Snikket – On the Jabber.ru MitM Attack – Public Jabber/XMPP Service(snikket.org)

49 points by neustradamus 3 years ago | 17 comments

XMPP: The Gem of Instant Messaging(adele.pages.casa)

92 points by todsacerdoti 1 year ago | 66 comments

TCP-in-UDP Solution (eBPF)(blog.mptcp.dev)

71 points by todsacerdoti 1 year ago | 16 comments

Lanzaboote – NixOS Secure Boot(x86.lol)

86 points by evilmonkey19 5 months ago | 8 comments

PostgreSQL and FIPS Mode(peter.eisentraut.org)

65 points by chmaynard 2 years ago | 23 comments

Mullvad VPN and the Tor Project Team Up to Release the Mullvad Browser(mullvad.net)

38 points by archb 3 years ago | 3 comments

New Linux udisks flaw lets attackers get root on major Linux distros(bleepingcomputer.com)

336 points by smig0 1 year ago | 227 comments

BleepingComputer news article about a udisks vulnerability that lets attackers gain root privileges on major Linux distributions.

Io_uring, kTLS and Rust for zero syscall HTTPS server(blog.habets.se)

444 points by guntars 1 year ago | 138 comments

Blog post describing building an HTTPS web server in Rust using io_uring and kernel TLS to avoid system calls on the request path.

Belgium legalises ethical hacking(law.kuleuven.be)

394 points by jruohonen 3 years ago | 57 comments

A KU Leuven CiTiP blog post discussing Belgium's new legal framework legalising ethical hacking and whether it threatens or helps cybersecurity.

I'm being cyberattacked by Tesla, Inc(dreamstation.systems)

389 points by robinpie 1 month ago | 109 comments

Personal blog post describing persistent attack traffic in nginx logs from IPs with Host/Referer headers pointing to pool-ntp.tesla.com.

RCE Vulnerability in QBittorrent(sharpsec.run)

352 points by udev4096 2 years ago | 173 comments

Security blog post disclosing that qBittorrent's DownloadManager ignored SSL certificate errors for 14 years, enabling remote code execution, fixed in version 5.0.1.

Someone at BrowserStack is leaking users' email addresses(shkspr.mobi)

329 points by m_km 6 months ago | 88 comments

Blog post by Terence Eden describing how a unique email address he gave BrowserStack ended up with a third party via Apollo.io, implying a leak.