shellcromancer

5 ms·

1.
by shellcromancer 3mo ago
Probably obvious but still omitted in the OpenAI post: chips are being made by TSMC [1]. Wasn't sure if Intel got it. 1. https://www.investing.com/news/stock-market-news/openai-unve...
2.
by shellcromancer 8mo ago
> Additionally, the XML returned by the update server is now singed (XMLDSig) The latest and greatest cryptography powering everyone’s favorite SAML-based single-sign on.
3.
Credential Exchange Format publishes version 1.0(fidoalliance.org)
3 points by shellcromancer 1y ago|0 comments
4.
by shellcromancer 1y ago
The FIDO Alliance (who wrote the WebAuthn spec with the W3C) has a draft specification for a format (Credential Exchange Format) and protocol (Credential Exchange Protocol) for migrating passkeys and other credentials [1]. I don't thin
5.
by shellcromancer 2y ago
Security Cryptography Whatever’s take on this week SAML non-sense will be fun.
6.
Passkey Central(passkeycentral.org)
3 points by shellcromancer 2y ago|0 comments
7.
by shellcromancer 2y ago
Fantastic research by NinjaLab. One of the most interesting parts to me from Yubico's advisory is that the Webauthn protocols attestation [1] is also defeated by this local cloning. Could the protocol have been better designed to resis
8.
by shellcromancer 3y ago
> The where operator will validate that the syntax is valid, but it will pass unknown function calls through to the underlying database. In RunReveal's case, we use Clickhouse under the hood, so if we wanted to do a case-insensitive
9.
by shellcromancer 3y ago
Shameless self-plug for an alternative tax that affects operational security and reliability teams: https://audit-logs.tax Understanding how your breach impacts me, or detecting how the abuse of your tools are used to impact our
10.
Coinbase disrupts social engineering attack(coinbase.com)
1 points by shellcromancer 4y ago|0 comments
11.
by shellcromancer 4y ago
Regardless of where it's rolled out first, this is a good example of reducing the attack surface from remote exploits (which China is known to have and use at contests like Tianfu Cup). Seems in line with changes they made with "L