aleksejs

4 ms·

31.
by aleksejs 10mo ago
Most of these attack vectors have been known for 10 years, and yet researchers keep finding bugs in major implementations to this day. Here's one from last week: https://portswigger.net/research/the-fragile-lock &
32.
by aleksejs 10mo ago
> God forbid you have an accident and you end up at the wrong hospital when the one down the road is in-network but the one they took you to is out-of-network and you wake up owing thousands of dollars. If you examine the statement of be
33.
by aleksejs 1y ago
> The focus on maps and gemini is hilarious. The first is literally the anti-use case, It reminded me of the Wii U Street View app and the interview with its developers (at https://iwataasks.nintendo.com/interviews/w
34.
by aleksejs 1y ago
I'm not sure I follow your point: how would a web service provider use a user's TPM in a pre-DBSC world? "Use hardware based attestation to tie the session token/cookie to the device" is pretty much exactly what DBS
35.
by aleksejs 1y ago
This is neat! We're building something similar at work, but instead of hand-rolling specific checks (like "first signature must be direct child of Response" in samlshield) we're fingerprinting the structure of the SAML r
36.
by aleksejs 5y ago
> For a high value account, a motivated attacker can and will continue at this point. (And if you don't consider your accounts high value, why are you bothering with 2FA?). Because credential stuffing is highly lucrative, even when
37.
by aleksejs 5y ago
Duolingo | Pittsburgh, PA, USA | ONSITE, VISA | Security Engineer Duolingo is the most popular language-learning application in the world, with over 500 million users and over half a billion exercises completed daily. Beyond our core learni
38.
by aleksejs 5y ago
Duolingo | Pittsburgh, PA, USA | ONSITE, VISA | Security Engineer Duolingo is the most popular language-learning application in the world, with over 500 million users and over half a billion exercises completed daily. Beyond our core learni
39.
by aleksejs 5y ago
Duolingo | Pittsburgh, PA, USA | ONSITE, VISA | Security Engineer Duolingo is the most popular language-learning application in the world, with over 500 million users and over half a billion exercises completed daily. Beyond our core learni
40.
Leaking silhouettes of cross-origin images using a timing side channel(blog.mozilla.org)
2 points by aleksejs 6y ago|0 comments