Stirling PDF: Self-hosted, web-based PDF manipulation tool
Article, Comments

The most important cryptography papers
Article, Comments

Recovering the master key from RAM to break Android's file-based encryption (2021)
Article, Comments

> Apple solves the problem in hardware by streaming the persistent storage data through dedicated silicon. Not only is this extremely fast, it guards the key. For the Intel versions of Mac, this was done in the T2 coprocessor.

>> The flipside of this is availability. Your T2 coprocessor is now permanently tied to your data. This means if the chip dies, there's no recovery unless you have a backup encrypted with a separate key (with its own confidentiality/availability tradeoff).
(And if anything else on your motherboard dies, Apple's official answer is "you're f*cked", since they refuse to do board-level repair.)

Automated integer hash function discovery
Article, Comments

Library for parsing internal structures of PE32/PE32+ binary files:
https://github.com/jovibor/libpe

Pepper is one of the apps that is built on top of the libpe:
https://github.com/jovibor/Pepper

Sora competitor appeared in China

The model is called Vidu, it allows you to generate 16-second videos with a resolution of 1080 from prompts.

The project uses the Universal Vision Transformer (U-ViT) architecture, which combines the best of the Diffusion and Transformer models.

The lag behind Sora is visible in some places, but even if everything turns out like in these videos, it’s still a high bar.

#AI

Analyze docker image size

https://github.com/remorses/docker-phobia

#docker

Full-fledged game locations from a short space - this is how the combo of Stable Diffusion 1.5, ControlNet, TripoSR and three.js works.

You just run around the map and create textures with text, magic. The developer promises to share the code soon.

In a couple of more years, gamedev courses will teach effective and optimized prompts for neural networks.

Source
#AI

For those that are interested in malware research:

https://github.com/vxunderground/MalwareSourceCode

StackOverflow is in the midst of a civil war.

Recently StackOverflow established a partnership with OpenAI. Users have begun to rebel against this by deleting answers. StackOverflow has retaliated by doing sweeping bans

https://www.tomshardware.com/tech-industry/artificial-intelligence/stack-overflow-bans-users-en-masse-for-rebelling-against-openai-partnership-users-banned-for-deleting-answers-to-prevent-them-being-used-to-train-chatgpt

The article discusses a bizarre cryptographic bug that was discovered and fixed in the Telegram messaging app's protocol (called MTProto) around 7 years ago. The bug allowed Telegram's servers to perform an undetectable man-in-the-middle attack and decrypt all messages in supposedly end-to-end encrypted "secret chats".
The issue stemmed from Telegram using standard finite-field Diffie-Hellman key exchange to establish a shared secret between chat participants, but then pointlessly XORing the result with a server-provided nonce value. This allowed the server to manipulate the nonce so that both parties ended up with the same key, which the server also knew, breaking the encryption.

Removing the nonce step fixed the vulnerability, showing it served no legitimate purpose. The author finds this the most backdoor-looking bug they've seen, as the protocol designers seemingly went out of their way to add complexity that only enabled interception. An official Telegram statement apparently claimed the nonce was to protect clients with weak randomness, but the author dismisses this explanation as nonsensical.
While this is an old issue and there may be better reasons not to use Telegram today, the author still considers it a prime example of how blatant and bizarre cryptographic backdoors can look in practice. The unnecessary complexity is a big red flag.