Alexis Cao
@alexiscao.bsky.social
Reposted by Alexis Cao
A gentle introduction to lattice-based cryptography (Alfred Menezes) ia.cr/2026/1098
May 31, 2026 at 9:02 AM
A gentle introduction to lattice-based cryptography (Alfred Menezes) ia.cr/2026/1098
Reposted by Alexis Cao
A journalist filed a brief live blog entry on an apparent Iranian missile strike that hit no one and caused no serious damage.
Next thing he knew, angry Polymarket users were demanding he change the story—and threatening his life and family if he refused.
My story: wapo.st/4lI6Pon (gift link)
Next thing he knew, angry Polymarket users were demanding he change the story—and threatening his life and family if he refused.
My story: wapo.st/4lI6Pon (gift link)
A journalist reported a missile strike. Then came the death threats.
An Israeli war reporter says online gamblers demanded he change a published story so they could win a payout on prediction market Polymarket.
wapo.st
March 17, 2026 at 11:34 AM
A journalist filed a brief live blog entry on an apparent Iranian missile strike that hit no one and caused no serious damage.
Next thing he knew, angry Polymarket users were demanding he change the story—and threatening his life and family if he refused.
My story: wapo.st/4lI6Pon (gift link)
Next thing he knew, angry Polymarket users were demanding he change the story—and threatening his life and family if he refused.
My story: wapo.st/4lI6Pon (gift link)
Reposted by Alexis Cao
Analysis and Attacks on the Reputation System of Nym (Xinmu Alexis Cao, Matthew Green) ia.cr/2026/101
January 25, 2026 at 12:21 AM
Analysis and Attacks on the Reputation System of Nym (Xinmu Alexis Cao, Matthew Green) ia.cr/2026/101
Reposted by Alexis Cao
Hundreds of millions of earbuds, headphones and speakers need a security update (yes, you need to update your earbuds) to prevent a wireless hacking technique that can hijack audio, eavesdrop via mics, and in some cases remotely track the accessory’s location. www.wired.com/story/google...
Hundreds of Millions of Audio Devices Need a Patch to Prevent Wireless Hacking and Tracking
Flaws in how 17 models of headphones and speakers use Google’s one-tap Fast Pair Bluetooth protocol have left devices open to eavesdroppers and stalkers.
www.wired.com
January 15, 2026 at 12:12 PM
Hundreds of millions of earbuds, headphones and speakers need a security update (yes, you need to update your earbuds) to prevent a wireless hacking technique that can hijack audio, eavesdrop via mics, and in some cases remotely track the accessory’s location. www.wired.com/story/google...
Reposted by Alexis Cao
NEW: The internet in Iran is nearly completely shut down, according to internet monitoring firms.
The blackout comes in the midst of countrywide protests that have lasted for days after spikes in prices and shortages of basic goods. The govenrment has responded with a violent crackdown.
The blackout comes in the midst of countrywide protests that have lasted for days after spikes in prices and shortages of basic goods. The govenrment has responded with a violent crackdown.
Internet collapses in Iran amid protests over economic crisis | TechCrunch
Internet monitoring firms and experts say Iran’s internet has almost completely shut down, as protests spread through major cities.
techcrunch.com
January 8, 2026 at 6:36 PM
NEW: The internet in Iran is nearly completely shut down, according to internet monitoring firms.
The blackout comes in the midst of countrywide protests that have lasted for days after spikes in prices and shortages of basic goods. The govenrment has responded with a violent crackdown.
The blackout comes in the midst of countrywide protests that have lasted for days after spikes in prices and shortages of basic goods. The govenrment has responded with a violent crackdown.
Reposted by Alexis Cao
Alexis Cao, a visiting intern from Johns Hopkins University, has joined COSIC to work on enhancing the security and privacy of mixnets this summer. Welcome!
#choosecosic #cosic #kuleuven
#choosecosic #cosic #kuleuven
July 1, 2025 at 11:45 AM
Alexis Cao, a visiting intern from Johns Hopkins University, has joined COSIC to work on enhancing the security and privacy of mixnets this summer. Welcome!
#choosecosic #cosic #kuleuven
#choosecosic #cosic #kuleuven
my talk last month is now up on youtube!!
youtu.be/oGQ4nDvTW_4
youtu.be/oGQ4nDvTW_4
BSidesCharm 2025 - Beyond Tor and VPN: Protect Your Privacy With Decentralized Mixnet - Alexis Cao
YouTube video by BSidesCharm
youtu.be
May 24, 2025 at 4:35 PM
my talk last month is now up on youtube!!
youtu.be/oGQ4nDvTW_4
youtu.be/oGQ4nDvTW_4
the calm before the storm
April 13, 2025 at 3:14 AM
the calm before the storm
Reposted by Alexis Cao
ESP32 Bluetooth firmware contains 29 hidden HCI commands (0xFC01–0xFC44), enabling RAM/Flash manipulation, MAC spoofing, and LMP/LLCP packet injection. Attackers can achieve persistent implants, device impersonation, firmware checks bypass, and advanced Bluetooth-based pivoting.
tinyurl.com/esp32bd
tinyurl.com/esp32bd
Undocumented "backdoor" found in Bluetooth chip used by a billion devices
The ubiquitous ESP32 microchip made by Chinese manufacturer Espressif and used by over 1 billion units as of 2023 contains an undocumented "backdoor" that could be leveraged for attacks.
www.bleepingcomputer.com
March 8, 2025 at 10:55 PM
ESP32 Bluetooth firmware contains 29 hidden HCI commands (0xFC01–0xFC44), enabling RAM/Flash manipulation, MAC spoofing, and LMP/LLCP packet injection. Attackers can achieve persistent implants, device impersonation, firmware checks bypass, and advanced Bluetooth-based pivoting.
tinyurl.com/esp32bd
tinyurl.com/esp32bd
Reposted by Alexis Cao
Oh boy, Sam Curry comes again with yet another critical #vulnerability, now in Subaru vehicles, basically allowing full remote control over the cars.
#Automotive security is no joke, but manufacturer's still live by security standards from the beginning of the century.
samcurry.net/hacking-subaru
#Automotive security is no joke, but manufacturer's still live by security standards from the beginning of the century.
samcurry.net/hacking-subaru
Hacking Subaru: Tracking and Controlling Cars via the STARLINK Admin Panel
On November 20, 2024, Shubham Shah and I discovered a security vulnerability in Subaru’s STARLINK admin panel that gave us unrestricted access to all vehicles and customer accounts in the United State...
samcurry.net
January 23, 2025 at 9:00 PM
Oh boy, Sam Curry comes again with yet another critical #vulnerability, now in Subaru vehicles, basically allowing full remote control over the cars.
#Automotive security is no joke, but manufacturer's still live by security standards from the beginning of the century.
samcurry.net/hacking-subaru
#Automotive security is no joke, but manufacturer's still live by security standards from the beginning of the century.
samcurry.net/hacking-subaru
January 11, 2025 at 3:55 AM