spiridow

6 ms·

1.
How We Exploited Qodo: From a PR Comment to RCE and AWS Admin Key – Leaked Twice(kudelskisecurity.com)
1 points by spiridow 8mo ago|0 comments
2.
How we exploited CodeRabbit: From simple PR to RCE and write access on 1M repos(research.kudelskisecurity.com)
687 points by spiridow 1y ago|227 comments
3.
by spiridow 3y ago
My colleague and I recently gave a workshop about security keys where we tried to answer questions like: * Why should I use a security key? * What is it used for? * How can I choose one ? * What features should I look for? We did cover FIDO
4.
Fuzzomatic: Using AI to Automatically Fuzz Rust Projects from Scratch(research.kudelskisecurity.com)
3 points by spiridow 3y ago|0 comments
5.
by spiridow 4y ago
The "infamous" reference generators from NIST 800-22 included linear, quadratic and cubic congruential generators only. A potentially vulnerable implementation that may have used this document as a reference would probably have on
6.
by spiridow 4y ago
I find it fun that some of the stolen tokens appear to have been donated back to a Bitcoin advocate.
7.
Polynonce: A Tale of a Novel ECDSA Attack and Bitcoin Tears(research.kudelskisecurity.com)
3 points by spiridow 4y ago|0 comments
8.
Practical attacks against attribute-based encryption(research.kudelskisecurity.com)
3 points by spiridow 5y ago|0 comments
9.
Automatically Fix Security Issues at the Source(research.kudelskisecurity.com)
2 points by spiridow 5y ago|0 comments
10.
Oramfs: Resizable ORAM, Remote Storage Agnostic, Written in Rust(research.kudelskisecurity.com)
3 points by spiridow 5y ago|0 comments
11.
Advancing Rust Support in Semgrep(research.kudelskisecurity.com)
8 points by spiridow 5y ago|0 comments
12.
by spiridow 6y ago
I'm really excited to see more and more people talk about FIDO2. If you're interested about this topic, I gave a talk about it yesterday: https://news.ycombinator.com/item?id=23689606
13.
Replacing passwords with FIDO2(passthesalt.ubicast.tv)
2 points by spiridow 6y ago|0 comments
14.
FIDO2: Solving the Password Problem(research.kudelskisecurity.com)
4 points by spiridow 7y ago|1 comments
15.
by spiridow 8y ago
Have you tried keylookup? https://keylookup.kudelskisecurity.com/