I don’t know what he’s talking about, but maybe he’s saying that the US already has quantum computers capable of breaking modern cryptography, and that it’s time to move to Post Quantum Cryptography (PGC). The process is pretty far along:

• https://postquantum.com/industry-news/microsoft-pqc-windows/
• https://www.redhat.com/en/blog/whats-new-post-quantum-cryptography-rhel-101

Both sites mention “harvest now, decrypt later.” That’s an attack where someone could scoop up all the encrypted traffic/files/whatever, and just store it until quantum computers are effective at breaking it. Because of the nature of the topic nobody who knows for sure is going to say, but it’s not going to be cheap to replace all the crypto out there with PGC so there’s a reason to think there’s a need even if nobody will confirm anything. I personally think just the possibility of the attack is enough reason to move if the algorithms are already in place. If you’ve got encrypted data and you expected it to stay unreadable for hundreds of years, then there’s reason to think that’s not achievable right now.

https://nist.pqcrypto.org/foia/20250114/djb pqc paper.pdf

Lots of rose colored glasses being worn here.

I will take modern rust prevention tech every day all day. The control modules and circuit boards are a hole in repairablity, and there’ll be a wall where nobody makes them anymore and the specs are not published (considered proprietary/trade secret/whatever), and that whole vehicle will just have to be scrapped. The world won’t ever see the end of old body-on-frame vehicles with crate engines. Speaking for myself the “rose colored glasses” is a wish for the best of both worlds. I wouldn’t doubt it’s out there being done somewhere, but I’m sure it’s cost prohibitive to do it, or people are doing it for themselves.

Maybe I’m just complaining because I don’t personally have the time/knowledge/workspace to do what I want in that area. C’est la vie.

Who defines the untrusted applications though?

¯\(ツ)/¯

If GNOME wrote it then they probably trust it. If you’re using GNOME, then you’ve accepted their security model on some level.

At least you know to go look for it. Attackers will only get more sophisticated:

https://ioctl.fail/preliminary-analysis-of-aur-malware/

according to their stated security model, untrusted applications must not be allowed to communicate with the secret service.

That won’t be a popular stance to take when someone eventually steals a bunch of cached, unlocked credentials off of D-BUS because of an oversight somewhere in the npm/aur/pip/cargo/whatever ecosystem.

More rabbit hole:

• https://www.openbsd.org/papers/bsdcan14-libressl/mgp00001.html
• https://gpg.fail/ (including the presentation)
• https://github.com/FiloSottile/age
• https://jedisct1.github.io/minisign/
• https://github.com/jedisct1/encpipe

What kind of car?

They used to be. Go back far enough in time and you could climb up under the hood into the engine bay to work on it. All that went by the wayside to get smaller packaging, lighter weight, and better fuel efficiency.

Now you need special tools or special code readers to solve/diagnose all vehicle problems. The large scale farmers are dealing with this now with the large combines and harvesters needing a tech with special equipment to read all the codes where the older tractors from the 70s and 80s can be repaired.

Well, nothing to do but start at the first one and work our way down…

Hm. Had been thinking of it in terms of controlling the local file system.

Thanks.

people then concluded that FROST is harder to exploit in real-world scenarios than in the lab

What happens if there’s an extra 4GB of stuff laying around?

https://arstechnica.com/google/2026/05/no-google-hasnt-changed-chromes-local-ai-features-its-just-as-confusing-as-ever/