For thirty years, proving who you are has meant sharing a secret with the server. You know the password, the server keeps a scrambled copy and the two are compared. The problem is not the password its...
When we rent a machine in the cloud, trust rests on a contractual promise: the provider says it does not look at our data. For decades that promise had no technical backing. The hypervisor — the softw...
An attacker does not need to write to your memory to change what is inside it. Reading it hard, fast and always in the same place is enough. That is the whole idea behind Rowhammer, a physical defect ...
There is an icon that showed up this year in the default chat app of millions of phones and that almost nobody looks at twice: a small padlock with the word “Encrypted” next to it. Behind ...
In October 2026 anyone can produce at home a photograph of a place that does not exist, a video of a politician saying what he never said, or the image of a document with an impeccable seal. The indus...
When we upload a file to the cloud, the server typically has to open it to process it. To search for a word in a document, to train a model, or to calculate an average, the machine needs to read the d...
There is a silent threat that doesn’t unfold in real time, but slowly: the “harvest now, decrypt later” strategy. An attacker can be storing all the encrypted traffic flowing across ...
You put a film on in your browser, open a screen recording program, hit record, and what you get is a black rectangle. That is not a bug: it is exactly what was meant to happen. The same film that com...
You log out, delete every cookie, clear your history, open a private window and come back in. And the site still recognises you. There is nothing supernatural about it: most modern tracking does not r...
You press the power button and two seconds later the desktop appears. Between those two moments, without you seeing any of it, four things have happened: the firmware verified the signature of the boo...
You glance at your phone, it flashes for an instant and the screen unlocks. The comfortable explanation is that the handset “recognises your face”, as if it compared one photograph with an...
When your browser opens https://, before a single letter is sent it negotiates a set of keys with the server. That opening greeting, the TLS 1.3 handshake, includes an ECDHE key exchange (ephemeral Di...