Collaborate Disseminate
The RADIUS authentication scheme, short for “Remote Authentication Dial-In User Service”, has been widely deployed for user authentication in all sorts of scenarios. It’s a bit odd, in that individual …read more Continue reading This Week in Security: Blast-RADIUS, Gitlab, and Plormbing
Ticketmaster is having a rough time lately. Recently, a hacker named [Conduition] managed to reverse-engineer their new “safe” electronic ticket system. Of course, they also had the recent breach where …read more Continue reading Ticketmaster SafeTix Reverse-Engineered
The big news this week was that OpenSSH has an unauthorized Remote Code Execution exploit. Or more precisely, it had one that was fixed in 2006, that was unintentionally re-introduced …read more Continue reading This Week in Security: Hide Yo SSH, Polyfill, and Packing It Up
The big news this week was that OpenSSH has an unauthorized Remote Code Execution exploit. Or more precisely, it had one that was fixed in 2006, that was unintentionally re-introduced …read more Continue reading This Week in Security: Hide Yo SSH, Polyfill, and Packing It Up
As long as we get to make our own network security tools, why not make them look cute? Netgotchi may not be much more than an ESP8266 running network scans and …read more Continue reading A Cute Sentry Scans Your Net for Scullduggery
The hot news this week is that Kaspersky is banned in the USA. More specifically, Kaspersky products will be banned from sale in the US starting on September 29. This …read more Continue reading This Week in Security: Kaspersky Ban, Project Naptime, and More
It’s a great joke, and like all great jokes it makes you think. [Søren Fuglede Jørgensen] managed to cram a 15 M parameter large language model into a completely valid …read more Continue reading Llama.ttf is AI, in a Font
[Jason Dookeran] reminded us of something we don’t like to think about. Your printer probably adds barely noticeable dots to everything you print. It does it on purpose, so that …read more Continue reading In Future, Printer Documents You
There’s a popular Sysadmin meme that system problems are “always DNS”. In the realm of security, it seems like “it’s always Unicode“. And it’s not hard to see why. Unicode …read more Continue reading This Week in Security: Unicode Strikes Again, Trust No One (Redditor), and More
You want to pass TCP traffic from one computer to another, but there’s a doggone firewall in the way. Can they both see a shared file? Turns out, that’s all …read more Continue reading Tunneling TCP By File Server