@amy TCP is vint cerf's replay-attack-as-a-service and is remarkably unserious. QUIC is quite literally just the signal protocol (replete with trevor perrin as consultant) but being the internet they of course have to fuck it up for the inane "header compression" bullshit
@amy that paper has the jane street guy as first author how curious
@amy ughhhhh i'm so over polynomials
Sep 25, 2026, 9:20 PM@hipsterelectron I mean, I did say that it came from corpo land. Polynomials they have their flaws, yes, but also it's interesting work for it's time and arguably I think there's unexplored possibilities with the shape of the technique they describe
@amy i just think they're overused i don't really have any problems with them. this was just whining
Sep 25, 2026, 9:24 PM@amy i am uninterested in factoring weaknesses because everyone should be using pure diffie-hellman instead
@amy working on this tonight in fact
Sep 25, 2026, 9:17 PM@hipsterelectron tell me more about this issue with TCP? I can see how it can be vulnerable to a replay exactly one before RST is sent because of a state machine violation.
@amy any intermediate can choose to drop a packet and force the sending party to retransmit. now that i think about it though you're right that's not a replay attack a replay attack would be from the reuse of a TLS session