Sign in

Diego F. Aranha

@dfaranha.bsky.social
808 followers 538 following 185 posts

Associate Professor of Cryptographic Engineering at Aarhus University. dfaranha.github.io

PostsRepliesMedia
Reposted by Diego F. Aranha
evacide @evacide.bsky.social · 10/09/2026
If you optimize a model to find exploits, you should expect it to find them—and prepare for that. OpenAI didn't. They built a model, removed the safeguards, gave it the ExploitGym task, let it run, and didn't even monitor it. That's human decision-making. mail.cyberneticforests.com/models-dont-...
mail.cyberneticforests.com
Models Don't Go Rogue
Stochastic Flocks & Cybersecurity 'Pandemonium' 💡This essay was drafted from my appearance on Mél Hogan's podcast, The Data Fix, discussing the OpenAI / Hugging Face hack. Embedded below or find it o...
8288111
Diego F. Aranha @dfaranha.bsky.social · 10/09/2026
Teenage Wasteland is a fantastic Netflix documentary, and so needed at this point in time.
020
Diego F. Aranha @dfaranha.bsky.social · 09/09/2026
Hey, look at this technology built by humans after training huge models on troves of data stolen from other humans running inference on GPUs and infrastructure built by humans, and even preserving the human biases present in the training data or creating all kinds of human drama! Let's call it AI.
060
Reposted by Diego F. Aranha
Claudio Orlandi @claudiorlandi.bsky.social · 05/08/2026
News from #aarhuskrypto: we welcome postdocs LaKyah Tyner, Mahak Pancholi, Sebastian Hasler and Hamidreza Khoshakhlagh! users-cs.au.dk/orlandi/cryp...
users-cs.au.dk
Aarhus Crypto Group
021
Reposted by Diego F. Aranha
Marcel Ribeiro-Dantas, Ph.D. @mribeirodantas.bsky.social · 04/08/2026
Bora, turma! Experiência super bacana aqui no Brasil :)
011
Reposted by Diego F. Aranha
yaso @yaso.is · 28/07/2026
Não sei como o governo consegue ter a cara de pau de discutir soberania e AI com esses valores desse jeito. Mals ae pelo fogo amigo
183
Diego F. Aranha @dfaranha.bsky.social · 28/07/2026
Vamos chegando perto do período eleitoral...
160
Reposted by Diego F. Aranha
Dare Obasanjo @carnage4life.bsky.social · 28/06/2026
Ford has rehired hundreds of senior engineers after replacing them with AI backfired and has cost the company billions of dollars. AI adoption is blamed for Ford being the most recalled automaker in the U.S. with 51 recalls covering over 11 million vehicles in the first half of 2026 alone.
340105133960
Reposted by Diego F. Aranha
Guillaume Hiet @guillaumehiet.bsky.social · 23/06/2026
ISC 2026 submission deadline extended to July 2! Keynotes by Shweta Shinde and Diego Aranha. Submit your latest work in cybersecurity: isc2026.github.io 🇫🇷 Join us in Rennes this October — including a social event at Mont-Saint-Michel!
isc2026.github.io
ISC 2026: Information Security Conference
021
Reposted by Diego F. Aranha
Nadim Kobeissi @nadim.computer · 17/06/2026
Today I learned that a *third* former student got accepted into a top grad program abroad as a direct consequence of my applied cryptography mentorship in Lebanon last year. Walking in Paris with my chest so puffed from pride that it’s pushing cars out of the way and denting buildings
0171
Reposted by Diego F. Aranha
Riana @riana.bsky.social · 20/05/2026
Reminder that I maintain a periodically-updated reading list of papers at the intersection of E2EE and Trust & Safety; suggestions welcome: docs.google.com/spreadsheets...
docs.google.com
Encryption + Trust & Safety reading list (updated 2026-05-20)
28322
Reposted by Diego F. Aranha
Nadim Kobeissi @nadim.computer · 09/06/2026
Today is both: - First day of the summer semester of my applied cryptography course! WE'RE BACK BABY - Deltarune Chapter 5 is likely to be announced (during today's Nintendo Direct) TODAY IS A GOOD DAY
081
Reposted by Diego F. Aranha
Clément Canonne @ccanonne.github.io · 02/06/2026
A list of principles put forth by mathematicians, for mathematicians and other researchers, regarding the use of AI in research. "Number #9 will surprise you!" leidendeclaration.ai
leidendeclaration.ai
Leiden Declaration on Artificial Intelligence and Mathematics
This declaration calls for action to address the challenges posed by the use of artificial intelligence within mathematics research.
02711
Diego F. Aranha @dfaranha.bsky.social · 03/06/2026
It's that time of the year again: Systems Security exam week! If you remember, this is the final task in my graduate-level course where students put theory to practice and perform security analysis of a mobile app. There's so much broken stuff out there that I am having trouble sleeping at night.
2145
Reposted by Diego F. Aranha
David Slack @slack2thefuture.bsky.social · 02/06/2026
Hilarious and deeply insightful writing by @brianphillips.lol.
Because the truth is, tech doesn't have an image problem. It doesn't have a message problem. It has an intention problem. What's wrong with the axe murderer who broke into my house is not that he hasn't successfully persuaded me to buy into his narrative. What's wrong is that he's trying to kill me with an axe. Similarly, when you launch a product that's designed to put millions of people out of work, block access to sources of verifiable truth, replace human creativity with slop, and lower the barriers to every sort of atrocity, the problem isn't that you haven't told the public a good story about those things. The problem is that you are trying to do them.
3042751645
Reposted by Diego F. Aranha
OpenMedia @openmedia.org · 04/05/2026
🇨🇦's #BillC22 is entering committee study this week - and we're hearing it may become law by end of the month. We never say this: but this is the worst, most privacy-breaking bill we've seen. It MUST be stopped. Speak up against it and read on to learn more: www.openmedia.org/StopC22-bsky 1/
openmedia.org
Stop the Surveillance State: Stop Bill C-22!
🚨 Bill C-22 forces every Canadian internet provider, messaging app & cloud service to build surveillance backdoors and store a year of your data. Foreign state hackers exploited similar legislation in...
12225198
Reposted by Diego F. Aranha
Laurens @laurenshof.online · 02/06/2026
the even more fun problem is, that because NL Wallet uses remote app attestation, it checks Googles servers for verification every time you use the app, meaning that Google holds a kill switch for our national ID wallet
35114
Reposted by Diego F. Aranha
ePrint Updates @eprint.ing.bot · 31/05/2026
A gentle introduction to lattice-based cryptography (Alfred Menezes) ia.cr/2026/1098
Abstract. We present the quantum-safe Kyber key encapsulation mechanism (ML-KEM) and the Dilithium signature scheme (ML-DSA). We also develop the mathematical background on lattices needed to understand why Kyber and Dilithium are regarded as lattice-based cryptosystems, and we provide insight into the computational hardness of the underlying lattice problems. The exposition is intended to be accessible to senior undergraduate students and beginning graduate students.
0187
Reposted by Diego F. Aranha
Tjerand Silde @tjesi.bsky.social · 08/05/2026
We are happy to host Stefano Tessaro (@stefanotessaro.bsky.social), Anja Lehmann, Gregor Seiler, and Sofia Celi (@claucece.bsky.social) as keynote speakers in addition to the contributed talks. Check out the abstracts here: privcryptworkshop.github.io/keynotes.html
privcryptworkshop.github.io
PrivCrypt 2026
042
Reposted by Diego F. Aranha
Markus Eichhorn @markuseichhorn.bsky.social · 07/05/2026
Bingo! Do I win a prize now?
Comic strip titles self-sabotaging academic habits that feel normal, featuring nine panels.
1122583
Reposted by Diego F. Aranha
Chris @chrisdkmx.skyen.live · 23/04/2026
(ifølge Diego Aranha udtryk for et bredt og markant skift i Silicon Valley, der i årtier stod for åbenhed, ærlighed og liberale værdier. Nu er de blevet lukkede, de gnubber åbenlyst skuldre med den amerikanske præsident og leverer med glæde til forsvarsministeriet.) Tænk over det.
172
Reposted by Diego F. Aranha
Sabine Oechsner @proofnerd.bsky.social · 17/04/2026
I'm looking for a PhD student to work with me on formal verification for cryptographic protocols. This is a 4-year position at VU Amsterdam, co-supervised with Kristina Sojakova. Send me an email if you want to know more!
11013
Reposted by Diego F. Aranha
Alex Blechman @alexblechman.bsky.social · 18/04/2026
It’s inaccurate to say Mario is brave and Luigi is cowardly Luigi is afraid of death, so he runs away from danger. Mario is afraid of living, so he runs towards death. Both brothers are cowards in their own way
96155273054
Reposted by Diego F. Aranha
Filippo Valsorda @filippo.abyssdomain.expert · 15/04/2026
There are only two bug classes left: complexity and memory safety. CurveBall (CVE-2020-0601)? Complexity. BigSig (CVE-2021-43527)? Memory safety. Log4Shell (CVE-2021-44228)? Complexity. BlueKeep (CVE-2019-0708)? Memory safety. Heartbleed looks like memory safety, but it's actually complexity.
413917
Diego F. Aranha @dfaranha.bsky.social · 14/04/2026
We performed a security analysis of the LINE messenger in our latest paper, "LINE-Break: Cryptanalysis and Reverse Engineering of Letter Sealing", to appear in ACM ASIACCS’26. Joint work with Thomas Kingo Mogensen and Adam B. Hansen @csaudk.bsky.social. Full technical details at linebreak.info
linebreak.info
We analyze its underlying end-to-end encryption (E2EE) protocol Letter Sealing v2 (LSv2) and show that a TLS Man-in-the-Middle (MitM) or malicious server can compromise integrity, authenticity, and confidentiality in various experimentally verified attacks.
1122
Reposted by Diego F. Aranha
Simon Marks @simonmarksfsn.bsky.social · 08/04/2026
Impossible to disagree with a single word that Ben Rhodes (Obama era NSC official) is saying here:
465231447589
Reposted by Diego F. Aranha
Krijn Reijnders @krijn.isogeni.es · 02/04/2026
I should add to this: winner of best paper award at Eurocrypt 2026!! As a single author. During his PhD. Incredible achievement!(protip: he will graduate soon-ish 👀)
033
Reposted by Diego F. Aranha
Heber Lobato Jr. @lobatadas.bsky.social · 01/04/2026
CC @janiceascari.bsky.social @rubensvalente.bsky.social @ritchieguy.bsky.social @dfaranha.bsky.social @camposmello.bsky.social @miriamleitao7.bsky.social @igorgadelham.bsky.social @dharazim.bsky.social @imont.bsky.social @shalders.bsky.social
011
Reposted by Diego F. Aranha
Nigel Smart @smartcryptology.bsky.social · 01/04/2026
Enjoy your April.... debrisprint.iacr.org
debrisprint.iacr.org
Craptology debrisPrint Snarkive
084
Reposted by Diego F. Aranha
Martin R. Albrecht @malb.bsky.social · 03/03/2026
Fernando is looking for a PhD student www.iacr.org/jobs/item/4164 Fernando is excellent, you should consider applying.
iacr.org
PhD position in Cryptanalysis
154
Reposted by Diego F. Aranha
Real World Crypto Symposium @rwc.iacr.org · 10/03/2026
Speaker Nikolas Melissaris talks about What Is Cryptography Hiding from Itself? by Diego F. Aranha and Nikolas Melissaris.
095
Reposted by Diego F. Aranha
Real World Crypto Symposium @rwc.iacr.org · 10/03/2026
The room gets philosophical. Cryptography & Society chaired by Nick Sullivan ( @nicksullivan.org ): what is crypto hiding from itself? Security vs. interoperability? CRA policy? Proofs that aren't enough? And Nadim Kobeissi on teaching crypto in post-crisis Lebanon. #realworldcrypto
184
Reposted by Diego F. Aranha
Nadim Kobeissi @nadim.computer · 03/02/2026
Come be part of Cedarcrypt, our historic new initiative to grow cryptography research, development and representation in the Levant region! We're seeking speakers and workshop leaders: our call for submissions is open! Learn more: cedarcrypt.org Please spread the word!
cedarcrypt.org
Cedarcrypt 2026 - Applied Cryptography Summer School & Conference
Join us for four days of applied cryptography in the Mediterranean. July 13-16, 2026 at AUB Mediterraneo Campus, Paphos, Cyprus.
0107
Reposted by Diego F. Aranha
Ian Coldwater 🧊🚫 @lookitup.baby · 27/02/2026
So much ICE out there today in South Minneapolis. They’re prowling around harassing schools. Stay frosty, friends
6446159
Reposted by Diego F. Aranha
Matthew Green @matthewdgreen.bsky.social · 03/02/2026
I wrote a short blog post on the WhatsApp lawsuit, or whatever it is. blog.cryptographyengineering.com/2026/02/02/w...
blog.cryptographyengineering.com
WhatsApp Encryption, a Lawsuit, and a Lot of Noise
It’s not every day that we see mainstream media get excited about encryption apps! For that reason, the past several days have been fascinating, since we’ve been given not one but sever…
24826
Reposted by Diego F. Aranha
Robert McNees @mcnees.bsky.social · 24/01/2026
It has gotten so bad that the @nytimes.com has stopped using the passive voice to describe the violence.
An NYT headline reads “Federal Officers Shoot Person in Minneapolis”
5948271160
Reposted by Diego F. Aranha
Lukasz Olejnik @lukaszolejnik.bsky.social · 23/01/2026
Software error in continuous glucose monitors caused 736 serious injuries, and seven deaths. abbott.mediaroom.com/press-releas...
0129
Reposted by Diego F. Aranha
Sine Dolis @sinedolis.eurosky.social · 15/01/2026
Bad news for other minorities, for the media, for civil society, the rule of law and democracy, too
011
Reposted by Diego F. Aranha
Sabine Oechsner @proofnerd.bsky.social · 17/12/2025
Come work with Peter Scholl @schollster.bsky.social and me in Aarhus!
042
Diego F. Aranha @dfaranha.bsky.social · 16/12/2025
If you believe that smart people cannot do utterly dumb things, just look at the Eurocrypt'26 rebuttal process.
152
Diego F. Aranha @dfaranha.bsky.social · 09/12/2025
Achievement unlocked.
130
Reposted by Diego F. Aranha
Zohran Kwame Mamdani @zohrankmamdani.bsky.social · 07/12/2025
Know your rights. Protect your neighbors. New York is — and always will be — a city for all immigrants.
310294757199
Reposted by Diego F. Aranha
Lukasz Olejnik @lukaszolejnik.bsky.social · 03/12/2025
CRITICAL security vulnerability in a really popular web framework React server. Maximum severity (CVSS: 10.0). Unauthenticated remote code execution. May be WORMABLE. Patch immediately. This could get very nasty. Patch this, and all that depends on it (like Next.js) react.dev/blog/2025/12...
0218
Reposted by Diego F. Aranha
Courtney Milan @courtneymilan.com · 24/11/2025
I think it’s pretty clear at this point that one of the main impacts of LLMs is to disrupt thinking: to make it so that far too many people never properly learn how to do it, and then to control the output so there are thoughts that people never learn how to think.
321783493
Reposted by Diego F. Aranha
Nadim Kobeissi @nadim.computer · 23/11/2025
My thoughts on the IACR election issue (since many have asked privately): - This was an honest accident, and Moti Yung deserves being cut some slack. Yes, it’s a silly mistake, but mistakes happen. - The IACR board reacted excellently and scheduled timely follow up elections. Continued in thread
172
Reposted by Diego F. Aranha
The Guardian @theguardian.com · 13/10/2025
Against ‘chat control’: we can’t eliminate child abuse by eliminating privacy
theguardian.com
Against ‘chat control’: we can’t eliminate child abuse by eliminating privacy
Banning online anonymity tools like Tor won’t stop crime. It will only drive people underground and normalize government control over the internet
36522
Reposted by Diego F. Aranha
Matthew Green @matthewdgreen.bsky.social · 15/10/2025
The “age verification” and the “human identification” problem are the same problem. It upsets me to be around people who think they’re working on the first, but don’t understand they’re actually working on the second.
media.tenor.com
a woman in a purple sweater says they are the same picture
ALT: a woman in a purple sweater says they are the same picture
311131
Reposted by Diego F. Aranha
Center for Online Safety and Liberty @c4osl.org · 14/10/2025
"Governments across the world are expanding surveillance, weakening encryption, and curtailing freedoms under the guise of staunching the proliferation of sexual images and videos of children" www.theguardian.com/commentisfree/2… #Privacy
theguardian.com
Against ‘chat control’: we can’t eliminate child abuse by eliminating privacy
Banning online anonymity tools like Tor won’t stop crime. It will only drive people underground and normalize government control over the internet
054
Reposted by Diego F. Aranha
Matthew Green @matthewdgreen.bsky.social · 14/10/2025
This is amazing research by Nadia Heninger and her co-authors Wenyi Morty Zhang, Annie Dai, Keegan Ryan, Dave Levin and Aaron Schulman. TL;DR a huge number of satellite links over our heads are totally unencrypted. satcom.sysnet.ucsd.edu
satcom.sysnet.ucsd.edu
🛰️ SATCOM Security
Research project homepage for SATCOM Security: papers, source code, and recent satellite communications vulnerabilities.
514768
Reposted by Diego F. Aranha
Robert Reich @rbreich.bsky.social · 13/10/2025
The 400 richest Americans are now worth a record $6.6 trillion. The entire bottom 50% of America is worth just $4.2 trillion. Read that back. When 400 people control more wealth than half a country’s population, we have a very serious problem.
776239449037