UVS: a draw's fairness as a fact you can recompute — not a certificate you trust
I've built casino slot machines and gaming systems for 15 years. I mostly stayed away from compliance, but once I had to write the official algorithm …
DevOps
⚑ Report a ProblemLatest DevOps news from Tech News
All topics
agents
ai
api
architecture
automation
aws
beginners
career
cloud
database
devchallenge
devops
docker
gemma
javascript
kubernetes
llm
machinelearning
mcp
opensource
performance
productivity
programming
python
security
showdev
softwareengineering
tutorial
typescript
webdev
rscrypto v0.4.0: Verifying Constant-Time Behavior Instead of Assuming It
Every cryptography library says it's secure and performant. Very few can explain how that security is validated and how that performance is proven aft…
How a Slow Office VPN Led Me to File a US Patent
This is the story of how a mundane complaint — "the VPN is slow" — turned into a US patent application. Not a granted patent. An application . I want …
Random Oracles in Python
A random oracle is a function $\mathcal{O}: {0,1}^* \to {0,1}^\infty$ where each output bit is independently and uniformly random, but the function is…
Spectre and Meltdown: When CPUs Leak Secrets by Guessing
For decades, processor designers chased speed by letting the CPU run ahead of itself — executing instructions before it was certain they were needed, …
Announcing the Trust Identity Protocol (TIP): HTTPS for the AI Era
Announcing the Trust Identity Protocol (TIP): HTTPS for the AI Era TL;DR. The Trust Identity Protocol (TIP) is a free, open, post-quantum-secure, pate…
What is the Difference Between Lattice-Based and Hash-Based Signatures?
Lattice-based and hash-based signature schemes represent two fundamentally distinct approaches to securing digital identities against quantum computer…
Post-quantum cryptography for embedded and IoT: secure boot, TLS and OTA
Post-quantum cryptography is no longer just a research topic. It is starting to affect the way embedded teams design TLS, secure boot, OTA, firmware s…
Texas AG sues Meta over claims that WhatsApp doesn't provide end-to-end encryption
Critics note a lack of factual support in lawsuit filed by US Senate candidate.
Digital Signatures: The “Trust Me Bro” Detector for Junior Cybersecurity Engineers
Digital Signatures: The “Trust Me Bro” Detector for Junior Cybersecurity Engineers Subtitle: How digital signatures help prove who signed something, w…
OPAQUE: Password Authentication That Never Sends the Password
The standard way to log in — type a password, send it to the server, hope the server hashes it well — has a structural flaw nobody has been able to fi…
EU Chat Control: What Client-Side Scanning Actually Means for Encryption
The EU's proposed Chat Control regulation would require messaging providers to scan your messages for illegal content before encryption, on your devic…
Why Strict "Zero Trust" Breaks Secret Management (And How We Built a Zero-Persistence Vault Instead)
This is a technical deep dive into the cryptography behind Ennote's enterprise architecture. You can read the original full-length post on our enginee…
How to scan your codebase for post-quantum cryptographic risk
If you've been following NIST's post-quantum cryptography standardization process, you already know the threat is real. In August 2024, NIST finalized…
Supply Chain Attacks: When Your Privacy Tool Gets Compromised
On March 29, 2024, Andres Freund — a Microsoft engineer and PostgreSQL contributor — noticed something odd while investigating unexplained CPU usage i…
Why I built Mickai: sovereignty is a title deed, the cloud is a rental agreement
By Micky Irons. Founder & sole inventor, Mickai . CEO, Trust-Agent.ai. When I started filing the patents that became Mickai , I didn't have a prod…