1
Learning to break ciphers
Every now and then, I read a question about learning how to break ciphers, or more generally how to become a cryptographer/cryptologist. From my viewpoint, the most important part of learning this…
Little Man In My Head
World Wide Web Security
- Popular posts
- 4
- Total points
- 586
- HN comments
- 266
- Rank
- #4,293 personal
Visit littlemaninmyhead.wordpress.com → RSS feedOn Hacker News Nov 2015 – Aug 2025
Security & Privacy 3Software Engineering 2Math & Algorithms 2Tools & Productivity 1
2
Don’t underestimate grep-based code scanning
Static analysis tools (SAST) are perhaps the most common tool for an AppSec team in the endless effort to move security to the left. They can be integrated into development pipelines in order to of…
3
UUIDs generally do not meet security requirements
Some time ago, I was doing a web application penetration test, and noticed that the authentication tokens were UUIDs. This I knew was risky, and in fact if you read the UUID rfc, section 6 of it wa…
4
Inverting the Xorshift128 random number generator
CVE-2025-7783 is a very recent vulnerability affecting a lot of applications in the Node.js ecosystem including those which use axios or the deprecated request library. In all honesty, this vulnera…