Bypassing Bitlocker using a cheap logic analyzer on a Lenovo laptop(errno.fr)

306 points by brohee 3 years ago | 135 comments

SQL Injection Isn't Dead: Smuggling Queries at the Protocol Level(simonwillison.net)

74 points by ulrischa 2 years ago | 19 comments

Extracting a UART Password via SPI Flash Instruction Tracing(zuernerd.github.io)

54 points by Eduard 9 months ago | 11 comments

Wayland on OpenBSD(xenocara.org)

186 points by type0 3 years ago | 154 comments

Signing TLS handshakes inside a TPM(bschaatsbergen.com)

32 points by bschaatsbergen 1 month ago | 39 comments

Use KeePassXC to sign your Git commits(code.mendhak.com)

68 points by thunderbong 2 years ago | 20 comments

I Went to SQL Injection Court(sockpuppet.org)

1162 points by mrkurt 1 year ago | 416 comments

Blog post by Thomas Ptacek about testifying in an Illinois court case over whether public bodies can withhold database schemas from FOIA requests, and pending legislation.

AI will make formal verification go mainstream(martin.kleppmann.com)

782 points by evankhoury 10 months ago | 394 comments

Martin Kleppmann blog post predicting that AI will bring formal verification with proof assistants like Rocq, Isabelle and Lean into mainstream software engineering.

The Twitter API is now effectively unmaintained(snarfed.org)

363 points by edent 3 years ago | 461 comments

Ryan Barrett's blog post arguing the Twitter API is effectively unmaintained, citing the decline of Twitter employee posts on the developer forum.

I never authorized an integration that scans my secrets(github.com)

202 points by trvrprkr 10 days ago | 155 comments

A closed GitHub issue on the home-assistant.io repo in which a user complains that an integration scanning their secrets was enabled without authorization, calling it a privacy invasion.

There isn't an easy exploit for this PHP vulnerability(eliastaylor.com)

566 points by zkldi 5 days ago | 437 comments

Blog post arguing a newly disclosed PHP vulnerability is hard to exploit and that thousands of LLM-generated GitHub PoC exploits don't work against vanilla PHP.

AWS Bedrock to require sharing data with Anthropic for Mythos and future models

369 points by TomAnthony 4 months ago | 216 comments

Hacker News discussion of Anthropic requiring 30-day data retention for Mythos-class Claude models on AWS Bedrock, moving data outside AWS's security boundary.