/explore
|
You are here 
|
dgl.cx | ||
| | | | |
dgroshev.com
[AI summary] The author discusses the challenges and solutions for implementing a secure, privacy-preserving BitTorrent connectivity testing tool using cryptographic techniques like asymmetric encryption and HMAC to protect user IP addresses. |
|
| | | | | ||
| | | | |
blog.hboeck.de
[AI summary] A technical deep-dive into a security vulnerability in Owncloud's server-side encryption module, specifically analyzing how malleable Cipher Feedback (CFB) mode allowed an attacker to inject arbitrary DOS executable code into shared Windows files. |
|
| | | | | ||
| | | | |
pboyd.io
Here's a fun list to look through: Dumb Password Rules. Most of the rules seem arbitrary, like only allowing digits, but some hint at deeper problems. For instance, preventing single-quotes. They aren't inserting passwords into a database without a SQL placeholder, right? Nearly every site on that list has a needlessly short maximum password size. If they're storing passwords correctly, there's no need for this. This post will go through a few bad ways to store a password and you can see what I mean.... |
|
| | | | | ||
| | | | |
www.paragonie.com
A deep dive into preventing chosen-ciphertext (e.g. padding oracle) attacks against RSA in custom encrypted transport protocols. |
|
| | | |||
