Posts whose title or text contains one of these words are left out of every view.
Whole words only: ai catches "AI-generated" but not "openai". Add a star for word beginnings: llm* catches llm and llms.
99 words is the limit
https://soatok.blog/b
7 posts · 6 Votes
Tech 57% · Culture 14% · Life 14% · Science 14%
Subscribe via RSS
The problems with the furry fandom today are not as simple as,“Furries need to touch grass!” Unfortunately, whatever you’re seeing that makes you want to say such a thing is probably a structural problem with multiple compounding factors. I will elaborate. But first, for anyone who feels lost, I need to explain where we are and how we got here. One of the downsides of furries continuing to use Twitter in 2026 is that they’re being boiling-frogged into the worst versions of themselves. If this…
Six years ago, I wrote a blog post titled Soatok’s Guide to Side-Channel Attacks in which I discussed the general topic of side-channels in cryptographic applications, and how to avoid them, with example code in PHP. I had called out that the algorithms discussed on the page cannot rule out compiler or runtime optimizations that undermine your security goals: You can achieve algorithmic constant-time, but any higher assurance was outside the scope of the work being done. For that reason, we’re…
Last month, I attended both DEFCON and Megaplex. If you’re not familiar with either event, here’s all you need to know. DEFCON is a hacker convention with a substantial furry presence. Megaplex is a furry convention with a substantial hacker presence. Photo taken with Chevron Wolf at Megaplex 2026. Furtrack. If you’ve never attended either event, here’s a few essential things to remember: You choose your own adventure. Everything is multi-track. You cannot possibly attend every event on the…
Separate from my proposal for key transparency for the Fediverse (which I’ve certainly blogged about a lot), the W3C has been working on building out end-to-end encryption (E2EE) for ActivityPub. The two projects are mostly being developed independent of each other, though connecting the two should be straightforward. As I prepare to tie up the loose ends and call my side of the work “feature complete” and consider tagging a major version 1.0.0 for the specification and reference…
After a long day of exhausting conversations about Hybrid Post-Quantum Cryptography, random jackasses trying to play gotcha with endpoint attacks against end-to-end encrypted messaging apps, and message board discussions in the wake of dumb politicians pushing more “age verification” bullshit on us all, it’s become abundantly clear to me that the phrase “threat model” is a foreign concept to most people. Except, y’know, as a buzzword. Art by Embyr.For context, this was commissioned during the…
The funny thing about safety blankets is they can double as stage curtains for security theater. “When will a cryptography relevant quantum computer exist?” is a question many technologists are pondering as they stare into crystal balls or entrails. Two people I admire recently made a public long bet about that question, with a $5000 […]
To understand my point, I need to first explain three different cryptography attack papers / blog posts. I promise this won’t be boring. Three Little Disclosures Misuse-Prone Ciphers For All In a blog post titled Carelessness versus craftsmanship in cryptography, cryptography analyst and Queer in Cryptography emcee Opal Wright delves into the misuse-prone and side-channel-riddled […]
