Three RCEs in Ilias Learning Management System(srlabs.de)

20 points by hack223 9 months ago | 3 comments

Debugging Azure Networking for Elastic Cloud Serverless(elastic.co)

10 points by bumblehean 1 year ago | 1 comments

Encrypted traffic interception on Hetzner and Linode targeting Jabber service(notes.valdikss.org.ru)

637 points by f311a 3 years ago | 257 comments

Blog post detailing discovery of a TLS man-in-the-middle interception of jabber.ru XMPP servers hosted on Hetzner and Linode using Let's Encrypt certificates.

Making Magic Leap past Nvidia's secure bootchain and breaking Tesla Autopilots(fahrplan.events.ccc.de)

68 points by rguiscard 9 months ago | 16 comments

The security paradox of local LLMs(quesma.com)

117 points by jakozaur 1 year ago | 77 comments

NixOS and reproducible builds could have detected the xz backdoor(luj.fr)

260 points by birdculture 1 year ago | 112 comments