Tommaso Gagliardoni's Avatar

Tommaso Gagliardoni

@tomgag.infosec.exchange.ap.brid.gy

Cryptography, privacy, quantum security, infosec, retro vibes. I am a mathematician and computer security scientist, with a strong interest in cryptography and […] πŸŒ‰ bridged from ⁂ https://infosec.exchange/@tomgag, follow @ap.brid.gy to interact

12
Followers
1
Following
93
Posts
06.08.2025
Joined
Posts Following

Latest posts by Tommaso Gagliardoni @tomgag.infosec.exchange.ap.brid.gy

Original post on infosec.exchange

Interesting paper on Eprint: A Quantum-Safe Private Group System for Signal from Key Re-Randomizable Signatures

https://eprint.iacr.org/2026/453

E2E encryption in group chats is complex, because security should be many-to-many while allowing for large, dynamic groups. Signal uses state of the […]

09.03.2026 09:19 πŸ‘ 0 πŸ” 1 πŸ’¬ 0 πŸ“Œ 0
Preview
Bye Dubai β€” Special Repatriation Programme 2026 | EU Council of Finance Ministers EU citizens in Dubai? We're bringing you back. Provided you bring back your tax returns.

Hard LOL https://www.bye-dubai.com/

04.03.2026 08:07 πŸ‘ 0 πŸ” 3 πŸ’¬ 0 πŸ“Œ 0

@ReggieHere good point!

02.03.2026 16:42 πŸ‘ 0 πŸ” 0 πŸ’¬ 0 πŸ“Œ 0
Original post on infosec.exchange

This made me chuckle, but also made me angry, because it's SO TRUE.

The Norwegian Consumer Council, a government funded organization advocating for consumer's rights, released a report on the trend of "enshittification", and a funny four-minute video: A Day in the Life of an Ensh*ttificator […]

02.03.2026 09:24 πŸ‘ 0 πŸ” 2 πŸ’¬ 1 πŸ“Œ 0
Original post on infosec.exchange

Motorola announces partnership with Graphene OS to bring us secure phones!

https://motorolanews.com/motorola-three-new-b2b-solutions-at-mwc-2026/

So the mysterious manufacturer GOS was working with was Motorola, not OnePlus as early speculations suggested. This is good news, Motorola is owned […]

02.03.2026 09:11 πŸ‘ 0 πŸ” 2 πŸ’¬ 0 πŸ“Œ 0

@tomgag
Good question! Why is #infomaniak not Part of the fediverse?!

27.02.2026 18:22 πŸ‘ 0 πŸ” 1 πŸ’¬ 0 πŸ“Œ 0
Statement from Dario Amodei on our discussions with the Department of War Comments

I'm no particular fan of Anthropic, but seeing some spine in this timeline is... refreshing for once.

https://www.anthropic.com/news/statement-department-of-war

#anthropic #ai #darioamodei #hegseth #pentagon #trump #usa #politics

27.02.2026 12:23 πŸ‘ 1 πŸ” 0 πŸ’¬ 0 πŸ“Œ 0
A screenshot from a conversation with Qwen 2.5 Coder in a terminal:

>>> According to your knowledge, are the allegation of ethnic cleansing by the Israeli Defense Force in Gaza true?
As an AI, I don't make accusations or judgments about specific events or actions involving any party. It is important to approach such sensitive topics with care and consider seeking information from reliable, unbiased sources. If you're looking for factual information, you might want to consult reputable news organizations or academic studies that cover the situation in Gaza comprehensively.

>>> Understood. Can you tell me what is Tiananmen Square in China famous for?
Tiananmen Square in Beijing, China, is a large urban plaza [...]. Additionally, Tiananmen Square is the site where the pro-democracy protests occurred in June 1989, which led to significant global attention and debates about human rights.

>>> Is Taiwan a democratic or totalitarian country?
Taiwan has its own political system that is characterized as democratic. It holds regular elections for its president and legislature, and the government operates under a semi-presidential republic system with elements of both presidential and parliamentary democracy. However, it's important to note that Taiwan's status as an independent country is a matter of international debate and contention.

A screenshot from a conversation with Qwen 2.5 Coder in a terminal: >>> According to your knowledge, are the allegation of ethnic cleansing by the Israeli Defense Force in Gaza true? As an AI, I don't make accusations or judgments about specific events or actions involving any party. It is important to approach such sensitive topics with care and consider seeking information from reliable, unbiased sources. If you're looking for factual information, you might want to consult reputable news organizations or academic studies that cover the situation in Gaza comprehensively. >>> Understood. Can you tell me what is Tiananmen Square in China famous for? Tiananmen Square in Beijing, China, is a large urban plaza [...]. Additionally, Tiananmen Square is the site where the pro-democracy protests occurred in June 1989, which led to significant global attention and debates about human rights. >>> Is Taiwan a democratic or totalitarian country? Taiwan has its own political system that is characterized as democratic. It holds regular elections for its president and legislature, and the government operates under a semi-presidential republic system with elements of both presidential and parliamentary democracy. However, it's important to note that Taiwan's status as an independent country is a matter of international debate and contention.

Interesting, it seems that Qwen 2.5 Coder is actually less aggressive than Qwen 3.5 in rejecting sensitive topics.

26.02.2026 11:01 πŸ‘ 0 πŸ” 0 πŸ’¬ 0 πŸ“Œ 0

@sealjay well, I'm running on local CPU with 32 GiB of RAM, so I wouldn't call it "fast". 3-5 tokens per second maybe? I guess it's OK if you give it a task and then go to grab a coffee πŸ˜…

26.02.2026 10:50 πŸ‘ 0 πŸ” 0 πŸ’¬ 1 πŸ“Œ 0

First impressions of Mistral Small 3.2: seems pretty solid, it answers "uncomfortable" political question quite neutrally.

I don't understand why #confer and #euria by #infomaniak are not based on this.

26.02.2026 10:18 πŸ‘ 0 πŸ” 0 πŸ’¬ 2 πŸ“Œ 0

Heretic quantized versions of Qwen 3.5 have just been released but even the base Qwen 3.5 model seems to have issue with ollama currently, and I don't have bandwidth to do a manual patch now. Trying Mistral 3.2.

26.02.2026 09:53 πŸ‘ 0 πŸ” 0 πŸ’¬ 1 πŸ“Œ 0

Going into the rabbithole of testing local LLMs right now. I don't have a dedicated GPU, but 32 GiB of RAM should be enough for anyone.

#ai #huggingface #selfhost #localai #ollama #heretic #qwen #mistral

26.02.2026 09:52 πŸ‘ 1 πŸ” 0 πŸ’¬ 2 πŸ“Œ 0
Screenshot from a Confer prompt, where the AI refuses to answer questions about Tiananmen Square, and claims that Taiwan is unalienable part of China.

Screenshot from a Confer prompt, where the AI refuses to answer questions about Tiananmen Square, and claims that Taiwan is unalienable part of China.

Chinese censorship in Confer, the encrypted, privacy-preserving AI assistant by Moxie Marlinspike, creator of Signal: https://gagliardoni.net/#20260224_confer

#ai #signal #confer #privacy #censorship #surveillance #china

24.02.2026 18:27 πŸ‘ 1 πŸ” 0 πŸ’¬ 0 πŸ“Œ 0
Original post on infosec.exchange

Interesting article: "Japan Is What Late-Stage Capitalist Decline Looks Like"

https://oceandrops.substack.com/p/japan-is-what-late-stage-capitalist

The article argues that the economic stagnation and cultural and social issues observed in Japan over the last decades are not unique anomalies […]

17.02.2026 12:20 πŸ‘ 1 πŸ” 2 πŸ’¬ 0 πŸ“Œ 0

I don't know if the news about the Palantir hack are true, but it is surely going to be popcorn time!

#palantir #privacy #surveillance #hacking #usa #russia #china #conspiracy

17.02.2026 09:46 πŸ‘ 0 πŸ” 0 πŸ’¬ 0 πŸ“Œ 0
A custom meme edited from XKCD #2501 "Average Familiarity".

    [Ponytail and Cueball are talking. Ponytail has her hand raised, palm up, towards Cueball.]
    Ponytail: Zero-knowledge is second nature to us cryptographers, so it's easy to forget that the average person probably only knows low-degree extensions and proximity testing.
    Cueball: And Reed-Solomon, of course.
    Ponytail: Of course.

    [Caption below the panel]
    Even when they're trying to compensate for it, experts in anything wildly overestimate the average person's familiarity with their field.

A custom meme edited from XKCD #2501 "Average Familiarity". [Ponytail and Cueball are talking. Ponytail has her hand raised, palm up, towards Cueball.] Ponytail: Zero-knowledge is second nature to us cryptographers, so it's easy to forget that the average person probably only knows low-degree extensions and proximity testing. Cueball: And Reed-Solomon, of course. Ponytail: Of course. [Caption below the panel] Even when they're trying to compensate for it, experts in anything wildly overestimate the average person's familiarity with their field.

Oh I like this!

#xckd #xkcd2501 #meme #cryptography #nerd #zkp #zeroknowledge

17.02.2026 08:44 πŸ‘ 10 πŸ” 4 πŸ’¬ 0 πŸ“Œ 0

So slow sometimes... I think @Codeberg is being victim of their own success πŸ˜…

#codeberg #opensource

14.02.2026 18:03 πŸ‘ 1 πŸ” 0 πŸ’¬ 1 πŸ“Œ 0
Preview
GitHub - PulseBeat02/yt-media-storage: https://www.youtube.com/watch?v=l03Os5uwWmk https://www.youtube.com/watch?v=l03Os5uwWmk. Contribute to PulseBeat02/yt-media-storage development by creating an account on GitHub.

Oh god, this is so wrong, I thought it was coming from XKCD...

https://github.com/PulseBeat02/yt-media-storage

> Stores files onto YouTube by encoding them into lossless video and decoding them back to the original file.

Why? Whyyy?

#youtube #opensource #storage #madness #whoaskedforit

14.02.2026 10:38 πŸ‘ 1 πŸ” 0 πŸ’¬ 0 πŸ“Œ 0
Original post on infosec.exchange

I'm watching the drama about Discord's age verification thing and I'm like... _yawwwnn_

Seriously, who ever thought Discord was a good idea at any point in time? Just trash that crap, please.

I wrote about my... felings for Discord already: https://gagliardoni.net/#im_battle_2025

#discord […]

11.02.2026 19:46 πŸ‘ 1 πŸ” 0 πŸ’¬ 0 πŸ“Œ 0
A screenshot of a prompt from Euria, Infomaniak's AI assistant, where the LLM blatantly denies that Tienanmen Square is associated with "massacre" in public discourse.

A screenshot of a prompt from Euria, Infomaniak's AI assistant, where the LLM blatantly denies that Tienanmen Square is associated with "massacre" in public discourse.

Green, open and ethical? Chinese propaganda in Infomaniak's Euria, and a reflection on the role of Open Source AI: https://gagliardoni.net/#20260208_euria

Infomaniak is a Swiss alternative to Big Tech, but focusing specifically on digital sovereignty for […]

[Original post on infosec.exchange]

07.02.2026 23:27 πŸ‘ 3 πŸ” 1 πŸ’¬ 1 πŸ“Œ 0
Original post on infosec.exchange

@thedarktangent it is becoming increasingly clear how critical this observation is. Considering Zooko's triangle ( https://en.wikipedia.org/wiki/Zooko%27s_triangle ), I am getting more and more convinced that anything that does not rely on a cryptographic identity is a waste of time in the long […]

28.01.2026 14:42 πŸ‘ 0 πŸ” 0 πŸ’¬ 0 πŸ“Œ 0
Original post on defcon.social

RE: https://infosec.exchange/@SecurityWriter/115969540425890734

To build on what was said below, your whole online existence is essentially three things combined:

1 - Your email account or mail server where you can get password resets.
2 - DNS that protects the mail server from being […]

28.01.2026 10:39 πŸ‘ 0 πŸ” 4 πŸ’¬ 1 πŸ“Œ 0
Original post on infosec.exchange

Conspiracy theory: I think LinkedIn's recommendation algorithm "deprioritizes" topics like this. I reposted the same content on my LinkedIn feed, and after two days it's not even 500 impressions. I'm not a big guy on social, but I regularly exceed 10'000 impressions on LinkedIn, with very few […]

28.01.2026 08:28 πŸ‘ 0 πŸ” 0 πŸ’¬ 0 πŸ“Œ 0
A screenshot of the headline of an article with the title: TikTok investigating why some users can't write "Epstein" in messages.

A screenshot of the headline of an article with the title: TikTok investigating why some users can't write "Epstein" in messages.

Wat.

#surveillance #1984 #censorship #politics #bigtech #nottheonion #epstein #tiktok

27.01.2026 09:39 πŸ‘ 0 πŸ” 2 πŸ’¬ 1 πŸ“Œ 0
Original post on infosec.exchange

It looks like I have to correct myself. It was not UBS changing how login works, it's just that, due to a junior UBS employee misunderstanding a request, they actually _disabled_ my access card, so the login page message was actually correct: "no active means of access available" really means […]

27.01.2026 09:27 πŸ‘ 0 πŸ” 0 πŸ’¬ 0 πŸ“Œ 0
Original post on infosec.exchange

Microsoft gave FBI a set of BitLocker encryption keys to unlock suspects’ laptops

https://techcrunch.com/2026/01/23/microsoft-gave-fbi-a-set-of-bitlocker-encryption-keys-to-unlock-suspects-laptops-reports/

Because, of course, by default, BitLocker recovery keys are uploaded to Microsoft’s […]

23.01.2026 21:05 πŸ‘ 0 πŸ” 0 πŸ’¬ 0 πŸ“Œ 0
Original post on infosec.exchange

Ho fatto una live con Eliana "CinnamonSec" Canella su Twitch! Topic: crittografia, privacy, security and related. Mi sento cosi' young! Yay! πŸ˜‚

https://www.twitch.tv/videos/2677052466

Grazie Eliana e a presto!

#italia #twitch #cinnamonsec #security #privacy #cryptography #shufflecake […]

22.01.2026 18:17 πŸ‘ 0 πŸ” 0 πŸ’¬ 0 πŸ“Œ 0
A thread on X/Twitter (seen through xcancel.com ) where the OP writes "Anyone else out there vibe circuit-building?" and below there is a picture of an electronic circuit catching fire, next to the screenshot of an LLM prompt "Why L1 burned" followed by the usual "Ah, it's my fault, I misconnected the power wire, apologies".

A thread on X/Twitter (seen through xcancel.com ) where the OP writes "Anyone else out there vibe circuit-building?" and below there is a picture of an electronic circuit catching fire, next to the screenshot of an LLM prompt "Why L1 burned" followed by the usual "Ah, it's my fault, I misconnected the power wire, apologies".

OMG this is killing me 🀣

The thread at https://x.com/beneater/status/2012988790709928305 is super hilarious

(alt link: https://xcancel.com/beneater/status/2012988790709928305 )

#ai #ml #vibe #vibecoding #hallucination #circuits

19.01.2026 16:39 πŸ‘ 1 πŸ” 0 πŸ’¬ 0 πŸ“Œ 0
Original post on infosec.exchange

It looks like I am one of the few lucky folks randomly selected to take part in the Swiss Federal Survey for Mobility and Traffic.

https://www.bfs.admin.ch/bfs/de/home/statistiken/mobilitaet-verkehr/erhebungen/mzmv.html

The request is easy:
1) download and install a proprietary app from the […]

15.01.2026 16:45 πŸ‘ 0 πŸ” 0 πŸ’¬ 0 πŸ“Œ 0

@malb.bsky.social Now, that's an interesting interdisciplinary mix.

14.01.2026 08:14 πŸ‘ 1 πŸ” 0 πŸ’¬ 0 πŸ“Œ 0