Collaborate Disseminate
Eepsites are similar to Tor’s hidden services, but based on the I2P anonymity network.
Named eepsites use central registrars like stats.i2p and no.i2p. Each eepsite also has a b32 domain which is a base32-encoded string that is used to con… Continue reading Is it possible to enumerate registered eepsite (I2P) subdomains?
How does the HAVEGE method (or rather, the specific adaption of it as used in haveged) for generating randomness from timing differ from that of the Jitter Entropy method? Is there any research showing any major difference between their a… Continue reading Comparing HAVEGE and Jitter Entropy algorithms
I am aware of one paper (although I forget the name) in which an AES key is extracted from some meters away as a result of coil whine (potentially audible vibration of an inductor coil), but I can’t find any research which looks into acous… Continue reading Side-channel impacts of coil whine and related acoustical phenomena over time
From here:
I have heard rumors of a grsecurity Wunderwaffe called AUTOSLAB. We don’t know much about it. Presumably, it makes Linux allocate kernel objects in separate slab caches depending on the object type. That could ruin the heap spr… Continue reading What is AUTOSLAB, and how does it work?
It’s fairly well known that it’s very dangerous to copy-paste text from a website into a terminal, as it can include extra text, control codes, and newlines that aren’t visible when you’re copying it, but which are saved into the paste buf… Continue reading Simple way to safely paste text from website into terminal
Windows Kernel Data Protection is a kernel security feature which appears to use Extended Page Tables (EPT, a hardware virtualization feature) to enforce read-only pages. How effective is this at protecting from kernel exploits in the real… Continue reading How effective is Windows KDP for exploit mitigation in practice?
Assume sensitive audio emissions from a mechanical keyboard. These audio emissions are often sufficient to reconstruct the actual key presses that generated the sound. If the audio is compressed using a narrowband audio codec such as G.711… Continue reading How sensitive are acoustic side-channels to compression with a narrowband codec?
A number of vulnerabilities were fixed in Firefox in the latest update. MSFA2021-08 describes it only as "memory issues that may be exploitable", and doesn’t give any information:
Mozilla developers Alexis Beingessner, Tyson Smi… Continue reading What exactly is CVE-2021-23978 (from MSFA2021-08 in Mozilla Firefox)?
Is there any way an untrusted third party who has access to content from a website over HTTPS can prove the authenticity of the data (i.e. that it was distributed by a server in possession of a specific TLS private key)? The … Continue reading Proving authenticity of data accessed over TLS by an untrusted third party
I am aware of research which shows that single (or sometimes double) random overwrites on a magnetic hard drive is enough to ensure data is not recoverable, but is there any research into the recovery of data stored in an EEPROM after the … Continue reading Recovery of EEPROM data after bulk erase operation