News for hackers. Stuff that matters.
Re:Why Did Satoshi Decide to Use Secp256k1 Instead of Secp25... by 0des on Saturday October 09, 2021 @05:17PM (#28813385)
Well, for one, iirc Secp256r1 was pseudo random and can be seen glowing in broad daylight.
Re:Why Did Satoshi Decide to Use Secp256k1 Instead of Secp25... by snypher on Saturday October 09, 2021 @05:29PM (#28813461)
From here[1], even the two a,b values seem suspicious:

k curve

  a = 0
  b = 7
r curve

  a = FFFFFFFF 00000001 00000000 00000000 00000000 FFFFFFFF FFFFFFFF FFFFFFFC
  b = 5AC635D8 AA3A93E7 B3EBBD55 769886BC 651D06B0 CC53B0F6 3BCE3C3E 27D2604B
[1]https://www.johndcook.com/blog/2018/08/21/a-tale-of-two-elli...
Re:Why Did Satoshi Decide to Use Secp256k1 Instead of Secp25... by themodelplumber on Saturday October 09, 2021 @05:35PM (#28813504)
Glowing...is this metaphorical or some industry term?
Re:Why Did Satoshi Decide to Use Secp256k1 Instead of Secp25... by Strilanc on Saturday October 09, 2021 @06:48PM (#28814046)
They're saying they don't trust that the constants defining the curve were chosen non-maliciously. The NSA has, in the past, standardized protocols that contained intentional backdoors embedded into the constants used in the definition [1]. Because of things like that, it's desirable for cryptographic protocols to use constants chosen in some way that makes backdooring intractable [2].

1: https://en.wikipedia.org/wiki/Dual_EC_DRBG

2: https://en.wikipedia.org/wiki/Nothing-up-my-sleeve_number

Re:Why Did Satoshi Decide to Use Secp256k1 Instead of Secp25... by 0des on Saturday October 09, 2021 @05:46PM (#28813589)
Saying that something 'glows in the dark' implies interference, so unfortunately, within cryptography, it has become an industry term as well as metaphor.

Other examples are the 'mystery padding' in keccak vs sha3.

Re:Why Did Satoshi Decide to Use Secp256k1 Instead of Secp25... by woodruffw on Saturday October 09, 2021 @07:11PM (#28814186)
I work with a decent group of academic and industry cryptographers, and I’ve never heard any of them use the term (even as a joke.)

My main familiarity with it is from imageboard culture, where (mostly) reactionaries use it to accuse each other of being feds.

Re:Why Did Satoshi Decide to Use Secp256k1 Instead of Secp25... by Ar-Curunir on Saturday October 09, 2021 @06:48PM (#28814048)
I’ve never heard a cryptographer use “glow-in-the-dark” when talking about potentially fishy schemes.

Source: am cryptographer

Re:Why Did Satoshi Decide to Use Secp256k1 Instead of Secp25... by magicalhippo on Saturday October 09, 2021 @09:17PM (#28814913)
> Saying that something 'glows in the dark' implies interference

Given that "glows in the dark" typically refers to fluorescence[1], where does the interference comes in?

[1]: https://en.wikipedia.org/wiki/Fluorescence

Re:Why Did Satoshi Decide to Use Secp256k1 Instead of Secp25... by rocqua on Sunday October 10, 2021 @04:32AM (#28816782)
I know that some cryptography protocols have intermediate results that need to be deleted. This is sometimes referred to as 'radioactive waste'
Re:Why Did Satoshi Decide to Use Secp256k1 Instead of Secp25... by Jensson on Saturday October 09, 2021 @06:15PM (#28813796)
I read the 3 replies and I still don't know what glowing means in cryptographic terms. I even tried to google it with cryptography added but nothing.
Re:Why Did Satoshi Decide to Use Secp256k1 Instead of Secp25... by ajb on Saturday October 09, 2021 @06:20PM (#28813843)
It means that the designer may have inserted an unpublished weakness. See also https://en.m.wikipedia.org/wiki/Nothing-up-my-sleeve_number
Re:Why Did Satoshi Decide to Use Secp256k1 Instead of Secp25... by 0des on Saturday October 09, 2021 @06:25PM (#28813890)
As in the case of Keccak and SHA3, it doesn't necessarily have to be the designer, it can also be the reviewing committee.
Re:Why Did Satoshi Decide to Use Secp256k1 Instead of Secp25... by metagame on Saturday October 09, 2021 @06:32PM (#28813938)
"Glowing" means that it's probably a plot of a government. It's not cryptography-specific.
Re:Why Did Satoshi Decide to Use Secp256k1 Instead of Secp25... by roxaaaane on Saturday October 09, 2021 @06:22PM (#28813857)
It's probably metaphorical, to mean distinguishable ?! And the term has never been used in crypto
Re:Why Did Satoshi Decide to Use Secp256k1 Instead of Secp25... by smoldesu on Saturday October 09, 2021 @06:24PM (#28813882)
It's imageboard/IRC slang, you won't find any documentation on it because it's an intentionally obfuscated/dogwhistle phrase intended to only 'make sense' to other browsers who've stuck around long enough to get spoonfed.
Re:Why Did Satoshi Decide to Use Secp256k1 Instead of Secp25... by 0des on Saturday October 09, 2021 @06:28PM (#28813912)
Using the term 'dogwhistle' seems like a divisive way to discount what I said. Do you care to articulate yourself in a way that addresses the actual substance of what I said, or is this it?
Re:Why Did Satoshi Decide to Use Secp256k1 Instead of Secp25... by Lammy on Saturday October 09, 2021 @09:57PM (#28815117)
Agreed that "dogwhistle" is lowkey pejorative. I prefer "shibboleth".
Re:Why Did Satoshi Decide to Use Secp256k1 Instead of Secp25... by matheusmoreira on Saturday October 09, 2021 @09:30PM (#28814985)
Glowing is not cryptographic jargon. It's a word used years ago by the developer of TempleOS in a livestream to describe CIA operators. He said he could tell who was CIA because they would glow in the dark. Users of the 4chan technology board witnessed this and it became a meme.

To say something glows means to suggest the US three letter agencies are interfering with it. If some cryptography glows, it means it's been compromised by US authorities. Glowies are the operators themselves.

Re:Why Did Satoshi Decide to Use Secp256k1 Instead of Secp25... by stavros on Saturday October 09, 2021 @06:39PM (#28813989)
Isn't Keccak SHA3?
Re:Why Did Satoshi Decide to Use Secp256k1 Instead of Secp25... by 0des on Saturday October 09, 2021 @06:48PM (#28814051)
no, keccak is keccak, sha3 is keccak with NIST's mystery padding added in.
Re:Why Did Satoshi Decide to Use Secp256k1 Instead of Secp25... by stavros on Saturday October 09, 2021 @08:46PM (#28814747)
Oh huh, I didn't know that, thanks. Sounds like nothing fishy is going on, definitely not.
Re:Why Did Satoshi Decide to Use Secp256k1 Instead of Secp25... by jl2718 on Saturday October 09, 2021 @08:01PM (#28814471)
It’s from this t-shirt:

https://www.reddit.com/r/lastimages/comments/2obp6s/last_kno...

Later the phrase was seen on a t-shirt in a candid photo of a very attractive Japanese woman posted to engrish.com, and went viral.

Then 4chan picked it up.

And now it’s here.

Re:Why Did Satoshi Decide to Use Secp256k1 Instead of Secp25... by sudosysgen on Saturday October 09, 2021 @09:10PM (#28814873)
Glowing in the dark is something people say when they refer to people from intelligence services. The idea is they stick out when doing dark/stealthy stuff.
Re:Why Did Satoshi Decide to Use Secp256k1 Instead of Secp25... by sva_ on Saturday October 09, 2021 @05:48PM (#28813602)
It's a reference to schizophrenic Terry Davis (rip), author of TempleOS, who said CIA agents would glow in the dark, and got popularized through the 4chan /g/ board.

https://www.urbandictionary.com/define.php?term=Glows%20in%2...

Re:Why Did Satoshi Decide to Use Secp256k1 Instead of Secp25... by serf on Saturday October 09, 2021 @06:03PM (#28813718)
weird intersection of the internet.

Terry is/was an HN native, too.

Upvoting all of his shadowbanned stuff that was half-way decent and lucid was a hobby of mine. It still makes me feel good to think about it.

Godspeed Terry.

https://news.ycombinator.com/item?id=7818823

Re:Why Did Satoshi Decide to Use Secp256k1 Instead of Secp25... by jfoutz on Saturday October 09, 2021 @06:16PM (#28813808)
I vouched for a few of his comments as well. I definitely think about how a quirk of biology or environment could flip the wrong switch in my brain.

There are millions of sob stories. I don't do as much as I could, but I do more than nothing to help people out. That one, Terry Davis, keeps me up at night sometimes.

Re:Why Did Satoshi Decide to Use Secp256k1 Instead of Secp25... by 0des on Saturday October 09, 2021 @06:41PM (#28814000)
Hindsight is 20/20, all we can do is learn for next time.
Re:Why Did Satoshi Decide to Use Secp256k1 Instead of Secp25... by jcun4128 on Saturday October 09, 2021 @06:24PM (#28813881)
I watched some of his live streams, saw some cool things but man the things he would say
Re:Why Did Satoshi Decide to Use Secp256k1 Instead of Secp25... by 0des on Saturday October 09, 2021 @06:33PM (#28813945)
If we were not meant to distinguish creation from creator, we'd be in a world of trouble. Also, he was quite ill, I'm not sure we can fault him for some of his mannerisms while also admiring his ambition and skill.
Re:Why Did Satoshi Decide to Use Secp256k1 Instead of Secp25... by Lammy on Sunday October 10, 2021 @02:29AM (#28816256)
Re:Why Did Satoshi Decide to Use Secp256k1 Instead of Secp25... by collegeburner on Saturday October 09, 2021 @05:51PM (#28813623)
Glowie refers to a fed, it started with the templeos guy but is more general now. Glowing means its a fed op to weaken crypto, kinda like the dual ec fiasco.
Re:Why Did Satoshi Decide to Use Secp256k1 Instead of Secp25... by matheusmoreira on Saturday October 09, 2021 @09:09PM (#28814867)
4chan's technology board were, let's say, huge fans of Terry Davis, developer of TempleOS. One day during his livestream he said he could see the CIA operators while driving because they would glow in the dark.

Now whenever someone is suspected of being an intelligence agency operator, people reply with pictures of a literal glowing person. Usually happens when someone spreads FUD about technology that's believed to be secure. It is assumed that these agencies are running psychological operations in online communites with the intent to dissuade the use of technology that could defeat them.

Re:Why Did Satoshi Decide to Use Secp256k1 Instead of Secp25... by K0balt on Tuesday October 12, 2021 @08:22AM (#28838813)
“Glows” for something tampered with or “glowies”for agents of three letter agencies doing the tampering is an imageboard culture term first coined by Terry Davis (1969-2018), the iconic developer of TempleOS, who made the probably fantastical but apparently not metaphorical claim that he could distinguish CIA agents from regular people because CIA agents “glowed in the dark”.

After it’s controversial debut on 4chan, Davis’s unsupported claim of selective unexplained human photoluminescence quickly became a meme in imageboard culture. Since imageboard culture is intersectional with software development culture, the terms have worked their way into defacto terminology among a subset of developers that work on things often thought of as adversarial at times to state interests, encrypted chat and cryptocurrency being among these.

The term has bled out some and finds spotty support among other developers in tangential contact. The future of the term is uncertain, as it’s use remains largely isolated despite being canonical since 2017.