nora

nora

@nora.bsky.social

Engineer and Applied Cryptographer working in the ASML at Harvard’s BKC. Led cryptography R&D at Juicebox and privacy projects at Signal. Passionate about fostering inclusive communities, mentoring women in tech, and building third spaces for creatives.

306 followers66 following60 posts

nora reposted

Developers from Signal (including its protocol's co-creator) along with Microsoft and Harvard unveil Encrypted Spaces, an open-source codebase for a new generation of private collaboration apps. Think Slack, Discord, Google Docs, all end-to-end encrypted. www.wired.com/story/signal...

wired.comSignal Alums Reveal ‘Encrypted Spaces,’ a System for Making Private Collaboration AppsThe new open-source project could serve as the basis for a future of apps with features as complex as Slack, Discord, or Google Docs—but with added protection against surveillance.

this is terrible, and yet sadly so common. we need a standardized system for ownership over our digital IDs so big tech companies can’t just flip an off switch for your whole digital life (working on it, but it’s a long road). google, microsoft, etc doing this everyday too and users have no recourse

nora reposted

pre-writing a devastating obituary for your enemy is god-tier hating of a kind you don’t often see anymore. renaissance haterism. beautiful stuff.

Brittany Trang@brittanytrang.com

A Sharon Begley byline, almost 5 years after her death. Upon hearing the news James Watson had died, a STAT reporter said in our Slack, "I wish I could read what Sharon would have written." Incredible news: Sharon in fact did pre-write a Watson obit. And it is masterful and excoriating. 🧪🧬🧫

nora reposted

"Tzefardea Tzedek" (Frog of Righteousness) As soon as the Portland Frog became a meme, Jewish social media blew up with jokes about the 2nd Passover plague - tzefarde'a (frogs) - and the Rabbinical commentary around it. I knew I had to make a calligraphy piece encompassing all of it. (more in alt.)

nora reposted

I really dislike how science has started calling almost any fancy computational technique AI. 🧪 The framing of this entire article makes it sound like a benevolent AI independently made these drugs. That is *pure fantasy*. Instead: a team of scientists made a machine learning model for a study.

nora reposted

The fate of ordinary Gazans trapped by Israel in a war zone and ordinary Israelis held hostage by Hamas in a war zone will be one and the same. They are starving. They are buried beside one another. They are cast aside by those with power to save them. For this we weep.

nora reposted

Read this in full. I'm short: The ADL has fully given up on its mission to fight real antisemitism. Instead, they are focused on unconditional support towards Israel, including justification of antisemitism if it serves that goal. Plus, working with fascists & antisemitic groups and people.

Noah Shachtman@noahshachtman.bsky.social

I spoke with 40+ sources for a look inside the Anti-Defamation League. Here’s some of what I found. ADL’s gentle response to Elon Musk’s infamous salute was partially driven by his support of Israel. To ADL, that indicated he didn’t have “antisemitic tendencies.” (1/x) nymag.com/intelligence...

nora reposted

🤖 Always on the lookout for potential net positive uses of “AI”, esp for elderly…but the claims here pissed me right off: “There was no way that we could have found enough songwriters out there to be able to create those tracks in an authentic way” 🚫 No. MANY musicians [wc]ould do this. And, 🧵

NPR@npr.org

For nearly 30 years, the nonprofit Songs of Love Foundation has created custom songs for kids with terminal illnesses. Now it has harnessed AI to expand its services to older adults with memory loss.

nora reposted

I have been using the em dash for about 10 years (I only learned English 13 years ago, for context). I even got a whole book I published before ChatGPT to prove it. I am not stopping—too useful!

This post is unavailable.

I'd argue it's less than not great, it's bad. Since they're not using HSMs for Juicebox, and they control all the realms, they have the ability to easily brute force anyone's 4-digit PIN and get their stored secret. It's basically just backdoored.

Matthew Green@matthewdgreen.bsky.social

Good discussion on Twitter’s new encrypted DMs. TL;DR the cryptography doesn’t seem bad, but it isn’t great. mjg59.dreamwidth.org/71646.html

If your DMs are “encrypted” but one org holds all the keys, you haven’t distributed trust – you’ve built a backdoor. Juicebox only works when boundaries are real. Separation isn’t optional. Replication != distribution.

juicebox.xyzDon’t Put All Your Juice in One BoxAt Juicebox, we believe key recovery should be secure, user friendly, and actually… work. That means it has to be more than cryptographic theater. It has to reflect the real world, where systems get h...

We are truly living in the worst world. Who asked to have AI monitor every aspect of their digital lives, by default? These features should be opt-in, not out. If you can even justify their existence at all.

Jason@elnawser.bsky.social

Thanks. I had no idea. This setting is wiiiiiild. Can't believe this is a default.

nora reposted

A dragon emerges from an egg, within a nest among others waiting to hatch atop a majestic castle. The dragon is embedded with a DragonRNA, a DNA strand covalently extended with an RNA tail. Variants of precursor DNAs are backlit by a glowing polymerase within each egg,

Incredibly proud of the brilliant work Emily has done – these little monsters have so much potential in RNA therapeutics! So glad it’s finally in the world. It was a privilege to help with some figures and artistic renderings (spot the dragon flying through the abstract!). Mazel tov to all involved!

Emily Greenwald@emilymbgreenwald.bsky.social

I’m excited to share our paper in @narjournal.bsky.social on DragonRNA: DNA-primed RNA extension! We developed a fluorescence gel shift assay to detect DragonRNA activity by enzymes, & characterized this activity using gel assays, sequencing, & bioinformatics. academic.oup.com/nar/article/...

nora reposted

let’s be clear that personalisation amounts to determining a person’s future based on recurring patterns of the past. if you belong to a groups that society has not been kind to in the past (black & brown, LGBTQI, poor, disabled, etc), AI personalisation ensures your future encodes past injustice

nora reposted

Ok, look people: Signal as a *protocol* is excellent. As a service it’s excellent. But as an application running on your phone, it’s… an application running on your consumer-grade phone. The targeted attacks people use on those devices are well known.

nora reposted

Niche adorableness (if you get this you’re my people): Teaching 6th graders at Hebrew school. A passage has the word “mitzvah.” 6th grader interrupts lesson to excitedly yell “wait the commandments are GIRLS.” After a beat they continue: “the Torah is a GIRL! Who run the world?! Girls!”

Having been on the inside, I can say: the Signal Foundation is in a tough spot. It’s an unstable balancing act – and I’m not sure they’re prepared for what’s coming.

Matthew Green@matthewdgreen.bsky.social

I don’t mean to be doom and gloom about things. I guess my takeaway (1) is: no matter what people tell you, actual privacy in communications is one of the most important services in the entire world, yet (2) it is a totally unstable balancing act for for-profit companies to provide this, long term.

View full thread

Publicly, they talk a good talk. But behind the scenes, that fire – the urgency to defend privacy at all costs – isn’t burning as brightly, and an afterthought compared to what it used to be.

None of this changes that Signal is still vital infrastructure. It protects regular people and saves lives every day. I hope it can keep doing that for a long time to come. I just fear they’ll fall to the same pressures as a WhatsApp would. I really hope I’m wrong.

Having been on the inside, I can say: the Signal Foundation is in a tough spot. It’s an unstable balancing act – and I’m not sure they’re prepared for what’s coming.

Matthew Green@matthewdgreen.bsky.social

I don’t mean to be doom and gloom about things. I guess my takeaway (1) is: no matter what people tell you, actual privacy in communications is one of the most important services in the entire world, yet (2) it is a totally unstable balancing act for for-profit companies to provide this, long term.

View full thread

They’ll put up a fight, but I’m not convinced they’ll make the right choices when things hit the fan – or be transparent about them if those choices go against growth or funding.

I hope I’m wrong. But the Signal of today is not the org it was even a few years ago. Internally, their priorities don’t really align with pushing the boundaries on privacy anymore.

Having been on the inside, I can say: the Signal Foundation is in a tough spot. It’s an unstable balancing act – and I’m not sure they’re prepared for what’s coming.

Matthew Green@matthewdgreen.bsky.social

I don’t mean to be doom and gloom about things. I guess my takeaway (1) is: no matter what people tell you, actual privacy in communications is one of the most important services in the entire world, yet (2) it is a totally unstable balancing act for for-profit companies to provide this, long term.

In practice, Signal isn’t run that differently from WhatsApp. It’s a much smaller team (~40 people), which has pros and cons – but MAUs and money (donations) are still their top priorities, like most tech companies.

nora reposted

Replying to @matthewdgreen.bsky.social

Signal was designed to be a consumer-grade messaging app. It’s really, really good for that purpose. And obviously “excellent consumer grade” has a lot of intersection with military-grade cryptography just because that’s how the world works. But it is being asked to do a lot!

Before you travel, minimize risk: • Encrypt your devices (FileVault, BitLocker, etc) • Backup + sanitize data (assume others may access it) • Power OFF your devices to ensure full disk encryption is active This gives you the best chance of keeping your data safe, even if your devices are seized.

Jenny Cohn@jennycohn.bsky.social

“France’s research minister said a French scientist was denied entry to the US this month after immigration officers at an airport searched his phone and found messages in which he had expressed criticism of the Trump administration.” He had been traveling to a conference near Houston, TX. 3/19/25

View full thread

If you're not a US citizen, refusing access could lead to being denied entry. Only you can weigh the risks of compliance vs security for your situation, but preparation prior to travel is the best way to minimize risk in general.

Before you travel, minimize risk: • Encrypt your devices (FileVault, BitLocker, etc) • Backup + sanitize data (assume others may access it) • Power OFF your devices to ensure full disk encryption is active This gives you the best chance of keeping your data safe, even if your devices are seized.

Jenny Cohn@jennycohn.bsky.social

“France’s research minister said a French scientist was denied entry to the US this month after immigration officers at an airport searched his phone and found messages in which he had expressed criticism of the Trump administration.” He had been traveling to a conference near Houston, TX. 3/19/25

Double Union was my home away from home in SF, and it was a pleasure to help run it for the last ~6 years! DU’s not just a makerspace, but a vital community space that helps spark creativity, friendship, and a feeling of safety and belonging that such spaces often lack. Donate if you can ❤️

Double Union@doubleunion.bsky.social

Double Union is a 100% volunteer-run #nonprofit #makerspace for women and non-binary people. About 60% of our operating costs are covered by sliding-scale member dues. #Donations cover the remaining 40% to keep this space accessible to the widest range of members: doubleunion.org/support/

nora reposted

One of the things I’ve come to appreciate being with privacy folks this week is how unique Signal is at this moment. I know it’s maybe a cliche at this point, but it needs to be said.

nora reposted

Some days, it’s just hard to be a human. The world cries out in pain, justice is sidelined & it’s scary & maddening. So we cry & then get back up again to fight for what’s right, & to protect the vulnerable. Because that’s what humans do when humanity works. The job falls to all of us.

nora reposted

I am proud to join over 350 rabbis and cantors, plus a long list (and growing) of Jewish creatives to sign on to an ad in the @nytimes.com crying out against the president’s (ימ"ש) call for the removal of all Palestinians from Gaza. #SayNoToEthnicCleansing #GazaIsNotForSale 1/