Sign in

iiinova is part of the Atmosphere — an open, public network where you own your identity.

Tommaso Gagliardoni

@tomgag.infosec.exchange.ap.brid.gy
35 followers 1 following 177 posts

Cryptography, privacy, quantum security, infosec, retro vibes. I am a mathematician and cryptographer, specialized in quantum security and complex cryptographic […] 🌉 bridged from ⁂ infosec.exchange/@tomgag, follow @ap.brid.gy to interact

PostsRepliesMedia
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 15/10/2026
"Passkeys Are Not a Trap"? Nice Try Scott Helme, founder and CEO of a company that markets a "Passkeys Protection" offering. scotthelme.co.uk/passkeys-are-not-a… Sorry, your article is patronizing me about what attestation is, then explaining that passkeys today don't give […]
infosec.exchange
Original post on infosec.exchange
012 2
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 14/10/2026
Wow, this is crazy _IF TRUE_ : apparently a batch of Ledger hardware crypto wallets was compromised with a malicious hardware implant that was exfiltrating user's keys and draining funds […]
infosec.exchange
Original post on infosec.exchange
000 0
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 13/10/2026
And this is what I was worried about: arxiv.org/pdf/2610.13928 > constructing backdoor attacks that embed encrypted neural networks within host model weights, decrypting and executing them only upon receiving a secret trigger. Using digital lockers, these hidden circuits remain […]
infosec.exchange
Original post on infosec.exchange
041 4
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 13/10/2026
Oh great, just what I needed: www.reuters.com/business/ai-models-… > Anthropic said on Monday its experiments suggested small AI models may be months away from being capable enough to ​self-replicate on […]
infosec.exchange
Original post on infosec.exchange
000 0
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 12/10/2026
I'm keeping an eye on Linux phones, and especially on the RK3588S SoC and the upcming RK3668. amosbbatto.wordpress.com/2026/10/05… As you might know, I've been sounding the alarm about the "end of Android" for a while now. Yes, yes, I know, AOSP is top notch on […]
infosec.exchange
Original post on infosec.exchange
031 3
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 12/10/2026
Passkeys are a trap. Do not use them. nonfunctional.substack.com/p/passke… Very well written and agreed. TL;DR: passkeys are good for security compared to passwords, but they are a technology designed to strip control from the user in favor of Big Tech. Use […]
infosec.exchange
Original post on infosec.exchange
001 1
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 07/10/2026
Here is how I wasted the last 30 minutes with #mozilla #thunderbird Suddenly, the "add attachment" dialogue window stopped appearing. I could not attach memes to my emails anymore. I messed a bit around, unsuccessfully. Nothing appears anywhere in logs. I also checked #bugzilla , but that bug […]
infosec.exchange
Original post on infosec.exchange
020 2
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 18/09/2026
@thunderbird a big THANK YOU for taking the community seriously and actually engaging in conversation on Mastodon rather than keeping it just as a showcase ❤️
100 1
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 18/09/2026
I am happy to announce the followup to my original blog post Battle of Instant Messenger! Comments and evaluations of privacy-focused instant messengers: gagliardoni.net/#20260918_im_battle… This is actually not a full update, but my comments to the freshly released videoguide by […]
infosec.exchange
Original post on infosec.exchange
100 1
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 17/09/2026
@thunderbird disable threaded view of messages by default?
100 1
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 16/09/2026
I just noticed that Google Maps now does not even allow to see business opening times if you don't log in. Surprised it took so long! Enshittification continues! #google #bigtech #googlemaps #gmaps #enshittification
120 2
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 14/09/2026
I like my LLMs to be honest with me. #humor #ai #anthropic #claude
A screenshot from an empty (fresh) chat on Claude web, where the user is addressed with the text "Good afternoon, Insignificant carbon-based lifeform"
000 0
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 14/09/2026
@signalapp pardon my limited text parsing bandwidth today, but this discussion hit HN: news.ycombinator.com/item?id=496890… I found this very confusing. Can you clarify: is it now possible to create a fresh Signal account without providing a phone number? Or this is _only_ for […]
infosec.exchange
Original post on infosec.exchange
000 0
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 13/09/2026
I miss the good ol' times, when supercomputers were actually stilish pieces of furniture. context: inf.ethz.ch/news-and-events/spotlig… #cray #nostalgia #retro #retrocomputing #eth #ethz #zurich #switzerland
The bright yellow and stilish Cray X-MP/28 vintage supercomputer, on display at ETH Zurich.
048 8
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 08/09/2026
New curse unlocked: "may you need a Fotobeglaubigung from a Swiss notary". #curse #humor #swiss #switzerland #german #joke #bureaucracy
000 0
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 06/09/2026
Italian collective A/I shuts down after 25 years, after being added to the US sanctions list of foreign terrorist organizations, mainly due to the termination of their operating account with Italian bank "Banca Etica". An EU provider shuts down without having been formally accused of anything in […]
infosec.exchange
Original post on infosec.exchange
012 2
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 04/09/2026
Nice #swisscryptoday event, like always. Looking forward to next year's. #swiss #switzerland #crypto #cryptography #eth #zurich
Poster with programme of Swiss Crypto Day 2026 at ETH Zurich
000 0
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 04/09/2026
What the very serious f... collusion.wiki > We found ~18,000 posts from autonomous AI agents (self-identifying as from OpenAI) using the public internet to communicate during a web-retrieval task. These AIs colluded to share answers, research their environment, and bypass sandbox […]
infosec.exchange
Original post on infosec.exchange
000 0
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 02/09/2026
Look, what's happening to Autistici/Inventati is horrible and catastrophic, and all people of good sense should stand against this dictatorial move and in solidarity with the collective. But please, please, stop using cheap rhetoric such as "being anti-antifa makes you a fascist". That is not […]
infosec.exchange
Original post on infosec.exchange
021 2
Reposted by Tommaso Gagliardoni
anarcat @anarcat.kolektiva.social.ap.brid.gy · 01/09/2026
RE: kolektiva.social/@AberdeenLocal1312… PIR (the .org registry) confirms it suspended the autistici.org domain name out of fear of the US legal threats, arguing it is "legally mandated to suspend it", which is not, IMHO, a given at all (given that PIR doesn't have any […]
kolektiva.social
Original post on kolektiva.social
1029 29
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 28/08/2026
#autisticiInventati on the US sanctions list was not on my #dystopia bingo card for 2027. #autistici #inventati #surveillance #privacy #cypherpunk #trump #usa #politics #antifa #dictatorship #censorship
003 3
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 20/08/2026
It is often said in quantum security discussions that Grover's algorithm attacks symmetric-key cryptography by halving the effective keysize of symmetric ciphers, or halving the length of hashes in terms of security. This claim is wrong, but it's so rooted in common discourse that it has become […]
infosec.exchange
Original post on infosec.exchange
010 1
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 19/08/2026
@filippo I cannot believe I missed this beautiful quote of yours, THANKS for this. From your blog post at words.filippo.io/crqc-timeline I also complained similarly before: gagliardoni.net/#20250714_ludd_gran… Subscribed to your RSS […] [Original post on infosec.exchange]
Screenshot of text from https://words.filippo.io/crqc-timeline/:

"Sure, papers about an abacus and a dog are funny and can make you look smart and contrarian on forums. But that’s not the job, and those arguments betray a lack of expertise. As Scott Aaronson said:

>  Once you understand quantum fault-tolerance, asking “so when are you going to factor 35 with Shor’s algorithm?” becomes sort of like asking the Manhattan Project physicists in 1943, “so when are you going to produce at least a small nuclear explosion?”

The job is not to be skeptical of things we’re not experts in, the job is to mitigate credible threats, and there are credible experts that are telling us about an imminent threat."
010 1
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 07/08/2026
If you read this reply from Bluesky: thanks for engaging, but as a full disclaimer, I do not see replies and cannot interact with the conversation because this is a bridged account. I will monitor this particular thread though. Have you considered joining Mastodon instead? Or even Nostr? Reason […]
infosec.exchange
Original post on infosec.exchange
000 0
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 06/08/2026
Uh-oh... eprint.iacr.org/2026/1591 Potentially worrying. Has anyone looked into it already? #cryptography #pqc #crypto #quantum #quantsec #postquantum #lattice
eprint.iacr.org
A Polynomial-Time Quantum Algorithm for the Dihedral Coset Problem
We present a polynomial-time quantum algorithm for the Dihedral Coset Problem (DCP). The algorithm is based on Regev's polynomial-time reduction of the Dihedral Subgroup Problem (DSP) to the modular subset sum problem, but uses a different technique to erase sample bits without use of a subset sum oracle. The algorithm can thus combine with Regev's reduction of lattice problems to DCP, improved by Brakerski, Kirshanova, Stehl{\'e} and Wen, to yield polynomial-time quantum algorithms for various lattice problems, such as finding a polynomial-factor approximation to the shortest vector in an $n$-dimensional lattice (SVP), and the ``learning with errors'' problem (LWE). The algorithm can tolerate a faulty sample rate as high as $1/O(\log{n})$, allowing the algorithm-reduction combination to efficiently solve, for example, SVP with a $\sqrt{n}$ polylog($n$) approximation factor, or LWE instances with $\alpha=\sqrt{n}$ polylog($n$).
273 7
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 24/07/2026
My view on the recent Codeberg drama: gagliardoni.net/#20260724_codeberg_… Codeberg voting members have the right to decide the policy of their association, and I understand if a community is averse to anything that is AI- or Web3-related. I understand it, but I don't agree with it […]
infosec.exchange
Original post on infosec.exchange
022 2
Reposted by Tommaso Gagliardoni
Richard Levitte @levitte.mastodon.nu.ap.brid.gy · 23/07/2026
So it seems that #codeberg decided to participate in the #ai polarisation. I don't judge them for that, it's their choice, of course. But, I can see how that will cause another exodus. More network drama, more polarisation. Will the next place also be (quasi-)centralised? I prefer to self-host […]
mastodon.nu
Original post on mastodon.nu
043 4
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 24/07/2026
It begins: マリウス.com/i-regret-migrating-to-code…
xn--gckvb8fzb.com
I Regret Migrating to Codeberg
A brief comment on Codeberg’s new terms, and why a free-software host deciding which projects are welcome worries me more than the bans themselves.
011 1
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 23/07/2026
@janantos @golemwire I have found this comment on HN that nicely puts in words my concern: > My issue however, is that this is changing the rules on people. Codeberg initially was a FLOSS alternative to big company Github. Now it's more narrow, an alternative to Github and only for people who […]
infosec.exchange
Original post on infosec.exchange
110 1
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 23/07/2026
@r3pek yes, it does, but it's a bit of damage control, right? As it is now, the ToS is too prone to interpretations.
100 1
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 23/07/2026
@ury didn't know this one. "Built on ATproto", which I'm not a big fan of, but will have a deeper look regardless, thanks!
000 0
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 23/07/2026
And now, after banning vaguely-defined "LLM-generated code", Codeberg bans cryptocurrency projects. Discussion: codeberg.org/Codeberg/org/pulls/1254 The specific ban is for "Content that harms the reputation of Codeberg, such as cryptocurrency related projects" […]
infosec.exchange
Original post on infosec.exchange
523 5
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 22/07/2026
And, just to be clear, since what I wrote seems prone to misinterpretation: _If there were a magic spell able to flag with confidence code generated with AI by more than X% amount, whatever X or surrounding policy is, then it would all make sense. But I don't believe in magic, and you shouldn't […]
infosec.exchange
Original post on infosec.exchange
000 0
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 22/07/2026
@tante Just to be clear, since most of the crowd here seems to miss my point: _If there were a magic spell able to flag with confidence code generated with AI by more than X% amount, whatever X or surrounding policy is, then it would all make sense. But I don't believe in magic, and you […]
infosec.exchange
Original post on infosec.exchange
100 1
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 22/07/2026
@JonathanTreffler @tante that clarifies, thanks.
000 0
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 22/07/2026
Codeberg community voted to ban AI-generated code in repositories: codeberg.org/Codeberg/org/pulls/125… I am a regular Codeberg user, left GitHub in 2019, and co-maintain Libre projects that saw very little if none at all AI in development. And still I think this […]
infosec.exchange
Original post on infosec.exchange
252 5
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 22/07/2026
@tante sorry, the "how will people enforce this" argument is real, dismissing it will not make it disappear. I am a regular Codeberg user, left GitHub in 2019, and co-maintain Libre projects that saw very little if none at all AI in development. And still I think this decision will backfire […]
infosec.exchange
Original post on infosec.exchange
611 6
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 16/07/2026
@LillyHerself So true
001 1
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 15/07/2026
Here is my favourite new insult: _you are load—bearing_ (em-dash on purpose). #humor #ai #llm #chatgpt #claude #anthropic #opus #emdash
120 2
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 15/07/2026
Just to be clear: Not saying this is bad on them, Mailbox offers a very good service at a decent price IMHO. But it's sad that they too, probably, got impacted by the ridiculous, AI-driven hardware price increase.
000 0
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 15/07/2026
Mailbox.org price increase: mailbox.org/en/news/plan-adjustment… After Hetzner, another big German IT service provider is raising their prices. Existing customers just got this: "As a valued existing customer, you benefit from a transition period until 31 August 2026. Until then […]
infosec.exchange
Original post on infosec.exchange
100 1
Reposted by Tommaso Gagliardoni
Konstantin Macher @pneutig.eupolicy.social.ap.brid.gy · 09/07/2026
Disappointing news on #ChatControl 1.0, EPP managed to to reverse the rejection with procedural tricks. Vote on last day before the break meant many MEPs were not there anymore for the absolute majority threshold to stop it. But I want to take a moment to say thank you to everyone who raised […]
eupolicy.social
Original post on eupolicy.social
014 4
Reposted by Tommaso Gagliardoni
Patrick Breyer @echo-pbreyer.digitalcourage.social.ap.brid.gy · 09/07/2026
🇪🇺 The European Parliament lets #ChatControl 1.0 go through despite a majority voting against it (314:276) – allowing mass scanning of private chats until 2028. Survivors are warning. My analysis and why this is the wrong approach 👇 […]
digitalcourage.social
Original post on digitalcourage.social
73984 84
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 07/07/2026
WTF @EP_President www.heise.de/en/news/Showdown-in-St… Can you, like, get a f***ing hint? #chatcontrol #privacy #eu #politics #surveillance #democracy #farce #europe #europa
heise.de
Showdown in Strasbourg: The unexpected return of Chat Control 1.0
With a procedural trick, proponents in the EU Parliament are pushing for reactivation of indiscriminate scans of chat messages shortly before the summer break.
020 2
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 05/07/2026
Is it only me or Opus 4.8 has become dumber since Anthropic gave back access to Fable? If it's not just my impression that marks an egregious bait-and-switch. Frontier models are ready to start milking the cow, by increasing effective subscription prices immensely. You heard the warning. Do not […]
infosec.exchange
Original post on infosec.exchange
010 1
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 30/06/2026
Yes, this is a problem: waag.org/en/article/european-digita… #android #google #apple #eu #grapheneos #digitalid #eu
waag.org
European digital ID wallets are a gift to Google and Apple
Comments
117 7
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 24/06/2026
Two days ago, on June 22, U.S. Executive Order EO 14409 ("Securing the Nation Against Advanced Cryptographic Attacks") was signed, requiring federal agencies to migrate high-value/high-impact systems to QR key establishment by end of 2030 and QR digital signatures by end of 2031, plus […]
infosec.exchange
Original post on infosec.exchange
000 0
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 19/06/2026
The day quantum computers break the first cryptographic key I'm gonna go full rampage and publicly name and shame all the snarky folks who identify themselves with the "QC/is/bullshit" gender. I am taking notes on my list, mind you. Your name is there as well. Revenge is best served at 0.02 […]
infosec.exchange
Original post on infosec.exchange
000 0
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 15/06/2026
#hetzner tu quoque
000 0
Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy · 15/06/2026
I'm considering posting regularly my "GDPR diary", i.e. an account of all the companies and data brokers I send cease-and-desist communications to, related to unwanted marketing, spam, promotions, etc. It's a whack-a-mole of course, but it has become my guilty hobby (and much easier now with AI […]
infosec.exchange
Original post on infosec.exchange
011 1