It wasn’t until I tried running a Pokémon game in an emulator that I realized how small a save file can be. They’re in the kilobytes range, even though they have to store all game play and achievements, inventory, every Pokémon you’ve ever captured with full stats and even those you’ve only seen, etc. It must be some binary format with absolutely no fat in it.
I figured it had to be something like 4k texture packs. I have a Steam Deck and don’t generally play anything at high res even when connected to a monitor. There ought to be a way to say hey limit the install to the res I’ll actually be using?
Note to self: looks like a place of quiet contemplation, but whatever you do, don’t bring the cat!
I find it mildly annoying that while the post is replete with hyperlinks, the 2 central terms “ietf-tls-mlkem” and “ietf-tls-ecdhe-mlkem” are simply quoted with no further elaboration.
I am no cryptographer, but after some searching around, my very first order understanding is that mlkem is a new algorithm that is meant to be resistant to attacks by a quantum computer. It is not time-tested at this point, however, while ecdhe is a current (albeit quantum-computer-weak) algorithm that has a solid track record.
Using both in combination is seen by some as a safer way to move forward, since mlkem may yet prove to have a fatal weakness and at least you have that fallback on the tried and true. Advocates also point out that ecdhe is cheap to compute compared to mlkem, and so the overhead of tossing it in there is not the end of the world?
Anyway, that’s all I’ve been able to glean so far.
Most relevant paragraph for the tldr crowd:
Flavors of AI doomsaying vary dramatically, ranging from Skynet-style scenarios to mass unemployment. But more recently, as it’s become clear that one of AI’s most practical applications is generating code, experts have been sounding the alarm on AI’s potential to disrupt cybersecurity. Hackers could easily abuse AI agents and coding tools to orchestrate devastating cyberattacks, both increasing the scale of these attacks and lowering the skill needed to carry them out.
It goes on to talk about how claude has yet to release a particular model and China has closed-sourced some of its over cybersecurity concerns.
Researcher commenting on the patch:
he remarks that the software only checks the validity of the downloaded file using the ancient CRC32 hash that isn’t considered cryptographically secure anymore
I have to respect the researcher for his incredibly charitable wording here. CRC32 is not even remotely crypto. That’s never been its purpose, and using it for digital signing is patently insane!
I fear I would have had a much shorter temper after what he’s been through, and yet here he is keeping his cool and his criticism constructive. Good on him.
Ah yes, my retirement plan from the tech sector…