Collaborate Disseminate
There has been a rash of cryptocurrency thefts targeting some unexpected victims. Over $35 million has been drained from just over 150 individuals, and the list reads like a who’s-who …read more Continue reading This Week in Security: LastPass Shoe Drops, Keys Lost, and Train Whistles Attack
Curl was recently notified of a CVE, CVE-2020-19909, rated at a hair-raising 9.8 on the CVSS scale. And PostgreSQL has CVE-2020-21469, clocking in with a 7.5 severity. You may notice …read more Continue reading This Week in Security: Not a Vulnerability, BGP Bug Propogation, and Press Enter to Hack
Up first is a clever attack against VPNs, using some clever DNS and routing tricks. The technique is known as TunnelCrack (PDF), and every VPN tested was vulnerable to one …read more Continue reading This Week in Security: TunnelCrack, Mutant, and Not Discord
For some of us, unused hardware lying around just calls to be used. It seems like [Miles Goodhew] heard the call, and wanted to put a Dell Wyse 3040 thin …read more Continue reading Thin Client Wysens up to Become OpenWrt Router
It must be Blackhat/DEFCON season. Up first in the storm of named vulnerabilities, we have Downfall. The PDF has the juicy details here. It’s quite similar to the Zenbleed issue …read more Continue reading This Week in Security: It’s Con Season
[Tim] from the “Way Out West” Youtube channels has started a fun project — building a wooden pedal-car heavily inspired by “Bugsy Malone”. The kids-sized gangsters in that movie got …read more Continue reading Pedal Car vs Ministry of Transport
LoRa, the Long Range wireless protocol is pretty great for trickling data across long distances. There are some great embedded devices based around STM32, NRF52, and ESP32 microcontrollers. What’s been …read more Continue reading Hackaday Prize 2023: LoShark, The Radio Debugger for LoRa
If you’ve answered as many spam calls as I have, you probably hear the warranty scam robocall in your sleep: “We’ve been trying to reach you about your car’s extended …read more Continue reading This Week in Security: Your Car’s Extended Warranty, Seizing the Fediverse, and Arm MTE
Up first is Zenbleed, a particularly worrying speculative execution bug, that unfortunately happens to be really simple to exploit. It leaks data from function like strlen, memcpy, and strcmp. It’s …read more Continue reading This Week in Security: Zenbleed, Web Integrity, and More!
Up first this week is a report from vpnMentor, covering the unsecured database backing a set of dating apps, including 419 Dating. The report is a bit light on the …read more Continue reading This Week in Security: Dating App, WooCommerce, and OpenSSH