Collaborate Disseminate
It’s time to strap on our propeller beanies, because we’re going to talk crypto. The short version is that some SSH handshakes can expose enough information for a third party …read more Continue reading This Week in Security: SSH, FTP, and Reptar
Keyloggers. Such a simple concept — you secretly record all the characters typed on a keyboard, and sort through it later for interesting data. That keyboard sniffer could be done …read more Continue reading This Week in Security: Find My Keylogger, Zephyr, and Active Exploitation
There’s an interesting renaissance of Nintendo 64 gaming, powered by the ability to decompile n64 roms back into C code using Ghidra. There are projects around multiple classic games, taking …read more Continue reading Perfect Dark: Recompiled
One of our favorite retro hardware enthusiasts, [CuriousMarc], is back with the outstanding tale of preserving Apollo Program software, and building a core rope reader from scratch to do it. …read more Continue reading Saving Apollo by Decoding Core Rope
We’ve talked a few times here about the issues with the CVSS system. We’ve seen CVE farming, where a moderate issue, or even a non-issue, gets assigned a ridiculously high …read more Continue reading This Week in Security: CVSS 4, OAuth, and ActiveMQ
This week we got news of a security incident at 1Password, and we’re certain we aren’t the only ones hoping it’s not a repeat of what happened at LastPass. 1Password …read more Continue reading This Week in Security: 1Password, Polyglots, and Roundcube
Google Chrome has done a lot of work on JavaScript performance, pushing the V8 engine to more and more impressive feats. Recently, that optimization has one more piece, the Maglev …read more Continue reading This Week in Security: Browser Exploits, Play Protect, and Turn ON your Firewall!
Curl gave us all a big warning that a severe security problem had been found in that code-base. Given the staggering number of Curl installs around the world, we held …read more Continue reading This Week in Security: Curl Reveal, Rapid Reset DDoS, and Libcue
I have an admission to make. I have a Google addiction. Not the normal addiction — I have a problem with Google Maps, and the timeline feature. I know, I’m …read more Continue reading Meshtastic and Owntracks to Kick your Google Habit
This week starts out with a nifty vulnerability in the glibc dynamic loader. This is an important step in running a binary executable on Linux, as it pulls the list …read more Continue reading This Week in Security: Looney Tunables, Not a 0-day*, and Curl Warning