GoKawiil
Tech News
A team including UC San Diego professor Nadia Heninger published research describing a new classical-computing attack that forges RSA signatures without factoring the underlying keys. The method reportedly cracked deprecated 1024-bit RSA keys in a few months using an academic CPU cluster, far less effort than factoring would require, and it also degrades the theoretical security of 2048- and 4096-bit keys.
A newly reported cryptanalysis technique can compromise 1,024-bit RSA encryption without fully factoring the key, requiring an estimated 1,380 CPU core-years of computation. That figure is far below the roughly 500,000 to 1 million CPU core-years previously estimated to factor such a key directly.
A developer investigating unexpected disk usage discovered that Zhipu's ZCode AI coding app compresses and encrypts entire project workspaces—including .git history, LFS caches, reflogs and configs—and uploads them to Aliyun OSS without visible user consent. The encryption uses a server-issued RSA public key while the private key stays server-side, meaning neither the user nor the local client can ever decrypt the archives sitting on the user's own disk. In the investigated case, a 313MB encrypted baseline snapshot of a commercial project had failed to upload 564 times and remained queued locally.