Digital Security Engineer, CTO @cardhoc, Telecommunication, InfoSec, Crypto, Electronic, Blockchain, Fintech, AccessCtrl
Paris, France
Joined December 2009
- Tweets13.1K
- Following3.1K
- Followers2.6K
- Likes50.8K
Pinned Tweet
My personal answer, using a @cryptokeepkey, to the digital dollar by the @federalreserve. 😅🤗👨💻
#crypto #blockchain #FED #money #FED #Stablecoin #CBDM
Fed is studying the potential for digital dollar, says governor Brainard (via @Yogita_Khatri5)
theblockcrypto.com/post/5510…
Antoine retweeted
🚨 CRITICAL - Linux Kernel IPv4 TCP Stack Use-After-Free (CVE-2026-98432)
A CVSS 9.8 vulnerability in the Linux kernel IPv4 networking subsystem allows remote attackers to trigger a Use-After-Free (UAF) in ip_options_build(). The flaw stems from tcp_v4_syn_recv_sock() transferring ireq->ireq_opt ownership without copying it, enabling concurrent SYN retransmits to free the child socket options via kfree() before SYNACK processing completes.
👉 Affected: Linux kernel across Ubuntu releases (26.10, 26.04 LTS, 24.04 LTS, 22.04 LTS, 20.04 LTS) | Apply upstream stable patches replacing kfree() with kfree_rcu() or update distro packages as fixes land
Antoine retweeted
CISA ordered US federal agencies to patch a high-severity Linux kernel privilege escalation bug that attackers are chaining with the PHP2Shell flaws in the wild.
bleepingcomputer.com/news/se…
Maintenant c'est Macron qui explique qu'une enquête de Mediapart n'est pas sérieuse, c'est n'importe quoi, l'information est fausse.
Et bien j'ai hâte de voir la suite. 🍿
– Non, ça c'est n'importe quoi.
– C'est un commissaire des renseignements [protégé par le secret des sources] qui a donné cette information dans le cadre d'une enquête de Médiapart.
– Non, c'est pas sérieux.
🔴🥔 Chez HugoDécrypte, Macron réagit aux révélations de Médiapart sur les consignes qui ont été données aux services de renseignement pour dire que LFI était derrière le mouvement du 17 octobre.
Au final il s'agirait d'un bug dans un serveur Nokia équipant le cœur de réseau. Et le crash survenait aussi dans le serveur de secours (code identique). Orange compte mettre à contribution son équipementier jugé responsable de la situation.
Perso, j'aurais pas imaginé que les émeutes seraient à l'origine d'une nouvelle taxe, mais j'ai visiblement sous estimé le gouvernement français.
Antoine retweeted
Hubo 106 urnas en la 2da vuelta de Brasil en la que BOLSONARO tuvo 0 VOTOS.
En esas mismas urnas Lula consiguió casi 15 mil votos vs 0 de Bolsonaro. ¿Cuáles son las chances?
🗳️ Resultado en 106 urnas
🔴 Lula - 14.860 votos
🟢 Bolsonaro - 0 votos
Antoine retweeted
SHA-256 is not broken, but its security margin lost 1 more round this year:
Last week I found a collision attack on reduced 39-round that improves prior art by over 30 bits and the first differential attack on that round better than generic search on @yukonresearch Hashsmash board.
The attack rests on the same method as prior art ePrint 2026/1120 with new insights that first 2 state words could remain free, allowing a critical condition at step 16 rebuilt as a claw-search problem rather than a probabilistic filter. Took days of watching SAT logs, burning cores and arguing with Claude on what's possible to get a result close to generic search.
Since my initial submission, other hashsmash participants sraiw, @cyberaxe, @privacymage, @lamb356_ and @geeknik pushed it down by over 6.5 bits, currently estimated at 118.15 bits. The tree of submissions is hard to follow, so I put the construction, insights and numbers into a blog and am working on detailed technical report.
It's fascinating to see an initial structural observation develop into an improvement in the reduced-round collision frontier within days. AI is now a real aid in cryptanalysis and open collaboration speeds it up.
