Collaborate Disseminate
The Raspberry Pi Foundation had their new RP2350 chip audited by Hextree.io, and now, both companies want to see if you can hack it. Just to prove that they’re serious, …read more Continue reading Can You Hack The RP2350? There’s $10,000 On The Line
You may have heard some scary news about RISC-V CPUs. There’s good news, and bad news, and the whole thing is a bit of a cautionary tale. GhostWrite is a …read more Continue reading This Week in Security: GhostWrite, Localhost, and More
First up this week is the story of EvilVideo, a clever telegram exploit that disguises an APK as a video file. The earliest record we have of this exploit is …read more Continue reading This Week in Security: EvilVideo, Crowdstrike, and InSecure Boot
Hacking — at least the kind where you’re breaking into stuff — is very much a learn-by-doing skill. There’s simply no substitute for getting your hands dirty and just trying …read more Continue reading Hacking an IoT Camera Reveals Hard-Coded Root Password
In the past week, AT&T has announced an absolutely massive data breach. This is sort of a multi-layered story, but it gives me an opportunity to use my favorite piece …read more Continue reading This Week in Security: Snowflake, The CVD Tension, and Kaspersky’s Exit — And Breaking BSOD
A troubling report from the Belgian consumer protection group Testaankoop: several models of Velop Pro routers from Linksys were found to be sending WiFi configuration data out to a remote …read more Continue reading Linksys Velop Routers Caught Sending WiFi Creds in the Clear
Cryptography ain’t easy. Seemingly small details like how many times a computationally intensive loop runs can give the game away. [Lord Feistel] gives us a demo of how this could …read more Continue reading Undo Arduino Encryption with an Oscilloscope
The RADIUS authentication scheme, short for “Remote Authentication Dial-In User Service”, has been widely deployed for user authentication in all sorts of scenarios. It’s a bit odd, in that individual …read more Continue reading This Week in Security: Blast-RADIUS, Gitlab, and Plormbing
Ticketmaster is having a rough time lately. Recently, a hacker named [Conduition] managed to reverse-engineer their new “safe” electronic ticket system. Of course, they also had the recent breach where …read more Continue reading Ticketmaster SafeTix Reverse-Engineered
The big news this week was that OpenSSH has an unauthorized Remote Code Execution exploit. Or more precisely, it had one that was fixed in 2006, that was unintentionally re-introduced …read more Continue reading This Week in Security: Hide Yo SSH, Polyfill, and Packing It Up