8101
Is SHA-3 slow?
In a recent post , Adam Langley complains that “SHA-3 is slow”. Similar comments appear from time to time on the web (see also David Wong's post ). But what does it mean precisely? Let us dig into it.
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 8,773 posts.
8102
Trust-based moderation systems
master's thesis research into subjective, trust-based moderation systems
8103
Information about a recent security incident at Mailchimp
Maintaining our security commitment to our customers
8104
Ten years isn't long enough for maximum age settings
You're probably reading this page because you've attempted to access some part of my blog (Wandering Thoughts) or CSpace , the wiki thing it's part of. Unfortunately you're using a browser version that my anti-crawler precautions consider suspicious, most often because it's too old (most often this applies to versions…
8105
The Sad State of HTML Email Input Fields and IDNs
Chrome and Firefox disagree on IDN addresses in type=email inputs: punycode, validity and the value JavaScript sees. Feature detection is the workaround.
8106
8107
8108
Defensive Programming
A community and blog for embedded software makers
8109
8110
The NX bit is not just about security
While I’m taking a short break from low-level programming, here’s a story by a friend of mine, Sonya, about debugging a seemingly impossible bug in ARM code. This bug hunting saga started several months ago. While developing a bare-metal hypervisor on ARM64 for postmarketOS, I hit a strange bug: if I enabled the…
8111
Handling secrets (somewhat) securely in shells
Sometimes, you need to deal with secrets in an interactive shell. Say, for example, you want to do things with the API of a GitLab instance for which you require authentication:
8112
Introducing Transport Layer Security in pure OCaml
This domain name has been registered with Gandi.net. It is currently parked by the owner.
8113
8114
Why the NSA Dump Isn't from an Insider
Between Lies and Bad Analysis
8115
8116
How to Create HTML/ZIP/PNG Polyglot Files
Learn How to Create HTML/ZIP/PNG Polyglot Files!
8117
8118
The investigation into ToTok
triaging a massively popular iOS application, with a dark side
8119
8120
The Million-Key Question: Investigating the Origins of RSA Public Keys
Petr Švenda, Matúš Nemec, Peter Sekan, Rudolf Kvašňovský, David Formánek, David Komárek, and Vashek Matyáš, Masaryk University
8121
Bad Smart Watch Authentication
IDO based smart watches are a security nightmare, and there's likely millions of them out there
8122
OAuth Attack Vectors
Intro The OAuth2 authorization protocol has been under fire for the past ten years. You've probably already heard about plenty of "return_uri" tricks, token leakages, CSRF-style attacks on clients, an
8123
8124
And the privacy invasion award goes to …
Who’s playing fast and loose with your data? The Big Brother Awards, billed as the “Oscars for data leeches” by the hackers and privacy advocates who hand out the prizes, shine a high-intensity spotlight on companies and individuals with poor privacy track records. Since 1998, Privacy International...
8125
Flock, Private Contact and Calendar Cloud Sync for Android
At Open Whisper Systems, we believe users should have both privacy and powerful services. Today we’re releasing Flock, a private cloud sync service for your personal data. Your contacts and calendars belong to you. So does your privacy. Flock makes it possible to have both.
8126
Don't Feed Them After Midnight: Reverse-Engineering the Furby Connect
A Accenture oferece oportunidades que surgem a partir da disrupção tecnológica em todas as indústrias, em todos os países, todos os dias. Saiba mais!
8127
W^X policy violation affects Windows drivers compiled in VS 2013 and previous
Back in June, I was doing some analysis on a Windows driver and discovered that the INIT section had the read, write, and executable characteristics flags set. Windows executables (drivers included…
8128
8129
FlipperZero: Our Response to the Canadian Government
In just a few years, Flipper Zero has become so popular that it’s now surrounded by many myths. It’s no wonder that people in power are trying to make Flipper Zero illegal. As you might have seen in the news, the Canadian government plans to ban Flipper Zero
8130