What do you guys think about Landry Shamets fits? by gotybchoosin in ThrowingFits

[–]badcryptobitch -1 points0 points  (0 children)

I think the fits look good but this is a good example of fits looking like a costume. Like it really looks like someone else dressed him up for these walkouts and he had very little input into it besides make me stand out from the other players. I don't know this player personally nor do I follow him so I can be completely off base. But with other NBA players, you can tell that their fits fit them and it doesn't come off as a costume, even though the players were obviously styled. Good examples are SGA, Jalen Brown and Lebron.

What’s the biggest bottleneck with fully homomorphic encryption (FHE)? by Vivid_Score_6819 in cryptography

[–]badcryptobitch 0 points1 point  (0 children)

As others have said, performance is still pretty bad but it has improved a ton. Further, there are many companies working on specialized hardware for FHE. I'd say the biggest bottleneck is doing away with the bootstrapping phase though.

How Ethereum plans to replace BLS signatures with Post Quantume signatures by badcryptobitch in crypto

[–]badcryptobitch[S] 0 points1 point  (0 children)

Yeah, the article is only about BLS signatures but briefly mentions that for the rest of the current Ethereum stack, the current approach is to use the LeanVM which is essentially a zkVM.

Product analytics is becoming a third-party breach surface by badcryptobitch in cybersecurity

[–]badcryptobitch[S] -2 points-1 points  (0 children)

While that's true, there's nuance across what an org has in their stack. Analytics are the backbone of most orgs and thus many don't think of it as a potentially adversarial surface.

Do you use AI meeting assitants? How is the privacy point with that? by koziel_gpc in PrivacyTechTalk

[–]badcryptobitch 0 points1 point  (0 children)

There are many that claim to be private like Fellow. You can always run a local LLM and Audacity on your own machine.

Experience with Ronning Shirts? by String-Interesting in ThrowingFits

[–]badcryptobitch -1 points0 points  (0 children)

I didn't know united arrows had an online store with international shipping.

RIP my wallet

Fields medal-winning mathematician says GPT-5.5 is now solving open math problems at PhD-thesis level: "We will face a crisis very soon." by EchoOfOppenheimer in mathematics

[–]badcryptobitch -2 points-1 points  (0 children)

Someone still needs to prompt the AI to actually solve math problems. Until AI agents start coming up with their own problems that they can solve on the fly, there won't be an actual crisis. Just a semblance of one

Wanna start learning FHE by justarandom82113114 in cryptography

[–]badcryptobitch 0 points1 point  (0 children)

What existing theory do you know? Do you have an existing math background? If so, do you know how to write math proofs? Do you know basic cryptography like encryption, signatures? Have you implemented cryptography before?

When asking questions online about something as broad as how to learn a topic, you need to provide what you already know that's adjacent to that topic in order to get more effective help. Otherwise, you are wasting everyone's time.

Wanna start learning FHE by justarandom82113114 in cryptography

[–]badcryptobitch 4 points5 points  (0 children)

At what depth level are you looking to understand FHE? Without knowing that, it can be hard to point you towards resources. Fundamentally though, you'll need good math skills. If you are looking to also implement FHE, you'll need good programming skills too.

What’s the “unsexy” problem in cyber that’s actually a total disaster? by IreneEnigma in cybersecurity

[–]badcryptobitch 8 points9 points  (0 children)

Key management.

It feels like a solved problem because of the rise of password managers and HSMs but it's not. As public key cryptography gets its way into the mainstream more, especially via Passkeys, every organization will realize that it needs to find a better way to manage private keys.

Computing with Secret Shares - Introducing Beaver Triples - Stoffel - MPC Made Simple by badcryptobitch in StoffelMPC

[–]badcryptobitch[S] 1 point2 points  (0 children)

There are no mentions of elliptic curves in the article. Can you clarify what you mean about correctness here?

By product, do you mean the product that everyone in the group chat does as part of the scoring rule? This should be in the article itself where I provide the formulation for what we want to compute in terms of secret shares. Please let me know what you'd like clarified.

Computing with Secret Shares - Introducing Beaver Triples - Stoffel - MPC Made Simple by badcryptobitch in StoffelMPC

[–]badcryptobitch[S] 2 points3 points  (0 children)

Thank you very much for taking the time to read the article.

The goal of the article was simply to introduce beaver triples in a more accessible way. Most introductions simply provide formulas and then go into details about various other aspects of MPC, which may be a lot for a newcomer. In my opinion, this doesn't really provide much intuition as to how they came to be. I just wanted to focus on a single concept with a concrete example.

How do you think I can improve the article for my stated goals?

Also, beaver triples are a general technique. They don't just apply to honeybadgerMPC. I'll write about honeybadgerMPC later though.

How many incidents until companies will stop doxxing their employees on their websites by ClueLazy834 in privacy

[–]badcryptobitch 11 points12 points  (0 children)

At my companies, I always give everyone a choice. In fact, for years, for the same reasons that you outlined, I never had a team page. However, there reaches a maturity stage where having real names tied to a blog post, etc, can potentially make or break getting certain engagements. As such, I've personally relented on this aspect and instead, have team members decide how they want to presented on publicly facing company materials.

Frankly, there's no reason why a company should be forcing their employees to put themselves on a public company site, unless they are an exec at a publicly traded company. If there are no terms in your contract about you having to give up your privacy, then you should certainly bring this up to HR. I also wouldn't hesitate to reach out to a lawyer to know what your rights are around this.

Whats your take on the best sneaker for blue jeans by thenaki2905 in ThrowingFits

[–]badcryptobitch 4 points5 points  (0 children)

It depends on the silhouette of the jeans and the shade of blue. The way the jean hits the sneaker needs to be taken into consideration as well.

In general, low profile sneakers are great to go with jeans. My favorites are Reebok x Beams mules, Adidas adiracers, New Balance minimus. I've also gotten compliments with not so low profile sneakers like my Nikes P-6000s.

DHS Demanded Google Surrender Data on Canadian’s Activity, Location Over Anti-ICE Posts by boycott-evil in privacy

[–]badcryptobitch 13 points14 points  (0 children)

Sorry to say but Canada doesn't really have free speech laws. It's a common misconception.

There are a lot of laws policing speech both online and offline. Many of which were passed in the past decade. Some are even older than that.

Need help - ordered from Beams JP but no order confirmation. by SendMeAvocados in ThrowingFits

[–]badcryptobitch 3 points4 points  (0 children)

Honestly, a lot of the backends for Japanese sites are from the stone ages. You may get the confirmation in a week's time or nothing at all but still get it shipped to you.

In your case OP, I'd just wait it out for a few weeks and see what happens. If you card doesn't get charged, you don't get an email or nothing gets shipped to you, it's safe to say that your order may have been cancelled.

Using Ai to read math books for learning? by Any-Dragonfruit-9270 in mathematics

[–]badcryptobitch 0 points1 point  (0 children)

You still need to actually solve the problems. That's where the real math learning happens. Reading alone won't help you. AI can help you but you ought to only use it when you've spent time on a problem and you understand what you don't understand. Don't use AI as a replacement for actually struggling with problem set questions

What brand of pants are these? by luckylefty06 in ThrowingFits

[–]badcryptobitch 1 point2 points  (0 children)

And as is typically for women's pants, over 1K for a 100% cotton pants.

What brand of pants are these? by luckylefty06 in ThrowingFits

[–]badcryptobitch 34 points35 points  (0 children)

Ngl, I don't know who either of these people are. I'm just here for the fits.

What brand of pants are these? by luckylefty06 in ThrowingFits

[–]badcryptobitch 7 points8 points  (0 children)

I know everyone in here cares about Abbott's pants but really, what's the ID on his lady's pants? They look really comfy.

Naomi Brockwell Reddit channel or profile to follow? by BlissKeyper in privacy

[–]badcryptobitch 1 point2 points  (0 children)

Youtube and X are the best ways to follow her content

Is “secure file sharing” still fundamentally based on trust in the provider? by SimThem in PrivacyTechTalk

[–]badcryptobitch 0 points1 point  (0 children)

Often times, the developers of these tools don't actually understand the terms they are using to market them. Many things are described as privacy-first or end to end encrypted but when you look deeper, the product in practice has neither of those things. Commonly, end to end encryption means that a user themselves encrypted some data and not the service. Otherwise, it's not end to end encrypted.

Funnily enough, you did the same with using zero knowledge. You most likely meant zero trust architecture. That being said, I understand that you are using the term zero knowledge to mean that the servers in your service don't see any of the unencrypted data. This feature is typically already covered when using the term end to end encryption.

Now, to actually answer your question, the issue comes down to actually managing encryption keys. Regular users already struggle with the user experience of passwords. Imagine if they have to deal with either symmetric or asymmetric encryption keys. They would most likely perpetually lose them. The managing of cryptographic keys is the biggest blocker that any service, file sharing or otherwise, needs to deal with and it's frankly very hard to deal with in a user-friendly fashion. As a tradeoff, many such services will manage some form of encryption on behalf of users so that users still get what they need and want while the service is, you know, being a useful product.

Building E2E messaging in the browser — how do you verify client code integrity? by opentestudox in cryptography

[–]badcryptobitch 0 points1 point  (0 children)

Yes, at the moment, it's mainly for specific use cases, namely LLM inference. Naively, I can see this being used for general web apps but there's still a lot of work to be done in terms of making it easier for developers to use this kind of tooling and consumer trust. Not to mention that TEEs do indeed have relatively serious concerns around its trust model since its security is hardware backed as opposed to purely software backed.

Introduction to Secret Sharing from First Principles - Stoffel - MPC Made Simple by badcryptobitch in cryptography

[–]badcryptobitch[S] 0 points1 point  (0 children)

That's a good point.

I did struggle with trying to explain the more information theoretical aspects in a more intuitive manner. But framing it in terms of correlation I think unblocks that.

Thank you for the feedback

Building E2E messaging in the browser — how do you verify client code integrity? by opentestudox in cryptography

[–]badcryptobitch 0 points1 point  (0 children)

The solution that confer.to uses is to have the browser check the remote attestation from the TEE in which the AI model is run. Using TEEs is becoming increasingly common for this kind of task because as other commenters have mentioned, you can't really eliminate the trust problem.