David Adrian

What a clown show of a Michigan team

Revising expectations downward

I told yall

hey now score probability graphs only do this when the team is under extreme duress

Texas back y’all

I was told Texas was back.

Ryan Day looks like the evil robot Santa Claus from Santa Clause 2

Michigan football

The horror can vote today.

Since the last time Peikert was on, Michigan football and Michigan basketball both won a national championship. That's the new bar for repeat guests.

I wrote a post about how security undervalues preventing problems, and how this can be exasperated by AI and the vulnpocalypse, even though AI should actually make robustness much easier for defenders. Read it here: dadrian.io/blog/posts/w...

This was very fun!! Thanks again to our sponsor Teleport 💃🕺

Are you coming to Vegas for BlackHat and DEF CON? Come to our happy hour! securitycryptographywhatever.com/events/black...

Wrote another thing dadrian.io/blog/posts/h...

New episode! www.youtube.com/watch?v=7ZwQ...

dadrian.io/blog/posts/t...

securitycryptographywhatever.com/2026/03/25/a... is very very good. If you read my vulnerabilities post, this podcast episode is much more worth listening to.

I poked around with @exe.dev some, and wrote up how I think their Github integration works, because it's pretty cool. dadrian.io/blog/posts/e...

I wrote something: sockpuppet.org/blog/2026/03...

NEW EPISODE! The gang learns a bitter lesson about AI and bug finding! Returning champion Nicholas Carlini is back to talk about Claude for vulnerability research. securitycryptographywhatever.com/2026/03/25/a... www.youtube.com/watch?v=_IDb...

new Joy of Cryptography just dropped (feat. Post-Quantum Crypto)

Extremely psyched about two upcoming SCW guests, one of them this week. We've got very crunch vulnerability research and cryptography stuff coming.

new Merkle Tree Cert only Chrome Quantum Root Store: security.googleblog.com/2026/02/cult...

None of you are giving me enough credit for not participating on the TLS working group mailing list. You're welcome. Everything I don't do, I don't do it for you.

Who up losing they minds on this site?

NEW EPISODE! The maintainers of py/cryptography declared that after many years of trying to make it work, they would be moving away from OpenSSL when supporting new functionality and exploring adding other backends: securitycryptographywhatever.com/2026/02/01/p... www.youtube.com/watch?v=dEKB...

Thinking about Curt Cignetti.

I cannot get over how impressive it is what Curt Cignetti accomplished at Indiana

Indiana shall light this holy ring, release its cleansing flame, and burn a path into the divine beyond!

This is what zero-trust looks like at the infrastructure layer. Identity and encryption match the lifetime of the thing being secured. If your certificate strategy still assumes stable names and year-long validity, it is already behind reality. letsencrypt.org/2026/01/15/6...

dadrian.io/blog/posts/s...

repent! for the day of sixteen windiana shall be upon us!

Final SCW of 2025! We had Matt Bernhard on to talk about cryptographic voting systems, in the wake of the IACR election. (Everybody I voted for in the new election won! Woo!)

What a fantastic present to end the year! (swear I woke up like this) @mbernhard.com @durumcrustulum.com @sockpuppet.org @dadrian.io @scwpod.bsky.social

This Bernstein crap drives me up the wall because IT MAKES NO SENSE. Why would the NSA be picking weak crypto to protect US NatSec?! They have mathematicians and clusters in China, too! Dual_EC_DRBG was a NOBUS backdoor. There is NOWHERE to hide a NOBUS backdoor in ML-KEM.

Wonderful news! The kind of thing a lot of software folks across the world have been working to make possible. So stoked the Chrome folks are pushing us forward

It's time to make HTTPS the web's default, and reap the full security benefit from years worth of HTTPS adoption! security.googleblog.com/2025/10/http...

One year from now, Chrome will enable "Always Use Secure Connections" and warn users before plaintext HTTP by default.

Iowa-Rutgers hitting the over? Trump ruined the B1G West.

New post! Stop trying to solve revocation, we already have the answer. dadrian.io/blog/posts/r...

Kirk Herbstreit is going to be the first person to make a Golden Retriever unlikable.

The bigger issue? Microsoft’s root program still trusts this CA, leaving Edge and Windows users exposed in ways Chrome, Firefox, and Safari users aren’t. The pattern is familiar: long-lived trust, weak oversight, systemic risk. It’s time for Microsoft to step up and fund proper root governance. 👇

If you look closely, you can see UNC’s quarterback is not Tom Brady