On: The insecurity of telecom stacks in the wake of Salt Typhoon

[some_furry]

After seeing STIR/SHAKEN's implementation details (hey what if we used JWT, and then maximized the metadata leakage of who you're calling), I really do not want to trust telecoms to roll their own crypto.

https://securitycryptographywhatever.com/2024/04/30/stir-sha...

[lxgr → some_furry]

At least they're now only botching protocols instead of self-rolling low-level primitives like block and stream ciphers...