Last year, my position was that we still had time to design PQ authentication mechanisms.

Now, based on the pace of progress and on statements like Google's, I believe:

1. we need to finish rolling out PQ key exchange yesterday
2. we need to start rolling out PQ auth now
3. it's too late to ship any new non-PQ design or system

https://blog.google/innovation-and-ai/technology/safety-security/cryptography-migration-timeline/

Hast du dich in letzter Zeit auch gefragt, ob dein Gedächtnis nachlässt? Ich hatte dieses Gefühl zuletzt öfter. Und es gefiel mir gar nicht.

Dann habe ich herausgefunden, woran das liegt. Ein Thread. 🧵

This is a crazy, developing story. And here you thought *your* organization's patch management routines were strict: From Christopher Kunz at Heise:

"A serious security vulnerability in the Windchill and FlexPLM products prompted a nationwide police response over the weekend. At the behest of the Federal Criminal Police Office (BKA), officers from across Germany were dispatched to alert affected companies – an unprecedented move. Administrators, whose weekends were disrupted, expressed their irritation – some of whom don't even use the compromised software."

"When the editorial team received a tip late Sunday morning about a critical security vulnerability in Windchill and FlexPLM , it sounded like a routine report: A deserialization vulnerability in specialized software, even with a CVSS score of 10, doesn't cause any alarm at heise security. The situation was apparently quite different at the Federal Criminal Police Office (BKA): By that time, they had already alerted the state criminal police offices (LKA) in various federal states, which dispatched police officers to affected companies during the night. As several readers reported to us in the forum , police officers were standing outside company and private premises in the dead of night."

https://www.heise.de/news/WTF-Polizei-rueckte-Samstagnacht-wegen-Zero-Day-aus-11221345.html

Eigentlich könnten wir hier ne geile Community gegen Rechts sein, aber manche essen Fleisch, manche sind geschminkt oder posten ohne ALT-Text & wieder andere fahren noch Benziner.

Seufz! 🤷🏼‍♀️

"Autofahrer ignorieren gesperrte Straße: Hunderte tote Feuersalamander in Wachenheim"

Wie war der Spruch, Menschen werden zu Arschlöchern, sobald sie ins Auto steigen?

(ja, ja, notall und so)

https://www.swr.de/swraktuell/rheinland-pfalz/ludwigshafen/hunderte-feuersalamander-tot-trotz-sperrung-auf-kreisstrasse-bei-wachenheim-100.html