Forgot your password?
Close
typodupeerror

Comment Re:China is a totalitarian hell (Score 1) 142

by david-bo (#66359026) Attached to: China Broadens Travel Curbs To Encompass Family of Top AI Talent

The ideology is that people should be free to do whatever the want to as long as they don't limit other people from utilise the same level of freedom. No one is "proponenting" capitliasm, because telling other people what they should do with their freedom of contract right collides with "free ideology".

Submission + - New Ai-Powered "America.gov" Government Website Uses Gemini and Grok (cnn.com) 3

Submitted by fahrbot-bot
fahrbot-bot writes: CNN is reporting (and others) that President Donald Trump on Tuesday unveiled America.gov, a government website meant to serve as a one-stop shop for people trying to accomplish basic tasks like renewing a passport, enrolling in Medicare or applying for disaster relief.

The site, which launched with some basic functions ahead of a full rollout next year, is designed to serve as an AI-powered guide through the thicket of government agencies that Trump officials pledged would ultimately save people a whole lot of frustration.

The administration’s new initiative aims to allow Americans to access dozens of federal websites through a single point, making America.gov akin to a search tool that pulls information from across the government. And in the same way that people increasingly use AI models like ChatGPT or Google Gemini to compile information and provide customized answers, Trump officials claimed that America.gov would be able to do the same for people’s interactions with the federal government.

Enrolling in Medicare, for example, will become a matter of typing the request into the America.gov AI tool and following its step-by-step instructions. The same goes for applying to a government job — the new tool will now let people upload their resume directly to the site — or answering questions about federal benefits, publicly available documents or other necessities that fall under the federal government’s vast umbrella.

“Our vision is that one day, this type of convenience and simplicity will be across every government service,” said Joseph Gebbia, who leads the government’s National Design Studio.

But the reality is that the most advanced actions won’t be available until some point in 2027, raising questions about how long it will take for the administration to revamp the way the people interact with the government’s websites. The current version of America.gov can only do “answers.”

In related news, Variety notes that America.gov confirms, for now anyway, that Biden won the 2020 election.

Submission + - The Nature of War has just changed forever (telegraph.co.uk)

Submitted by MrBrklyn
MrBrklyn writes: Ukrainiaan land robots have been deployed in combat, killing thousands of Russian troops and changing the face of warfare forever. Leaders accross the globe are sitting up in the seats and paying attention as what started as a localized Russian agression has now turned into a world altering and historic war which the Russians seemingly have no means to win.

https://www.telegraph.co.uk/wo...

Submission + - US appeals court upholds Pentagon's supply chain risk label on Anthropic (cnbc.com)

Submitted by Anonymous Coward
An anonymous reader writes:
  • A federal appeals court in Washington, D.C., upheld the Pentagon’s blacklisting of Anthropic.
  • The DoW labeled Anthropic a supply chain risk in March, and Anthropic sued the Trump administration in an effort to undo that action.
  • The designation prevents the U.S. military from using Anthropic’s models and blocks defense contractors from using them in their work with the agency.
  • “We remain confident in our position and are considering all options, including further review,” an Anthropic spokesperson said in a statement.

Submission + - Researchers Found a New Way to Break RSA that Doesn't Require Factoring the Key (cybersecuritynews.com)

Submitted by Anonymous Coward
An anonymous reader writes: Security researchers have demonstrated a faster way to undermine certain RSA deployments without factoring the public modulus, challenging the assumption that RSA’s practical strength always tracks the cost of integer factorization.

The attack converts temporary access to a raw, unpadded RSA signing or decryption service into a lasting capability to forge signatures or decrypt chosen ciphertexts offline.

Laura Shea, Miro Haller, Adam Suhl, Nadia Heninger and Emmanuel Thomé implemented the technique against a 1,024-bit RSA key. Their computation consumed 1,380 CPU core-years over five months and required 232 oracle queries. By comparison, factoring a 1,024-bit RSA modulus is estimated to require roughly 500,000 to one million core-years.

The method, called eNFS by the researchers, belongs to the number field sieve family. Instead of the general number field sieve used to factor RSA moduli, it approaches the faster “special” number field sieve complexity by replacing part of the usual mathematical work with answers from the signing oracle. Crucially, it never recovers the prime factors or RSA private key.

The attack unfolds in stages. An approximately 1,200-core-year precomputation depends only on the public modulus and exponent. The attacker then submits selected values to the raw RSA oracle. Once those responses are collected, access can disappear: forging any chosen signature or decrypting a target takes about another 180 core-years and can be repeated offline.

The underlying algorithm is not new. Antoine Joux, David Naccache and Emmanuel Thomé introduced it in 2007, but the new work provides its first implementation and large-scale 1,024-bit demonstration. The code builds heavily on CADO-NFS while adding the engineering needed for polynomial selection, sieving, linear algebra, root extraction, and descent at this scale.

This is not a universal RSA break. The attacker needs temporary access to a raw exponentiation oracle, a capability that conventional RSA signatures using PKCS#1 v1.5 or RSA-PSS padding normally do not expose. More plausible targets include HSM interfaces permitting raw PKCS#11 RSA operations and blind-signature protocols such as Privacy Pass, where blinded requests can provide the required oracle behavior.

The researchers estimate 2^{90} work and 2^{43} oracle queries against 2,048-bit RSA in this model, versus the commonly assigned 112-bit factoring strength. They project roughly 2^{119} work for 4,096-bit RSA, leaving it short of a modern 128-bit security target. Those costs remain beyond attackers, but could matter to well-resourced adversaries and protocols with long-lived public keys.

Organizations do not need to abandon correctly padded RSA immediately. Operators should disable unnecessary raw RSA mechanisms, audit HSM policies, limit oracle exposure, and rotate vulnerable blind-signature keys more frequently.

Protocol designers can investigate zero-knowledge proofs of well-formed requests, while longer-term migration should favor modern signature schemes and post-quantum cryptography rather than treating larger RSA keys as a permanent solution.

Submission + - New RSA attack takes cryptographers by surprise (arstechnica.com)

Submitted by phatrabt
phatrabt writes: There’s a new way to break RSA that’s faster than anything we’ve seen before Until now, cryptographers thought factoring was the only way to break RSA. Not anymore.

“If this result holds up under peer review, it would indeed be a conceptual break-through,” Karsten Nohl, a cryptography expert and the head of innovation at Allurity, said in an interview. “RSA is as difficult to break as it is to factor large integers, at least so we thought. The researcher suggests that you can practically break RSA without cracking its key.”

Submission + - More Than One in Five "Hi-Res" Audio Discs Are Just the CD, Tests Find (losslessextract.com)

Submitted by packslash
packslash writes: Summary: The developer of Lossless Extract, built a detector for upsampled audio and has run it on 1,225 SACD, DVD-Audio and Blu-ray Audio discs anonymously from users' collections. 272 of them, 22 percent, failed. "They hold CD-quality audio, no better than the $10 CD, stretched to fit a bigger disc and sold back at triple the price," the developer writes. The failures include Prince's Purple Rain on Blu-ray, Rush's Moving Pictures and Dave Brubeck's Time Out. The test looks for music that stops dead at the CD's ceiling, with a silence above it "so perfect it can't happen in the real world." Results depend on the edition. The 2003 SACD of Norah Jones' Come Away With Me fails, while the 2012 SACD made from the analog tapes passes. The full list is public, and readers can test their own files in the browser without uploading anything.

Verify Hi res site https://losslessextract.com/ve...

Slashdot Top Deals

Lo! Men have become the tool of their tools. -- Henry David Thoreau

Close