Six years ago, I wrote a blog post titled Soatok's Guide to Side-Channel Attacks in which I discussed the general topic of side-channels in cryptographic applications, and how to avoid them, with example code in PHP. I had called out that the algorithms discussed on the page cannot rule out compiler or runtime optimizations that undermine your security goals: You can achieve…

Over the last year, our lab has been developing a policy on AI use. To do this, we did three main things: We read a lot of academic publications and tech news. We set up an #ai channel on our la...

Ghosted after a job interview? Submit an anonymous report and see which companies candidates say stopped responding after interviews.

Get more from Vellum on Patreon. Become a member for just $1/month. Hello everyone! I am Vellum! Also known in other places as Luís, or Kigai Holt. Here…