Experimental News Clipping Site

Tag: TLS

  • Hacker News: How (not) to sign a JSON object (2019)

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.latacora.com/blog/2019/07/24/how-not-to/ Source: Hacker News Title: How (not) to sign a JSON object (2019) Feedly Summary: Comments AI Summary and Description: Yes Summary: The text provides a detailed examination of authentication methods, focusing on signing JSON objects and the complexities of canonicalization. It discusses both symmetric and asymmetric cryptographic methods, particularly emphasizing the strengths…

  • The Cloudflare Blog: Resolving a Mutual TLS session resumption vulnerability

    —

    by

    Kurt Seifried
    in

    Source URL: https://blog.cloudflare.com/resolving-a-mutual-tls-session-resumption-vulnerability/ Source: The Cloudflare Blog Title: Resolving a Mutual TLS session resumption vulnerability Feedly Summary: Cloudflare patched a Mutual TLS (mTLS) vulnerability (CVE-2025-23419) reported via its Bug Bounty Program. The flaw in session resumption allowed client certificates to authenticate across different AI Summary and Description: Yes Summary: The text discusses a recently discovered…

  • The Register: What does it mean to build in security from the ground up?

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/02/02/security_design_choices/ Source: The Register Title: What does it mean to build in security from the ground up? Feedly Summary: As if secure design is the only bullet point in a list of software engineering best practices Systems Approach As my Systems Approach co-author Bruce Davie and I think through what it means to…

  • Cloud Blog: Adversarial Misuse of Generative AI

    —

    by

    Kurt Seifried
    in

    Source URL: https://cloud.google.com/blog/topics/threat-intelligence/adversarial-misuse-generative-ai/ Source: Cloud Blog Title: Adversarial Misuse of Generative AI Feedly Summary: Rapid advancements in artificial intelligence (AI) are unlocking new possibilities for the way we work and accelerating innovation in science, technology, and beyond. In cybersecurity, AI is poised to transform digital defense, empowering defenders and enhancing our collective security. Large language…

  • Hacker News: What’s OAuth2, Anyway?

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.romaglushko.com/blog/whats-aouth2/ Source: Hacker News Title: What’s OAuth2, Anyway? Feedly Summary: Comments AI Summary and Description: Yes **Summary:** The text provides an in-depth exploration of the OAuth2 protocol, explaining its design, purpose, and various authorization flows. It delves into the common issues of credential sharing, presents alternatives like Personal Access Tokens (PATs), and discusses…

  • Krebs on Security: MasterCard DNS Error Went Unnoticed for Years

    —

    by

    Kurt Seifried
    in

    Source URL: https://krebsonsecurity.com/2025/01/mastercard-dns-error-went-unnoticed-for-years/ Source: Krebs on Security Title: MasterCard DNS Error Went Unnoticed for Years Feedly Summary: The payment card giant MasterCard just fixed a glaring error in its domain name server settings that could have allowed anyone to intercept or divert Internet traffic for the company by registering an unused domain name. The misconfiguration…

  • Hacker News: Strac (YC W22) Is Hiring Windows Engineer

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.ycombinator.com/companies/strac/jobs/TJHiaL9-senior-endpoint-security-engineer-windows Source: Hacker News Title: Strac (YC W22) Is Hiring Windows Engineer Feedly Summary: Comments AI Summary and Description: Yes Summary: The text discusses a job opportunity for a Senior Windows Endpoint Security Engineer, emphasizing the role’s relevance in designing advanced endpoint security solutions for Windows devices. This role includes critical security measures…