It’s the first of January 2025 and it’s time for looking back on 2024. Up until 20th of October this year, it was probably the best year I’ve had in a decade, and it’s not an overstatement.
Visit blog.0xbadc0de.be → RSS feedOn Hacker News Jan 2014 – Feb 2016
Security & Privacy 2Math & Algorithms 1Infrastructure & DevOps 1
The comments around the last OpenSSH issue ( CVE 2016-0777 , you must read excellent Qualys’ analysis if you’re interested with the details), I noticed that many people were not aware of some basic features of OpenSSH. I will attempt to give a few advises, prioritized in feasibility order, and with graphical…
Dual_EC_DRBG is an pseudo-random number generator promoted by NIST in NIST SP 800-90A and created by NSA. This algorithm is problematic because it has been made mandatory by the FIPS norm (and should be implemented in every FIPS approved software) and some vendors even promoted this algorithm as first source of…