Collaborate Disseminate
Regarding Apple’s beta feature of storing WebAuthn passkeys in the iCloud Keychain, does anybody know if the unencrypted passkeys ever leave the secure enclave, and get stored in RAM or anything?
With traditional WebAuthn on a Yubikey or s… Continue reading Do passkeys on iCloud Keychain ever exist unencrypted outside the secure enclave?
When I send a multipart email from my server to outlook.com, but have it forwarded to a Gmail account (or anywhere else), DKIM fails, with the message “body hash did not verify”, even though as far as I can tell the body look… Continue reading outlook.com breaks DKIM when forwarding for multipart messages
Hackers are able to steal 2FA SMS messages by exploiting SS7. As far as my understanding goes, this means gaining access to the SS7 system and then broadcasting a message akin to “This number is roaming on my network, send me… Continue reading Can SS7 attacks intercept SMS sent to a Google Voice number?