Feed aggregator

Do Less

Hacker News - Tue, 03/03/2026 - 8:17am
Categories: Hacker News

Show HN: Experimental Revocable Signatures Using Model-Based Encoding

Hacker News - Tue, 03/03/2026 - 8:15am

Hi HN — I built an experimental demo that creates and verifies revocable digital signature artifacts using deep learning encoding models instead of traditional cryptographic keys.

In this system, a specific model instance encodes file metadata into a signature artifact. That same model instance is required to verify it. Signing authority is controlled through a short-lived “lease” (15 minutes), and can be revoked to intentionally invalidate verification.

This is not RSA/ECDSA, and I’m not making cryptographic claims or guarantees. I’m exploring whether the encoding method combined with short-lived authority can function as a signing primitive.

What you can do: - Upload a non-sensitive file - Generate a downloadable signature package - Verify it later - Revoke the signing authority and observe verification behavior change - Session based. Files are processed in memory and not stored.

Core Properties: - Signatures are encoded using a specific trained model instance - Only the specific model instance can decode/verify the signature - Authority is short-lived through a 15-minute lease - Revocation is built into the design - No long-lived private keys - No blockchain or ledger

Challenge:

If you’re technically inclined, I’d genuinely love for you to try to break it. Specifically...

- Attempt to forge or reverse-engineer the signature artifact - Modify files after signing and try to preserve verification - Alter metadata in the signature package - Replay artifacts across leases

If you can successfully forge or meaningfully reproduce a valid signature artifact without access to the model instance, I’d love to hear about it. This demo is intentionally inspectable and challengeable. I am not inviting attacks against the site or infrastructure — just scrutiny of the method and encoding assumptions.

Project info and write-up: - https://lyfe.ninja/projects/#BlkBolt - https://lyfe.ninja/news/#revocable-signature-demo

If there are obvious flaws, I’d rather learn that now than later. Thanks for taking a look.

Comments URL: https://news.ycombinator.com/item?id=47231847

Points: 2

# Comments: 0

Categories: Hacker News

Android Update Patches Exploited Qualcomm Zero-Day

Security Week - Tue, 03/03/2026 - 7:41am

An integer overflow or wraparound in the Qualcomm graphics component, the bug leads to memory corruption.

The post Android Update Patches Exploited Qualcomm Zero-Day appeared first on SecurityWeek.

Categories: SecurityWeek

Iran Cyber Front: Hacktivist Activity Rises, but State-Sponsored Attacks Stay Low

Security Week - Tue, 03/03/2026 - 7:25am

The cybersecurity industry is monitoring the landscape and says many of the big claims made by hacktivist groups remain unverified.

The post Iran Cyber Front: Hacktivist Activity Rises, but State-Sponsored Attacks Stay Low appeared first on SecurityWeek.

Categories: SecurityWeek

Pages