ZK-Trace: Certified Collusion Tracing with Zero-Knowledge Credentials for Federated GNSS Interference Monitoring arxiv.org
ZK-Trace paper: collusion tracing for federated GNSS monitoring, with Tardos fingerprints and ZK credentials, naturally.
trending467
01 02 Maverick: Private and Verifiable LLM Inference Made Practical via Matrix-Vector Multiplication Delegation arxiv.orgNear-zero server overhead, apparently, is the pitch for this LLM inference paper built on delegated matrix-vector multiplies.03 Moria and Mithril: IoT Firmware Extraction and Analysis Without External Dependencies brownfinesecurity.comNo binwalk pileup here, two C++ tools for extracting IoT firmware in-process and then spelunking it for secrets, SBOM bits, CVEs, and lic...04 EF protocol folks are doing a Reddit AMA, with the usual grab bag: PQ, zkEVM, formal verification, privacy.05 Reconstruction attacks now lower-bound DP graph optimization too, tightening MST/matching/hier-clust and killing the approx-DP excuse.06 Can GANs, federated learning, PSO, and blockchain really make healthcare prediction private, or just add buzzwords?07 Paper on ppCDCL, a privacy-preserving CDCL SAT solver with oblivious propagation, because ordinary SAT wasn’t slow enough.08 Vigenère, the cipher that smugly lived as "indecipherable" until Babbage and Kasiski did the boring math.09 Venuo lets one wallet fund a sale and another claim it, using private secrets, Poseidon Merkle proofs, Groth16, and nullifiers.10 Can obfuscation actually protect on-device LLMs? This paper formalizes the shared algebra and breaks the common schemes.11 Ciphered jailbreaks work via prompting alone, so even the guardrails now need to read gibberish.12 Used HSMs are apparently a smart buy, and this post walks through HSM basics plus the firmware, zeroize, and PKCS#11 checks.13 No crypto broken: German cops are reportedly reading WhatsApp via linked devices, code interception, and phone access.14 Broadcom’s PQC note is just the usual inventory-your-crypto-and-map-dependencies playbook, with a quantum threat deadline attached.15 Differentially Private EEG Feature Anonymization: A Privacy-Utility Case Study in Clinical Neurophysiology arxiv.orgEEG DP for feature anonymization, with client/server/decentralized deployments and utility curves instead of hand-wavy privacy claims.16 Why did ZKP2P become Peer? This podcast walks through ZK email/TLS proofs, then the TEE pivot for payments UX.17 Post-quantum migration is getting the usual late-start treatment, with NIST standards and timelines finally forcing inventories.18 X post recapping August Ethereum EIP work, plus Robinhood Chain and the usual scramble over who captures value.19 Paper on distributed DP text synthesis from embeddings, with a secure protocol so nobody ever gets the raw texts, naturally.20 CrossLink shows LTE, WiFi, and BLE randomization still stitch into one phone trace, because protocols hate being isolated.21 Algorand already has live Falcon-1024 accounts, while Ripple is still penciling in 2028 for quantum fixes.22 Zcash's rally dredges up the same old founder's reward and security complaints, again.23 HTTP 402 gets a resurrection, with signed intent, delegation tokens, and receipts for per-path bot access terms.24 Formal Tamarin models for Signal and WhatsApp, plus runtime monitoring that spots undocumented libsignal fork drift.25 Your ballot stays encrypted while it's counted, Aragon says, in a Zama-backed voting plugin for OSx.26 Signing the Transaction but Not the Decision: Whisper Attacks and a Binding Defense for AP2 arxiv.orgPaper on Whisper attacks against AP2 payment flows and A-VIP binding defense, because signed transactions are apparently not enough.27 Key-space bounds for info-theoretic TDSS, with O(ε^-2) sample-based encryption and exact zero-advantage cases for some predicates.28 91% of 115 TEE deployments weren't reproducible, mostly because the source or reference builds were MIA.29 Paper on threshold fully deniable encryption, so fewer than t parties can fake states and survive mid-execution coercion.30 29 attacks: these email gateways can hand over S/MIME/PGP plaintext and auth confusion via error signals and old EFAIL tricks.