Nginx Security Advisory(mailman.nginx.org)

129 points by TimWolla 2 years ago | 21 comments

Critical Cache Poisoning Vulnerability in Dnsmasq(lists.thekelleys.org.uk)

118 points by westurner 1 year ago | 95 comments

Timeline to remove DSA support in OpenSSH(lists.mindrot.org)

239 points by throw0101d 2 years ago | 143 comments

Security issues discovered in sudo-rs(lists.debian.org)

7 points by kahlonel 11 months ago | 3 comments

WireGuard for Windows Reaches v1.0(lists.zx2c4.com)

124 points by zx2c4 6 months ago | 7 comments

Nginx has moved to GitHub(mailman.nginx.org)

193 points by doctorwhat 2 years ago | 121 comments

Xray-core concealed a certificate verification bypass vulnerability(github.com)

83 points by timbill 21 days ago | 11 comments

GitHub issue in net4people/bbs where a reporter alleges Xray-core maintainers concealed a certificate verification bypass vulnerability for half a year.

Mastercard DNS error went unnoticed for years(krebsonsecurity.com)

925 points by todsacerdoti 1 year ago | 228 comments

KrebsOnSecurity article on a MasterCard DNS server misconfiguration, a typo'd nameserver domain that went unnoticed for nearly five years until a researcher registered it.

I'm being cyberattacked by Tesla, Inc(dreamstation.systems)

389 points by robinpie 1 month ago | 109 comments

Personal blog post describing persistent attack traffic in nginx logs from IPs with Host/Referer headers pointing to pool-ntp.tesla.com.

AI will make formal verification go mainstream(martin.kleppmann.com)

782 points by evankhoury 10 months ago | 394 comments

Martin Kleppmann blog post predicting that AI will bring formal verification with proof assistants like Rocq, Isabelle and Lean into mainstream software engineering.

Io_uring, kTLS and Rust for zero syscall HTTPS server(blog.habets.se)

444 points by guntars 1 year ago | 138 comments

Blog post describing building an HTTPS web server in Rust using io_uring and kernel TLS to avoid system calls on the request path.

CISA Admin Leaked AWS GovCloud Keys on GitHub(krebsonsecurity.com)

433 points by LelouBil 5 months ago | 171 comments

KrebsOnSecurity article reporting that a CISA contractor kept a public GitHub repository exposing privileged AWS GovCloud credentials and internal CISA system details.