Security / Privacy (2024-09)

Meet DAVE: Discord’s new end-to-end encryption for audio and video (discord.com)

~ 35 pts 17 comments by unknown Sep 18, 2024 ~tech Security / Privacy Internet / Digital Culture thread

Meet DAVE: Discord’s New End-to-End Encryption for Audio & Video (discord.com)

L 21 pts 12 comments by gmem Sep 17, 2024 cryptography Security / Privacy thread

Update on Native Matrix interoperability with WhatsApp (matrix.org)

L 32 pts 8 comments by gwil Sep 17, 2024 lawprivacy Security / Privacy thread

Cellguard: Analyze and observe cellular networks to detect surveillance (cellguard.seemoo.de)

L 13 pts 1 comments by freddyb Sep 16, 2024 mobilesecurity Security / Privacy thread

Race conditions in Linux Kernel perf events (binarygecko.com)

L 3 pts 0 comments by fro Sep 16, 2024 linuxsecurity Systems / Low-Level / OS Security / Privacy thread

Fuzzers vs Games (addisoncrump.info)

L 3 pts 0 comments by louismerlin Sep 15, 2024 security Security / Privacy thread

Inside Elon Musk’s mushrooming security apparatus (nytimes.com)

~ 8 pts 2 comments by unknown Sep 14, 2024 ~tech Security / Privacy Internet / Digital Culture thread

Web Security Basics (with htmx) (htmx.org)

L 29 pts 0 comments by klingtnet Sep 14, 2024 securityweb Web Development Security / Privacy thread

pyrtls: rustls-based modern TLS for Python (github.com)

L 8 pts 3 comments by itamarst Sep 13, 2024 pythonrustsecurity Systems / Low-Level / OS Programming (General)Programming Languages / CS Theory Security / Privacy thread

Zero-Click Calendar invite — Critical zero-click vulnerability chain in macOS (mikko-kenttala.medium.com)

L 8 pts 3 comments by fro Sep 13, 2024 macsecurity Web Development Security / Privacy Apple / macOS / iOS thread

FreeBSD 11.0+ Kernel LPE: Userspace Mutexes (umtx) Use-After-Free Race Condition (accessvector.net)

L 11 pts 7 comments by fro Sep 13, 2024 freebsdsecurity Systems / Low-Level / OS Security / Privacy thread

Specification and Model-checking of the ZKsync Governance Protocol (protocols-made-fun.com)

L 2 pts 0 comments by bugarela Sep 13, 2024 cryptographyformalmethodssecurity Programming Languages / CS Theory Security / Privacy thread

Friends don’t let friends reuse nonces (blog.trailofbits.com)

L 18 pts 8 comments by crazyloglad Sep 13, 2024 cryptographysecurity Security / Privacy thread

Microsoft Windows MSI Installer - Repair to SYSTEM - A detailed journey (sec-consult.com)

L 4 pts 1 comments by crazyloglad Sep 13, 2024 security Security / Privacy thread

Vulnerability Disclosure of Feeld (dating app) (fortbridge.co.uk)

L 31 pts 12 comments by halosghost Sep 12, 2024 security Security / Privacy thread

GoFetch: Will people ever learn? (microkerneldude.org)

L 15 pts 5 comments by ethoh Sep 12, 2024 compscicryptographyhardwaresecurity Programming Languages / CS Theory Security / Privacy Maker / DIY / Hardware thread

The Mines of Kakadûm (bughunters.google.com)

L 1 pts 0 comments by freddyb Sep 11, 2024 security Security / Privacy thread

We spent $20 to achieve RCE and accidentally became the admins of .MOBI (labs.watchtowr.com)

L 94 pts 8 comments by dzwdz Sep 11, 2024 security Security / Privacy thread

The “email is authentication” pattern (rubenerd.com)

L 21 pts 15 comments by acatton Sep 10, 2024 emailsecurity Security / Privacy Internet / Digital Culture thread

OpenSSH Keystroke Obfuscation Bypass (crzphil.github.io)

L 22 pts 8 comments by zk Sep 10, 2024 security Security / Privacy thread

Signatures are like backups (alexgaynor.net)

L 22 pts 1 comments by ubernostrum Sep 10, 2024 cryptographysecurity Security / Privacy thread

Deep Dive into RCU Race Condition: Analysis of TCP-AO UAF (CVE-2024–27394) (blog.theori.io)

L 1 pts 0 comments by fro Sep 9, 2024 linuxsecurity Systems / Low-Level / OS Security / Privacy thread

Data security help - SOC2ish

~ 12 pts 6 comments by unknown Sep 9, 2024 ~tech Security / Privacy Internet / Digital Culture thread

Nix 2.24+ is vulnerable to (remote) privilege escalation (puckipedia.com)

L 84 pts 75 comments by msanft Sep 9, 2024 nixsecurity Systems / Low-Level / OS Security / Privacy thread

Nobody Cares About Security (adatosystems.com)

L 25 pts 21 comments by Vaelatern Sep 9, 2024 security Security / Privacy thread

The Insecurity of Debian (unix.foo)

L 17 pts 20 comments by okapi Sep 9, 2024 security Security / Privacy thread

Build a simple fuzzer: Part 1 (carstein.github.io)

L 4 pts 2 comments by msanft Sep 9, 2024 security Security / Privacy thread

Baiting the bot (conspirator0.substack.com)

L 13 pts 2 comments by pushcx Sep 8, 2024 securityvibecoding AI / Machine Learning Security / Privacy thread

Cracking an old ZIP file to help open source the ANC's "Operation Vula" secret crypto code (blog.jgc.org)

L 24 pts 1 comments by EvanHahn Sep 7, 2024 historicalsecurity Programming (General)Security / Privacy Culture / Philosophy / History / Reading thread

Navy chiefs conspired to get themselves illegal warship Wi-Fi (navytimes.com)

L 38 pts 24 comments by voytec Sep 7, 2024 hardwaresecurity Security / Privacy Maker / DIY / Hardware thread

also: [ArsTechnica](https://arstechnica.com/security/2024/09/sailors-hid-an-unauthorized-starlink-on-the-deck-of-a-us-warship-and-lied-about-it/)