Matthew Green

We’re still having discussions about how Zohran Mamdani is a “socialist” because he wants to open one state-run grocery store, meanwhile the US government now controls 10% of Intel. I find this super amusing.

It seems pretty obvious to me that western governments are looking at China and other countries with monitored/sealed Internet and slowly putting the pieces in place to do the same thing for their own Internets.

One of the reasons I find the “BlueSky bad” takes so self-defeating is that it’s very obvious this administration intends to place all major social media into the hands of friendly owners. www.cnn.com/2025/09/15/t...

What kills me about this story is that Meta’s public CSAM scanning clearly does not work, if they’re delivering ads for CSAM content. But this failure will be used as evidence that we need to add scanning for private and encrypted messages. www.bbc.com/news/article...

Theory question: give an upper bound on the number of vulnerabilities that can be present in an n-bit program.

Apropos of nothing, does anyone else have very happy memories associated with this product?

I don’t think people should panic based on anything djb has written recently. But I do agree with his conclusion that ECC hybrids are a good idea. I also do continue to be skeptical of the “ECC hybrids are just too hard to get right” arguments.

One of my beefs with (research) cryptography is that people are overindexing on quantum threats. We finally got crypto to the point where we can do things efficiently, and now we need to rip it all up and switch to lattice schemes at 11,000x the cost.

“Europe needs air conditioning” is true, but it also feels like a talking point explicitly constructed so that people don’t have to pay attention to the effects of rapid climate change.

Counterpoint: the fact that vendors/projects won’t privilege vulnerability reports is hardly a punishment for security researchers. It’s a gift.

So apparently anyone with a license plate number can submit it to most DMVs to obtain detailed owner information, provided they claim they’re doing so in the “ordinary course of business” (eg to collect a debt). This isn’t verified or checked.

So Will Cathcart is leaving WhatsApp and this is the new leader that Mark Zuckerberg has chosen.

One of my new favorite gripes is people setting up AI receptionists to answer their phone and telling them nothing, including whether the business is open that day. It’s just the weirdest way to use technology.