Scott Lowe

JANUARY 15, 2021

Welcome to Technology Short Take #136, the first Short Take of 2021! Servers/Hardware. The popular open source cryptography library known as Bouncy Castle has uncovered a severe authentication bypass vulnerability. Want to enable logging in every AWS service that exists (as of 2021)? Operating Systems/Applications.

Linux 60

Linux Firewall Open Source Vmware 60

The Verge

DECEMBER 2, 2021

Modern smartphone operating systems now do a good job of telling you when an app is accessing your camera or microphone while you’re using the device, but it’s not clear how they’d be able to inform you of a rogue app tapping into the always-on camera. The OnePlus 7 Pro hid its entire camera system in a motorized pop-up module.

System 145

System Authentication Security Video 145

Scott Lowe

MAY 27, 2022

Along those lines, one of their latest articles discusses how to achieve identity-based mutual authentication leveraging eBPF. Servers/Hardware. Operating Systems/Applications. The state of virtualization on Apple Silicon hardware has seen a few developments in recent days and weeks. network virtualization).

Virtualization 79

Virtualization Storage Programming Network 79

Scott Lowe

AUGUST 2, 2019

Servers/Hardware. spec , expected in to land in 2021. Operating Systems/Applications. I take exception to the use of “application security” in David’s title, which I (personally) take to mean something more than mutual TLS (which is more about application identity and authentication/authorization).

Storage 60

Storage Applications Programming Firewall 60

ForAllSecure

APRIL 22, 2021

In 2013, researcher Nitesh Dhanjani found that a popular brand used simple MD5 hashes of the device's MAC addresses for authentication. Problem is, MAC addresses are not great for authentication. When I started writing my first book when gadgets betray us, IoT was still known as hardware hacking, or embedded security.

Internet 52

Internet Research Security Tools 52

ForAllSecure

APRIL 22, 2021

In 2013, researcher Nitesh Dhanjani found that a popular brand used simple MD5 hashes of the device's MAC addresses for authentication. Problem is, MAC addresses are not great for authentication. When I started writing my first book when gadgets betray us, IoT was still known as hardware hacking, or embedded security.

Internet 52

Internet Research Security Tools 52

ForAllSecure

DECEMBER 17, 2021

Jonathan Knudsen from Synopsys joins The Hacker Mind to discuss his presentation at SecTor 2021 on fuzzing message brokers such as RabbitMQ and VerneMQ, both written in Erlang, demonstrating that any type of software in any environment can still be vulnerable. Vamosi: So that is a problem.

Open Source 52

Open Source Software Software Applications 52