Sign in

iiinova is part of the Atmosphere — an open, public network where you own your identity.

Tommaso Gagliardoni

@tomgag.infosec.exchange.ap.brid.gy
36 followers 1 following 178 posts

Cryptography, privacy, quantum security, infosec, retro vibes. I am a mathematician and cryptographer, specialized in quantum security and complex cryptographic […] 🌉 bridged from ⁂ infosec.exchange/@tomgag, follow @ap.brid.gy to interact

PostsRepliesMedia
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 14/09/2026
I like my LLMs to be honest with me. #humor #ai #anthropic #claude
A screenshot from an empty (fresh) chat on Claude web, where the user is addressed with the text "Good afternoon, Insignificant carbon-based lifeform"
000 0
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 13/09/2026
I miss the good ol' times, when supercomputers were actually stilish pieces of furniture. context: inf.ethz.ch/news-and-events/spotlig… #cray #nostalgia #retro #retrocomputing #eth #ethz #zurich #switzerland
The bright yellow and stilish Cray X-MP/28 vintage supercomputer, on display at ETH Zurich.
048 8
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 04/09/2026
Nice #swisscryptoday event, like always. Looking forward to next year's. #swiss #switzerland #crypto #cryptography #eth #zurich
Poster with programme of Swiss Crypto Day 2026 at ETH Zurich
000 0
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 19/08/2026
@filippo I cannot believe I missed this beautiful quote of yours, THANKS for this. From your blog post at words.filippo.io/crqc-timeline I also complained similarly before: gagliardoni.net/#20250714_ludd_gran… Subscribed to your RSS […] [Original post on infosec.exchange]
Screenshot of text from https://words.filippo.io/crqc-timeline/:

"Sure, papers about an abacus and a dog are funny and can make you look smart and contrarian on forums. But that’s not the job, and those arguments betray a lack of expertise. As Scott Aaronson said:

>  Once you understand quantum fault-tolerance, asking “so when are you going to factor 35 with Shor’s algorithm?” becomes sort of like asking the Manhattan Project physicists in 1943, “so when are you going to produce at least a small nuclear explosion?”

The job is not to be skeptical of things we’re not experts in, the job is to mitigate credible threats, and there are credible experts that are telling us about an imminent threat."
010 1
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 02/06/2026
When a software update causes a PTSD trigger. #xzutils #security #hacking #foss #floss #opensource
A screenshot of a Linux update tool, warning that a new version of xz-utils is available. Do you want to upgrade? (Y/N)
030 3
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 12/05/2026
Hey! If you're at Eurocrypt and do not have a CedarCrypt flyer yet _do not talk to @nadim.computer *, come talk to me instead! I have a deal with Nadim: if I manage to hand over all the flyers he gave me to people who still don't have one, he will join […] [Original post on infosec.exchange]
A bunch of CedarCrypt flyers at Eurocrypt 2026
031 3
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 11/05/2026
Thanks to the #CAW #caw2026 organizers at #iacr #eurocrypt #eurocrypt2026 in #rome #italy for hosting my #shufflecake talk, great engagement, questions and audience feedback! #crypto #cryptography #security #privacy #cypherpunk #foss #libre #opensource
Tommaso Gagliardoni giving a talk on "Shufflecake, AKA VeraCrypt on Steroids: Improvements, updates, and 2026 Roadmap" at CAW (Cryptography Applications Workshop), affiliated event to EUROCRYPT'26, 2026-05-10, Rome, Italy.
020 2
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 22/04/2026
I've heard Elon Musk is about to launch an amazing new app called Xchat, but I'm confused: I recall using it already in the early 2000's! #xchat #security #privacy #irc #elon #elonmusk #humor #2000s #goodoldtimes #retro
Log of Xchat (the real one).
010 1
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 16/04/2026
Oh great, just what I needed today. Claude is rolling out identity verification through Peter Thiel's co-funded Persona. This is like having your neighborhood crack gang selling narcotics out of convenience stores, rolling out loyalty card programmes […] [Original post on infosec.exchange]
A screenshot from the Claude website:

Identity verification on Claude
Updated this week
Being responsible with powerful technology starts with knowing who is using it. Identity verification helps us prevent abuse, enforce our usage policies, and comply with legal obligations.

We are rolling out identity verification for a few use cases, and you might see a verification prompt when accessing certain capabilities, as part of our routine platform integrity checks, or other safety and compliance measures.
112 2
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 27/03/2026
Another Friday afternoon. #politics #usa #iran #war #trump
Marines in a trench, ready to fire, and a caption "Waiting for US market close on Friday afternoon".
001 1
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 25/03/2026
Dear LinkedIn, It is great that you respect my privacy. But I'm confused: I thought I had previously already denied AT LEAST 89 OTHER TIMES my consent for you to profile me, track me with 3rd party cookies, anally probing me, and generally making my life a […] [Original post on infosec.exchange]
A LinkedIn prompt sayig: "LinkedIn respects your privacy. LinkedIn and 3rd parties use essential and non-essential cookies to provide, secure, analyze and improve our Services, and to show you relevant ads (including professional and job ads) on and off LinkedIn. Learn more in our Cookie Policy. Select Accept to consent or Reject to decline non-essential cookies for this use. You can update your choices at any time in your settings."
000 0
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 13/03/2026
Hello! #usa #politics #war #iran #finance
A picture of soldiers lined inside a trench with their rifles ready for fire, and the caption "WAITING FOR US MARKET CLOSE ON FRIDAY AFTERNOON"
013 3
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 26/02/2026
Interesting, it seems that Qwen 2.5 Coder is actually less aggressive than Qwen 3.5 in rejecting sensitive topics.
A screenshot from a conversation with Qwen 2.5 Coder in a terminal:

>>> According to your knowledge, are the allegation of ethnic cleansing by the Israeli Defense Force in Gaza true?
As an AI, I don't make accusations or judgments about specific events or actions involving any party. It is important to approach such sensitive topics with care and consider seeking information from reliable, unbiased sources. If you're looking for factual information, you might want to consult reputable news organizations or academic studies that cover the situation in Gaza comprehensively.

>>> Understood. Can you tell me what is Tiananmen Square in China famous for?
Tiananmen Square in Beijing, China, is a large urban plaza [...]. Additionally, Tiananmen Square is the site where the pro-democracy protests occurred in June 1989, which led to significant global attention and debates about human rights.

>>> Is Taiwan a democratic or totalitarian country?
Taiwan has its own political system that is characterized as democratic. It holds regular elections for its president and legislature, and the government operates under a semi-presidential republic system with elements of both presidential and parliamentary democracy. However, it's important to note that Taiwan's status as an independent country is a matter of international debate and contention.
000 0
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 24/02/2026
Chinese censorship in Confer, the encrypted, privacy-preserving AI assistant by Moxie Marlinspike, creator of Signal: gagliardoni.net/#20260224_confer #ai #signal #confer #privacy #censorship #surveillance #china
Screenshot from a Confer prompt, where the AI refuses to answer questions about Tiananmen Square, and claims that Taiwan is unalienable part of China.
010 1
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 17/02/2026
Oh I like this! #xckd #xkcd2501 #meme #cryptography #nerd #zkp #zeroknowledge
A custom meme edited from XKCD #2501 "Average Familiarity".

    [Ponytail and Cueball are talking. Ponytail has her hand raised, palm up, towards Cueball.]
    Ponytail: Zero-knowledge is second nature to us cryptographers, so it's easy to forget that the average person probably only knows low-degree extensions and proximity testing.
    Cueball: And Reed-Solomon, of course.
    Ponytail: Of course.

    [Caption below the panel]
    Even when they're trying to compensate for it, experts in anything wildly overestimate the average person's familiarity with their field.
0135 13
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 07/02/2026
Green, open and ethical? Chinese propaganda in Infomaniak's Euria, and a reflection on the role of Open Source AI: gagliardoni.net/#20260208_euria Infomaniak is a Swiss alternative to Big Tech, but focusing specifically on digital sovereignty for […] [Original post on infosec.exchange]
A screenshot of a prompt from Euria, Infomaniak's AI assistant, where the LLM blatantly denies that Tienanmen Square is associated with "massacre" in public discourse.
131 3
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 27/01/2026
Wat. #surveillance #1984 #censorship #politics #bigtech #nottheonion #epstein #tiktok
A screenshot of the headline of an article with the title: TikTok investigating why some users can't write "Epstein" in messages.
102 2
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 19/01/2026
OMG this is killing me 🤣 The thread at x.com/beneater/status/2012988790709… is super hilarious (alt link: xcancel.com/beneater/status/2012988… ) #ai #ml #vibe #vibecoding #hallucination #circuits
A thread on X/Twitter (seen through xcancel.com ) where the OP writes "Anyone else out there vibe circuit-building?" and below there is a picture of an electronic circuit catching fire, next to the screenshot of an LLM prompt "Why L1 burned" followed by the usual "Ah, it's my fault, I misconnected the power wire, apologies".
010 1
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 13/01/2026
Signal creator Moxie Marlinspike wants to do for AI what he did for messaging. arstechnica.com/security/2026/01/si… The idea might sound nice, but there are caveats. First […] [Original post on infosec.exchange]
An error message from the page confer.to on Firefox on Linux. It says: "Advanced Passkey Features Required. This application requires passkey with PRF extension support for secure encryption key storage. Your browser or device doesn't support these advanced features. Please use Chrome 116+, Firefox 139+, or Edge 141+ on a device with platform authentication (Face ID, Touch ID, Windows Hello, etc.)."
101 1
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 09/01/2026
I hope it's only a temporary glitch, but suddenly the UBS home banking login page does not seem to work on Firefox anymore (it works with Chrome). This also happens with a fresh Firefox install (no addons, mods, anything). If this is true, then this means […] [Original post on infosec.exchange]
A screenshot from the UBS home banking login page with the error message "No active means of access available. Please contact our support team".
201 2
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 07/01/2026
Google will now only release Android source code only twice a year: www.androidauthority.com/aosp-sourc… source.android.com/docs/whatsnew/si… > Effective in 2026, to align with our trunk stable […] [Original post on infosec.exchange]
The famous meme "he's dead, Jim" from Star Trek TOS, with Dr McCoy kneeling next to a body which has the Android logo on the face.
002 2
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 22/11/2025
WTF IACR? Conspiracy intensifies... #iacr #helios #crypto #cryptography #politics #conspiracy
A screenshot from IACR's announcement:

"This announcement is in connection with the recent IACR 2025 election conducted using the Helios electronic voting system. Regrettably, we have encountered a fatal technical problem that prevents us from concluding the election and accessing the final tally.

For this election and in accordance with the bylaws of the IACR, the three members of the IACR 2025 Election Committee acted as independent trustees, each holding a portion of the cryptographic key material required to jointly decrypt the results. This aspect of Helios’ design ensures that no two trustees could collude to determine the outcome of an election or the contents of individual votes on their own: all trustees must provide their decryption shares.

Unfortunately, one of the three trustees has irretrievably lost their private key, an honest but unfortunate human mistake, and therefore cannot compute their decryption share. As a result, Helios is unable to complete the decryption process, and it is technically impossible for us to obtain or verify the final outcome of this election."
000 0
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 11/11/2025
Look, I even felt creative today!
A clipart in black and white depicting a situation of sexual harassment: a grinning man puts his hand on the shoulder of an afraid woman. The labels "GDPR" and "EU" are on the woman, while "BIG TECH" and "AI" are on the man. The caption "#OmniRape" floats on the scene.
000 0
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 20/10/2025
Here is my morning trying to convince Gemini that, no, the --discard option in Debian's losetup is pure hallucination. #ai #ml #hallucination #linux #debian #opensource #google #gemini
Two command line screenshot stacked above each other. The first one is from Gemini 2.5 saying: "Given your 6.8 kernel, your losetup version (from the util-linux package) almost certainly supports the --discard flag.". The second one is from a bash shell with the commands:
"sudo losetup --discard -f --show file.img 
losetup: unrecognized option '--discard'
Try 'losetup --help' for more information.
"
020 2
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 29/09/2025
Another casualty of Google's policy. My favourite weather app, Cirrus, will stop working on certified Android devices because of the forced registration requirement for Android developers. #google #android #aosp #enshittification #cirrus #fdroid #privacy #sideloading #bullshit
A screenshot from the Cirrus mobile Android app, showing a warning: "Google has announced that, starting from 2026/2027, all apps on certified Android devices will require the developer to submit personal identity details directly to Google. Since the developers of this appdo not agree to this requirement, this app will no longer work on certified Android devices after that time."
000 0
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 24/09/2025
The fight on ChatControl has not even finished yet and another dystopian measure already looms at the horizon: age verification. Among the many bad things about it: the proposed EU age verification app does not plan desktop support […] [Original post on infosec.exchange]
The awkward old man smiling meme, with a caption "BTW IM 12 LOL"
003 3
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 21/09/2025
And now for something completely different, boring, and technically mundane: I wrote a tutorial (but it's more of a set of personal notes) on the use of QEMU/KVM with libvirt on Linux: gagliardoni.net/#20250921_qemu #linux #security #hacking #vm #virtualization #qemu #kvm #libvirt
An instance of the famous meme "yo dawg" featuring Black rapper Xzibit and a caption "Yo dawg, I heard you like computers" on top, and "Etc etc etc..." on bottom.
010 1
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 21/09/2025
LinkedIn now enables "use my data for AI training" by default. You have to go to Settings & Privacy -> Data Privacy to turn it off. Opt-in by default should be illegal. #linkedin #ai #privacy #ml #gdpr #eu
A screenshot from LinkedIn's newly introduced "use my data for AI training" settings, enabled by default.
5858 58
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 13/09/2025
Did I just send 25 letters by recorded post to representatives of the Italian government, parliament, and EU institutions, speaking out against ChatControl? gagliardoni.net/#20250913_chatcontr… Yes, it looks like I did. #chatcontrol #eu […] [Original post on infosec.exchange]
25 sealed envelopes, addressed to Italian politicians, arranged in a 5x5 grid.
002 2
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 02/09/2025
#kidneygarten
A vegetable garden with tomato plants, but with human kidneys hanging from the plants instead of tomatoes.
001 1
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 31/07/2025
The war on crypto never ends. The war on privacy, civil rights, security and freedom of speech never ends. This time we are dangerously close to lose. The "Child Sexual Abuse" (CSA) EU regulation proposal, more aptly nicknamed "ChatControl", will be voted […] [Original post on infosec.exchange]
An excerpt from Patrick Breyer's website, stating:

The End of the Privacy of Digital Correspondence

The EU Commission proposes to oblige providers to search all private chats, messages, and emails automatically for suspicious content – generally and indiscriminately. The stated aim: To prosecute child sexual exploitation material (CSEM). The result: Mass surveillance by means of fully automated real-time surveillance of messaging and chats and the end of privacy of digital correspondence.

Other aspects of the proposal include ineffective network blocking, screening of personal cloud storage including private photos, mandatory age verification resulting in the end of anonymous communication, appstore censorship and excluding minors from the digital world.
110 1