Your MCU likely escaped the eMudhra intermediate CA compromise(danielmangum.com)

47 points by hasheddan 5 days ago | 28 comments

Blog post explaining why microcontroller-based IoT devices are likely unaffected by the eMudhra intermediate CA private key compromise, due to minimal pinned root CA bundles.

OpenSSH Ships on Every Mac, Linux Server and Windows. Its Creator Trusts No One(zbruceli.org)

4 points by zbruceli 20 days ago | 0 comments

Long-form blog profile of OpenSSH creator Theo de Raadt, covering his NetBSD exit, lost DARPA grant, and security-focused philosophy.

Encrypted traffic interception on Hetzner and Linode targeting Jabber service(notes.valdikss.org.ru)

637 points by f311a 3 years ago | 257 comments

Blog post detailing discovery of a TLS man-in-the-middle interception of jabber.ru XMPP servers hosted on Hetzner and Linode using Let's Encrypt certificates.

Can't trust any VPN these days(blog.orhun.dev)

68 points by orhunp_ 2 years ago | 35 comments

Why Bcrypt Can Be Unsafe for Password Hashing?(blog.enamya.me)

11 points by enamya 11 months ago | 12 comments

More than DNS: Learnings from the 14 hour AWS outage(thundergolfer.com)

147 points by birdculture 1 year ago | 43 comments

Fully homomorphic encryption and the dawn of a private internet(bozmen.io)

395 points by barisozmen 1 year ago | 183 comments

Personal blog essay by Barış Özmen explaining fully homomorphic encryption and how it could enable a truly private internet.

Is legal the same as legitimate: AI reimplementation and the erosion of copyleft(writings.hongminhee.org)

541 points by dahlia 7 months ago | 539 comments

Blog essay arguing that AI-assisted clean-room reimplementation, as with chardet 7.0 relicensed from LGPL to MIT, may be legal but erodes the legitimacy of copyleft.

Belgium legalises ethical hacking(law.kuleuven.be)

394 points by jruohonen 3 years ago | 57 comments

A KU Leuven CiTiP blog post discussing Belgium's new legal framework legalising ethical hacking and whether it threatens or helps cybersecurity.

European Commission Revives Push for Encryption Backdoors in ProtectEU Strategy(reclaimthenet.org)

375 points by nickslaughter02 1 month ago | 160 comments

Reclaim The Net article reporting that the European Commission's ProtectEU strategy revives plans for encryption backdoors under the framing of lawful access.

EU now one step away from reviving private message scanning rules(cyberinsider.com)

364 points by ggirelli 3 months ago | 140 comments

Cyber Insider news article reporting that the EU is one step away from reviving rules for scanning private messages (Chat Control).

Chat Control proposal fails again after public opposition(andreafortuna.org)

475 points by speckx 11 months ago | 131 comments

Blog post reporting that the EU Council's Chat Control proposal for scanning encrypted messages was withdrawn by the Danish presidency after public opposition.