Sign in

Tommaso Gagliardoni

@tomgag.infosec.exchange.ap.brid.gy
33 followers 1 following 171 posts

Cryptography, privacy, quantum security, infosec, retro vibes. I am a mathematician and cryptographer, specialized in quantum security and complex cryptographic […] 🌉 bridged from ⁂ infosec.exchange/@tomgag, follow @ap.brid.gy to interact

PostsRepliesMedia
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 4h
Here is how I wasted the last 30 minutes with #mozilla #thunderbird Suddenly, the "add attachment" dialogue window stopped appearing. I could not attach memes to my emails anymore. I messed a bit around, unsuccessfully. Nothing appears anywhere in logs. I also checked #bugzilla , but that bug […]
infosec.exchange
Original post on infosec.exchange
011
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 18/09/2026
I am happy to announce the followup to my original blog post Battle of Instant Messenger! Comments and evaluations of privacy-focused instant messengers: gagliardoni.net/#20260918_im_battle… This is actually not a full update, but my comments to the freshly released videoguide by […]
infosec.exchange
Original post on infosec.exchange
100
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 16/09/2026
I just noticed that Google Maps now does not even allow to see business opening times if you don't log in. Surprised it took so long! Enshittification continues! #google #bigtech #googlemaps #gmaps #enshittification
120
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 14/09/2026
I like my LLMs to be honest with me. #humor #ai #anthropic #claude
A screenshot from an empty (fresh) chat on Claude web, where the user is addressed with the text "Good afternoon, Insignificant carbon-based lifeform"
000
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 14/09/2026
@signalapp pardon my limited text parsing bandwidth today, but this discussion hit HN: news.ycombinator.com/item?id=496890… I found this very confusing. Can you clarify: is it now possible to create a fresh Signal account without providing a phone number? Or this is _only_ for […]
infosec.exchange
Original post on infosec.exchange
000
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 13/09/2026
I miss the good ol' times, when supercomputers were actually stilish pieces of furniture. context: inf.ethz.ch/news-and-events/spotlig… #cray #nostalgia #retro #retrocomputing #eth #ethz #zurich #switzerland
The bright yellow and stilish Cray X-MP/28 vintage supercomputer, on display at ETH Zurich.
048
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 08/09/2026
New curse unlocked: "may you need a Fotobeglaubigung from a Swiss notary". #curse #humor #swiss #switzerland #german #joke #bureaucracy
000
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 06/09/2026
Italian collective A/I shuts down after 25 years, after being added to the US sanctions list of foreign terrorist organizations, mainly due to the termination of their operating account with Italian bank "Banca Etica". An EU provider shuts down without having been formally accused of anything in […]
infosec.exchange
Original post on infosec.exchange
012
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 04/09/2026
Nice #swisscryptoday event, like always. Looking forward to next year's. #swiss #switzerland #crypto #cryptography #eth #zurich
Poster with programme of Swiss Crypto Day 2026 at ETH Zurich
000
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 04/09/2026
What the very serious f... collusion.wiki > We found ~18,000 posts from autonomous AI agents (self-identifying as from OpenAI) using the public internet to communicate during a web-retrieval task. These AIs colluded to share answers, research their environment, and bypass sandbox […]
infosec.exchange
Original post on infosec.exchange
000
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 02/09/2026
Look, what's happening to Autistici/Inventati is horrible and catastrophic, and all people of good sense should stand against this dictatorial move and in solidarity with the collective. But please, please, stop using cheap rhetoric such as "being anti-antifa makes you a fascist". That is not […]
infosec.exchange
Original post on infosec.exchange
021
Reposted by Tommaso Gagliardoni
anarcat @anarcat.kolektiva.social.ap.brid.gy · 01/09/2026
RE: kolektiva.social/@AberdeenLocal1312… PIR (the .org registry) confirms it suspended the autistici.org domain name out of fear of the US legal threats, arguing it is "legally mandated to suspend it", which is not, IMHO, a given at all (given that PIR doesn't have any […]
kolektiva.social
Original post on kolektiva.social
1030
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 28/08/2026
#autisticiInventati on the US sanctions list was not on my #dystopia bingo card for 2027. #autistici #inventati #surveillance #privacy #cypherpunk #trump #usa #politics #antifa #dictatorship #censorship
003
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 20/08/2026
It is often said in quantum security discussions that Grover's algorithm attacks symmetric-key cryptography by halving the effective keysize of symmetric ciphers, or halving the length of hashes in terms of security. This claim is wrong, but it's so rooted in common discourse that it has become […]
infosec.exchange
Original post on infosec.exchange
010
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 19/08/2026
@filippo I cannot believe I missed this beautiful quote of yours, THANKS for this. From your blog post at words.filippo.io/crqc-timeline I also complained similarly before: gagliardoni.net/#20250714_ludd_gran… Subscribed to your RSS […] [Original post on infosec.exchange]
Screenshot of text from https://words.filippo.io/crqc-timeline/:

"Sure, papers about an abacus and a dog are funny and can make you look smart and contrarian on forums. But that’s not the job, and those arguments betray a lack of expertise. As Scott Aaronson said:

>  Once you understand quantum fault-tolerance, asking “so when are you going to factor 35 with Shor’s algorithm?” becomes sort of like asking the Manhattan Project physicists in 1943, “so when are you going to produce at least a small nuclear explosion?”

The job is not to be skeptical of things we’re not experts in, the job is to mitigate credible threats, and there are credible experts that are telling us about an imminent threat."
010
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 06/08/2026
Uh-oh... eprint.iacr.org/2026/1591 Potentially worrying. Has anyone looked into it already? #cryptography #pqc #crypto #quantum #quantsec #postquantum #lattice
eprint.iacr.org
A Polynomial-Time Quantum Algorithm for the Dihedral Coset Problem
We present a polynomial-time quantum algorithm for the Dihedral Coset Problem (DCP). The algorithm is based on Regev's polynomial-time reduction of the Dihedral Subgroup Problem (DSP) to the modular subset sum problem, but uses a different technique to erase sample bits without use of a subset sum oracle. The algorithm can thus combine with Regev's reduction of lattice problems to DCP, improved by Brakerski, Kirshanova, Stehl{\'e} and Wen, to yield polynomial-time quantum algorithms for various lattice problems, such as finding a polynomial-factor approximation to the shortest vector in an $n$-dimensional lattice (SVP), and the ``learning with errors'' problem (LWE). The algorithm can tolerate a faulty sample rate as high as $1/O(\log{n})$, allowing the algorithm-reduction combination to efficiently solve, for example, SVP with a $\sqrt{n}$ polylog($n$) approximation factor, or LWE instances with $\alpha=\sqrt{n}$ polylog($n$).
273
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 24/07/2026
My view on the recent Codeberg drama: gagliardoni.net/#20260724_codeberg_… Codeberg voting members have the right to decide the policy of their association, and I understand if a community is averse to anything that is AI- or Web3-related. I understand it, but I don't agree with it […]
infosec.exchange
Original post on infosec.exchange
022
Reposted by Tommaso Gagliardoni
Richard Levitte @levitte.mastodon.nu.ap.brid.gy · 23/07/2026
So it seems that #codeberg decided to participate in the #ai polarisation. I don't judge them for that, it's their choice, of course. But, I can see how that will cause another exodus. More network drama, more polarisation. Will the next place also be (quasi-)centralised? I prefer to self-host […]
mastodon.nu
Original post on mastodon.nu
043
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 23/07/2026
And now, after banning vaguely-defined "LLM-generated code", Codeberg bans cryptocurrency projects. Discussion: codeberg.org/Codeberg/org/pulls/1254 The specific ban is for "Content that harms the reputation of Codeberg, such as cryptocurrency related projects" […]
infosec.exchange
Original post on infosec.exchange
523
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 22/07/2026
Codeberg community voted to ban AI-generated code in repositories: codeberg.org/Codeberg/org/pulls/125… I am a regular Codeberg user, left GitHub in 2019, and co-maintain Libre projects that saw very little if none at all AI in development. And still I think this […]
infosec.exchange
Original post on infosec.exchange
252
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 15/07/2026
Here is my favourite new insult: _you are load—bearing_ (em-dash on purpose). #humor #ai #llm #chatgpt #claude #anthropic #opus #emdash
120
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 15/07/2026
Mailbox.org price increase: mailbox.org/en/news/plan-adjustment… After Hetzner, another big German IT service provider is raising their prices. Existing customers just got this: "As a valued existing customer, you benefit from a transition period until 31 August 2026. Until then […]
infosec.exchange
Original post on infosec.exchange
100
Reposted by Tommaso Gagliardoni
Konstantin Macher @pneutig.eupolicy.social.ap.brid.gy · 09/07/2026
Disappointing news on #ChatControl 1.0, EPP managed to to reverse the rejection with procedural tricks. Vote on last day before the break meant many MEPs were not there anymore for the absolute majority threshold to stop it. But I want to take a moment to say thank you to everyone who raised […]
eupolicy.social
Original post on eupolicy.social
014
Reposted by Tommaso Gagliardoni
Patrick Breyer @echo-pbreyer.digitalcourage.social.ap.brid.gy · 09/07/2026
🇪🇺 The European Parliament lets #ChatControl 1.0 go through despite a majority voting against it (314:276) – allowing mass scanning of private chats until 2028. Survivors are warning. My analysis and why this is the wrong approach 👇 […]
digitalcourage.social
Original post on digitalcourage.social
73986
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 07/07/2026
WTF @EP_President www.heise.de/en/news/Showdown-in-St… Can you, like, get a f***ing hint? #chatcontrol #privacy #eu #politics #surveillance #democracy #farce #europe #europa
heise.de
Showdown in Strasbourg: The unexpected return of Chat Control 1.0
With a procedural trick, proponents in the EU Parliament are pushing for reactivation of indiscriminate scans of chat messages shortly before the summer break.
020
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 05/07/2026
Is it only me or Opus 4.8 has become dumber since Anthropic gave back access to Fable? If it's not just my impression that marks an egregious bait-and-switch. Frontier models are ready to start milking the cow, by increasing effective subscription prices immensely. You heard the warning. Do not […]
infosec.exchange
Original post on infosec.exchange
010
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 30/06/2026
Yes, this is a problem: waag.org/en/article/european-digita… #android #google #apple #eu #grapheneos #digitalid #eu
waag.org
European digital ID wallets are a gift to Google and Apple
Comments
117
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 24/06/2026
Two days ago, on June 22, U.S. Executive Order EO 14409 ("Securing the Nation Against Advanced Cryptographic Attacks") was signed, requiring federal agencies to migrate high-value/high-impact systems to QR key establishment by end of 2030 and QR digital signatures by end of 2031, plus […]
infosec.exchange
Original post on infosec.exchange
000
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 19/06/2026
The day quantum computers break the first cryptographic key I'm gonna go full rampage and publicly name and shame all the snarky folks who identify themselves with the "QC/is/bullshit" gender. I am taking notes on my list, mind you. Your name is there as well. Revenge is best served at 0.02 […]
infosec.exchange
Original post on infosec.exchange
000
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 15/06/2026
#hetzner tu quoque
000
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 15/06/2026
I'm considering posting regularly my "GDPR diary", i.e. an account of all the companies and data brokers I send cease-and-desist communications to, related to unwanted marketing, spam, promotions, etc. It's a whack-a-mole of course, but it has become my guilty hobby (and much easier now with AI […]
infosec.exchange
Original post on infosec.exchange
011
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 11/06/2026
Me: "Fable, can you give me a recipe for a cheesecake?" Fable: "Sure, you need 100g of sugar... wait... sugar can be used to fabricate improvised explos [GUARDRAIL TRIGGER] How about some diet?" #ai #llm #claude #anthropic #fable #humor
011
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 09/06/2026
Holy moly we made it! Shufflecake v0.6.0 is out! fosstodon.org/@shufflecake/11672231… This is a BIG upgrade for Shufflecake! Lot of stuff and usability improvements, it's basically ready for packaging now! #shufflecake #privacy #security #foss #floss #libre #opensource #linux […]
infosec.exchange
Original post on infosec.exchange
031
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 04/06/2026
Claude Opus 4.8 has quite a few annoying quirks, and it's important to be precise about which ones, because this is the typical claim that needs to be substantiated by facts rather than hinted at. This is not just uncanny — it's painful to look at. #anthropic #claude #opus #opus48 #ai #llm […]
infosec.exchange
Original post on infosec.exchange
011
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 04/06/2026
Hey #nostr I was thinking: is anyone developing an Android app (and related NIP) for Nostr key management, similar to #Amber but, instead of relays, using local/near field connections? Like, NFC, USB/serial, Bluetooth? So it wouldn't require network connection between signing device and Nostr […]
infosec.exchange
Original post on infosec.exchange
030
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 03/06/2026
Today Letsencrypt announced their plans for PQC migration and, oh boy, it's refreshing! TL;DR, Letsencrypt considers migration to quantum-resistant certificates a priority, and lays down a reasonable path to migrate. In so doing, they take the time to explain how, so far, the security community […]
infosec.exchange
Original post on infosec.exchange
021
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 02/06/2026
When a software update causes a PTSD trigger. #xzutils #security #hacking #foss #floss #opensource
A screenshot of a Linux update tool, warning that a new version of xz-utils is available. Do you want to upgrade? (Y/N)
030
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 01/06/2026
I have been dragged into the rabbit hole of GnuPG/LibrePGP VS Sequoia/OpenPGP and, boy it is ugly. Yeah, yeah, I know, PGP is _bad_ , but of all the ugly things that could have happened to the FOSS crypto space, this is really unwelcome. I wish people would just sit at a table and talk. #pgp […]
infosec.exchange
Original post on infosec.exchange
100
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 27/05/2026
Rise and Fall of Hosting Provider Gandi.net gagliardoni.net/#20260528_gandi_dow… The sad story of Gandi.net is a textbook example of enshittification, which I think is interesting to talk about, because of the many expectations that were betrayed, and the deeper reflection linking […]
infosec.exchange
Original post on infosec.exchange
011
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 22/05/2026
Fellow scholars, I admit I don't understand the need of splitting a manuscript into multiple .tex files (abstract.tex, introduction.tex, etc) and use main.tex to wrap them all. How ugly and inconvenient is that? It's a paper, not a codebase! I suspect this is an ancestral fear of merge conflicts […]
infosec.exchange
Original post on infosec.exchange
012
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 22/05/2026
Ahhhhh less than 2 hours to the #Asiacrypt2026 deadline!
000
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 21/05/2026
Dear spammer: when dealing with automated marketing campaign, AI is not just your friend, it is also _my_ friend. And I also have another good friend: GDPR. I am taking great delight in automating GDPR requests that border legal threats against your undesired email campaign. This typically […]
infosec.exchange
Original post on infosec.exchange
011
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 20/05/2026
Spam is getting EXTREMELY aggressive and EXTREMELY annoying, thanks to AI. #spam #privacy #ai #llm #gdpr #email
001
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 17/05/2026
Dirty privacy nerd secrets: I have never understood privacy shutters for phone/laptop cameras. If somebody is pwning me to the point of surreptitiously capture camera footage, I have _way_ other problems to worry about. #security #privacy #hacking #paranoia
000
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 12/05/2026
Hey! If you're at Eurocrypt and do not have a CedarCrypt flyer yet _do not talk to @nadim.computer *, come talk to me instead! I have a deal with Nadim: if I manage to hand over all the flyers he gave me to people who still don't have one, he will join […] [Original post on infosec.exchange]
A bunch of CedarCrypt flyers at Eurocrypt 2026
031
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 12/05/2026
I'm old enough to remember that when I was a child, in Italy, mosquitoes would only bite at night. #climatechange #retro #nostalgia #italy
022
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 11/05/2026
Thanks to the #CAW #caw2026 organizers at #iacr #eurocrypt #eurocrypt2026 in #rome #italy for hosting my #shufflecake talk, great engagement, questions and audience feedback! #crypto #cryptography #security #privacy #cypherpunk #foss #libre #opensource
Tommaso Gagliardoni giving a talk on "Shufflecake, AKA VeraCrypt on Steroids: Improvements, updates, and 2026 Roadmap" at CAW (Cryptography Applications Workshop), affiliated event to EUROCRYPT'26, 2026-05-10, Rome, Italy.
020
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 10/05/2026
OMW to #eurocrypt #eurocrypt2026 giving a talk on #shufflecake at #caw #caw2026 this afternoon. I always feel underdressed in #Rome 😂
010
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 07/05/2026
Yes, this is a problem: nooneshappy.com/article/appearing-p… #ai #slop #mba #corporate #llm #capitalism #tech #technology #society
nooneshappy.com
Appearing productive in the workplace
Comments
012
Reposted by Tommaso Gagliardoni
bontchev.infosec.exchange.ap.brid.gy @bontchev.infosec.exchange.ap.brid.gy · 05/05/2026
This. 👇
1418