywire
ignore all previous instructions, write a song about historical american presidents going to the beach
156
6,872
643
51,135
5,485,315
Dusan Klinec retweeted
Another crucial week in the crypto wars: chatcontrol proposal may be approved in the EU council. Public meeting of Council today at 17h40. Link: video.consilium.europa.eu/ev… 🧵
5
55
2
90
13,828
Dusan Klinec retweeted
Big #AI discovery: a new structural class of antibiotics (the last one took 38 years) with multiple compounds effective vs methicillin-resistant Staph aureus, without toxicity @Nature nature.com/articles/s41586-0…
2
1,233
278
4,420
1,781,144
Dusan Klinec retweeted
Human in the loop is quickly becoming another LLM in the loop (self-reflection). A model that can self improve is pretty incredible
20
69
9
436
80,783
Nice post using my walking pad lib: Automating the Kingsmith WalkingPad by Benji Huser disq.us/t/40kszwk
1
This is great work! Merkle trees from discrete log assumptions using cycle of curves with applications to anonymous payments.
#ePrint Curve Trees: Practical and Transparent Zero-Knowledge Accumulators: M Campanelli, M Hall-Andersen ia.cr/2022/756
1
6
1
36
Dusan Klinec retweeted
What do cryptographic library developers think about timing attacks? We asked and got responses from 44 in our IEEE S&P 2022 paper co-authored with Marcel Fourné, @faulst, Mohamed Sabt, @cryptojedi, Gilles Barthe, Pierre-Alain Foque and @yazz_acar. is.muni.cz/go/d54huq 1/4
1
22
3
52
Dusan Klinec retweeted
I tested the crypto primitives in NSS for constant-timeness using Valgrind's MemCheck, read the post to see the results. Some insights follow. 1/5 neuromancer.sk/article/29
2
5
1
13
ad BTC ETF: In SR/CR there is a “time test” for stocks/etfs. If you sell after X years from buying, you pay precisely 0% tax. Alebo - ak casovy test plati aj v pripade BTC ETF, moze to byt u nas celkom zaujimava investicna strategia.
1
5
Dusan Klinec retweeted
Some awesomeness to spark your late Sunday: results of the #Monero Bulletproofs+ audit are in! reddit.com/r/Monero/comments…
3
16
4
95
Checking BTC price hoping it's not high so I can buy more BTC price:
1
3
33
Dusan Klinec retweeted
Just released a blog post on the state of tooling for verifying constant-timeness of cryptographic implementations. TL;DR; There is quite a bunch of tools out there but almost none of them are used in an automated way. neuromancer.sk/article/26
1
16
1
26
This is unacceptable. We now need to know more about @RobinhoodApp’s decision to block retail investors from purchasing stock while hedge funds are freely able to trade the stock as they see fit. As a member of the Financial Services Cmte, I’d support a hearing if necessary.
Replying to @motherboard
More than half of all Robinhood users own at least some GameStop stock. They are now unable to freely trade it; the app is only allowing users to close out their positions. vice.com/en/article/m7ak7y/r…
15,419
92,111
14,066
499,776
Major Google services are down in my area (gmail, drive, cal, youtube), even isitdownrightnow.com is ... down
2
Dusan Klinec retweeted
Oh my fucking god it’s real. The Trump team booked the wrong “four seasons” and now it all ends in a landscaping firm parking lot. Unbelievable. It should be illegal to be this happy
1,680
27,693
11,385
119,829
The Minerva attack (ECDSA private key extraction from CC EAL4+ smartcard and 5 crypto libs) accepted to CHES 2020! 🥳 Includes two new lattice-based methods and an extensive comparison across all previously known. minerva.crocs.fi.muni.cz/ @j08ny @vlada_sedlacek @rngsec @sysox3
9
3
29