Stefan More

56 Followers
133 Following
107 Posts
Postdoc at @isec_tugraz / @IAIK (applied privacy, identity/trust mgmt, websec, ...) | formerly CTF at LosFuzzys | work account, but all opinions are mine
old twitterhttps://twitter.com/stefanmore
academichttps://more.systems/ac
iaikhttps://www.iaik.tugraz.at/person/stefan-more
Thom Wiggers (PQ Shield, UK) talked about "Migrating Protocols to PQ: the good, the bad, and the ugly" at the #PQCSA workshop on Post-Quantum Cryptographic Protocols in Rome today (#Eurocrypt 2026 affiliated event).
https://esat.kuleuven.be/cosic/events/pqcsa-workshop-cryptographic-protocols/program/
#pqc #postquantum #quantum

Lisa vs Thorsten – Einsatz von KI in der öffentlichen Verwaltung

Lisa vs Thorsten ist das neue Debattenformat im eGovernment Podcast. In dieser Sendung geht es um die Frage: Soll der Einsatz von Künstlicher Intelligenz in bestehenden Verwaltungs- und Arbeitsprozessen erst erfolgen, nachdem diese grundlegend überprüft, vereinfacht oder abgeschafft wurden? Wir wollen hier verschiedene Positionen debattieren und sichtbar machen, wobei die vertretenen Positionen nicht unbedingt den persönlichen Positionen der Debatant:innen entsprechen müssen. Shownotes und Kommentare unter: https://egovernment-podcast.com/egov261-lvt-ki-verwaltung/ […]

https://egovernment-podcast.com/egov261-lvt-ki-verwaltung/

First time seeing a “NO META GLASSES” sign in the door of a shop! I’m not surprised… and I expect we might see more of these kind of things in the years ahead.

#Meta #MetaGlasses #AR #privacy #surveillance #Vermont

There’s something ominous about the speed with which the entire world has marched to require identification on platforms and, as I expected, begin the process of banning anonymous VPNs.
Android Binary Transparency  |  Google for Developers

An index page for all Android transparency projects.

Google for Developers

Starting today, USB-C is the mandatory charging standard for all laptops sold in the EU.

We are putting an end to cable clutter and unnecessary costs for citizens.

One cable, any brand, less electronic waste.

We are delivering a simpler, more sustainable digital future for Europe.

More: https://link.europa.eu/QDMFTh

OK, I just discovered this extremely useful take on Claude Mythos and highly recommend it to all cyber practitioners.
https://labs.cloudsecurityalliance.org/wp-content/uploads/2026/04/mythosready.pdf

RE: https://ec.social-network.europa.eu/@EUCommission/116408720976324749

Unfortunately, this is not ready.

The current GitHub repository is a start - a (fairly expensive) prototype (https://github.com/eu-digital-identity-wallet/av-app-android-wallet-ui/issues). Before any wider rollout, however, this needs to:
* stabilize in its feature set (e.g., which form of app/device attestation);
* be verified in detail by independent audits - the quick checks done by some security/privacy researchers and developers at the moment do *not* replace a systematic code audit; and
* go through interoperability testing with different age credential providers (the Python demo code is certainly not production-ready)
as a minimum bar.

Of all the different approaches being discussed right now for age assurance (see our open letter at https://csa-scientist-open-letter.org/ageverif-Feb2026), this is the least-bad from a privacy and surveillance point of view. It's one of the few directions that might be acceptable in any shape or form - *if the general political decision is to do this at all* (see the letter for counter arguments that still need to be debated). But rushing it won't help. The privacy and security aspects are nuanced, and hard to get right in apps that should be deployed on a wide variety of Hundreds of Millions of smartphones. Let's settle these important details before announcing it as a "solution".

We have opened a job posting for a (maximum 6 years) post-doc position at JKU Linz (@jkulinz) in networks and security: https://karriere.jku.at/hcm/jobexchange/showJobOfferDetail.do?jobOfferId=8a7ec1e69cf609ed019d24e15bd17c6e&j=&languageChanged=true

If you'd like to work with us on timely topics like digital identity (very much including EUDI), embedded system security (including Android), software supply chain security (fixing your future xz and trivy dependencies), and/or the related underlying methods and technologies, please feel free to reach out!

University Assistant (must hold a Doctorate/Ph.D. degree)

A sign of the times.