_wldu
- Karma
- 5,420
- Created
- October 2, 2014 (11y ago)
- Submissions
- 0
- Phishing-Resistant MFA Does Not Mean Un-Phishable (linkedin.com)
- Data is a Toxic Asset (2016) (schneier.com)
- So I lost my OpenBSD FDE password (2016) (words.filippo.io)
-
Why do some large, reputable open source projects not provide digital signatures for software downloads? I thought everyone did this now, but neither Golang or Postgres sign downloads they publish. Why not?…
- The Mossad/not-Mossad security duality [pdf] (usenix.org)
- The End of Programming (mdwdotla.medium.com)
- What I learned working two FT remote jobs (youtube.com)
-
The Defcon password cracking contest begins this Friday. You'll learn more about PKC (encryption and digital signatures), PGP encrypted/signed emails, password hashes and see real-world passwords cracked by some of the…
- The Defcon Password Cracking Contest (contest-2022.korelogic.com)
- See SSL certificates as they're issued in real time (certstream.calidog.io)
- The Linux Kernel Backdoor Attempt of 2003 (freedom-to-tinker.com)
-
Has anyone written an agent for password protected Age secret keys? Something like ssh-agent or gpg-agent? I've thought of writing one (or experimenting with existing agents), but wanted to ask HN first. If you have…
- Attacks on Email Sender Authentication (blackhat.com)
- The Ultimate Persistence Bug Noreboot (blog.zecops.com)
- Dice-O-Matic (hackaday.com)
- Go – Reflections on Trusting Trust (github.com)
-
I've recently begun using Age more seriously for encryption. Currently, I distribute my public Age key via a named DNS TXT record. $ dig +short TXT age.w8rbt.org I was wondering how other HN Age users distribute their…
- There Are No Secrets (James Mickens) (youtube.com)
-
I am experimenting with using Ed25519 keys in a side hobby project. It's just a toy webapp (nothing serious). Users may register for accounts and provide their public Ed25519 keys. Later, when they wish to login, they…
- Gmail is opening and caching URLs within emails without user intervention (2019) (support.google.com)
-
Is the Hacker News source code and infrastructure public? I'm interested in web application security and performance and was hoping I could learn more about HN's source code and infrastructure.