Sign in as anyone: Bypassing SAML SSO authentication with parser differentials(github.blog)

282 points by campuscodi 1 year ago | 111 comments

Why Bcrypt Can Be Unsafe for Password Hashing?(blog.enamya.me)

11 points by enamya 11 months ago | 12 comments

The privacy nightmare of browser fingerprinting(kevinboone.me)

692 points by ingve 11 months ago | 392 comments

Kevin Boone's personal blog essay on how browser fingerprinting undermines web privacy beyond third-party cookies and de-Googling efforts.

Extracting a UART Password via SPI Flash Instruction Tracing(zuernerd.github.io)

54 points by Eduard 9 months ago | 11 comments

Passkeys are not a trap(scotthelme.co.uk)

585 points by speckx 12 days ago | 732 comments

Blog post by Scott Helme arguing that passkeys are not a lock-in trap and defending their use as a secure authentication method.

SELinux bypasses(klecko.github.io)

155 points by voxadam 2 years ago | 38 comments