how to eat food http://www.howtoeatfood.com/u/jaw/sec 2023-03-19T10:12:06-04:00 how to eat food Home · Wiki · Kali Linux / kali-purple / Documentation · GitLab 0983a5ccc228b618a3ce3de43f80b414 2023-03-19T10:12:06-04:00 2023-03-19T10:12:06-04:00 jaw Home · Wiki · Kali Linux / kali-purple / Documentation · GitLab A movement to make enterprise grade security accessible to everyone. Cookie stealing: the new perimeter bypass – Sophos News 49519d02fe0aeae6802bb032280368c0 2022-10-05T15:50:11-04:00 2022-10-05T15:50:11-04:00 jaw Cookie stealing: the new perimeter bypass – Sophos News Why Doesn’t Your CI Pipeline Have Security Bug Testing? 3b454fbfb4a14d3b31df45ca200dedc4 2022-04-10T23:02:07-04:00 2022-04-10T23:02:07-04:00 jaw Why Doesn’t Your CI Pipeline Have Security Bug Testing? lix2ng/qdsv: Full qDSA on all Cortex-M cores. M0, M3, M4 etc. 8c29c36df2406852b924ac7caee3bfbd 2021-04-02T12:50:24-04:00 2021-04-02T12:50:24-04:00 jaw lix2ng/qdsv: Full qDSA on all Cortex-M cores. M0, M3, M4 etc. Software · Joost Renes c6827b1c94fed9c09e23130f927028eb 2021-04-02T12:41:58-04:00 2021-04-02T12:41:58-04:00 jaw Software · Joost Renes Curve9767 and Fast Signature Verification – NCC Group Research 64948ab45961f1b4d46b0815e0deb401 2021-04-02T12:07:48-04:00 2021-04-02T12:07:48-04:00 jaw Curve9767 and Fast Signature Verification – NCC Group Research mupq/pqm4: Post-quantum crypto library for the ARM Cortex-M4 b92a37f98f0f99d0cf4b07bf8f3dfa07 2021-04-01T14:31:13-04:00 2021-04-01T14:31:13-04:00 jaw mupq/pqm4: Post-quantum crypto library for the ARM Cortex-M4 Sick of spending time on Auth, we built an open source 'Stripe for Auth' | Hacker News 3d62ba17ce244d10905d9af8e46f3e45 2020-12-18T11:15:11-05:00 2020-12-18T11:15:11-05:00 jaw Sick of spending time on Auth, we built an open source 'Stripe for Auth' | Hacker News Google Online Security Blog: New research: How effective is basic account hygiene at preventing hijacking 71fe67fa16ca148ddcb469dbfbcb4904 2019-05-21T08:58:47-04:00 2019-05-21T08:58:47-04:00 jaw Google Online Security Blog: New research: How effective is basic account hygiene at preventing hijacking Our research shows that simply adding a recovery phone number to your Google Account can block up to 100% of automated bots, 99% of bulk phishing attacks, and 66% of targeted attacks that occurred during our investigation. ARTEMIS: Real-Time Detection and Automatic Mitigation for BGP Prefix Hijacking a7f7cafe34d987c7971b4d5df06cd68b 2019-02-08T15:38:27-05:00 2019-02-08T15:38:27-05:00 jaw ARTEMIS: Real-Time Detection and Automatic Mitigation for BGP Prefix Hijacking Let’s talk about PAKE – A Few Thoughts on Cryptographic Engineering 0acc3f535fddcf9d36ff2ea6a3ebd9a3 2018-10-19T23:59:17-04:00 2018-10-19T23:59:17-04:00 jaw Let’s talk about PAKE – A Few Thoughts on Cryptographic Engineering A PAKE protocol, first introduced by Bellovin and Merritt, is a special form of cryptographic key exchange protocol. Key exchange (or “key agreement”) protocols are designed to help two parties (call them a client and server) agree on a shared key, using public-key cryptography. Librem Key – Purism 1aee3752e8cccfbe5bb1fc7659be2c21 2018-09-23T09:46:57-04:00 2018-09-23T09:46:57-04:00 jaw Librem Key – Purism SC4 HSM ce355d6cac1b9e388253a46856d36c6d 2018-09-12T21:38:02-04:00 2018-09-12T21:38:02-04:00 jaw SC4 HSM Krypton | Easy and secure web logins 43745d5ee24967490590e46042f7e2ec 2018-08-30T14:00:38-04:00 2018-08-30T14:00:38-04:00 jaw Krypton | Easy and secure web logins Titan Security Key Bundle, BT & NFC FIDO U2F - Google Store ef9beae845c3edbcdc344cb1eaac51ac 2018-08-30T13:59:46-04:00 2018-08-30T13:59:46-04:00 jaw Titan Security Key Bundle, BT & NFC FIDO U2F - Google Store How To Turn Loaded Dice into Fair Coins 9098f29cb6e647ce850865941e8f1888 2018-08-23T13:22:51-04:00 2018-08-23T13:22:51-04:00 jaw How To Turn Loaded Dice into Fair Coins U2F Zero b95347c885a381fbff6c2e95bc20bce5 2017-12-06T18:42:13-05:00 2017-12-06T18:42:13-05:00 jaw U2F Zero A secure and open source 2 factor authentication token. Designed to be affordable and reliable Multicollisions in iterated hash functions. Applications to cascaded constructions. 01b5066bb7c94a95dfb862757d47b729 2017-04-26T14:09:32-04:00 2017-04-26T14:09:32-04:00 jaw Multicollisions in iterated hash functions. Applications to cascaded constructions. Is the concatenation of two independent hash values more secure than a single hash-value? tl;dr: this construction is in fact insecure NIST’s new password rules – what you need to know – Naked Security 2df6c6c1f0867473fea64df8958681aa 2017-03-10T09:19:35-05:00 2017-03-10T09:19:35-05:00 jaw NIST’s new password rules – what you need to know – Naked Security What every Browser knows about you 5c6946ac849a67224d96d9bacb55190e 2016-12-21T09:15:16-05:00 2016-12-21T09:15:16-05:00 jaw What every Browser knows about you The Security of Modern Password Expiration 13d1a192cb01b1d89647a1295a5f66d0 2016-08-04T09:15:21-04:00 2016-08-04T09:15:21-04:00 jaw The Security of Modern Password Expiration the historical success of collision attacks does not imply a danger of pre-image attacks 037040ff24776c798dbf3ac86fcdcb41 2016-02-14T11:50:02-05:00 2016-02-14T11:50:02-05:00 jaw the historical success of collision attacks does not imply a danger of pre-image attacks The main result of this investigation is that “the historical success of collision attacks does not imply a danger of pre-image attacks”. crypt-dev - entropy loss with narrow-pipe iterated hashes 09a966ed77f1ba4aebd70532afdb846f 2016-01-22T15:20:21-05:00 2016-01-22T15:20:21-05:00 jaw crypt-dev - entropy loss with narrow-pipe iterated hashes AES-CBC + Elephant diffuser A Disk Encryption Algorithm for Windows Vista fe76f09a442e170c4beac28b9d48053f 2016-01-10T00:07:26-05:00 2016-01-10T00:07:26-05:00 jaw AES-CBC + Elephant diffuser A Disk Encryption Algorithm for Windows Vista The Analysis of the Windows Vista Disk Encryption Algorithm 46ba914308bb54b5b830506380b8b80d 2015-12-20T16:55:32-05:00 2015-12-20T16:55:32-05:00 jaw The Analysis of the Windows Vista Disk Encryption Algorithm Detectify Labs 6686456913b7bdcdad7c36961f5fd917 2015-11-21T11:06:38-05:00 2015-11-21T11:06:38-05:00 jaw Detectify Labs An Open Letter to Developers Everywhere (About Cryptography) b0477998503d7a21bc916cf03dbd2fc6 2015-11-19T14:34:19-05:00 2015-11-19T14:34:19-05:00 jaw An Open Letter to Developers Everywhere (About Cryptography) awslabs/s2n 6e5f4673af0181fcd57ec209e624445f 2015-06-30T12:42:39-04:00 2015-06-30T12:42:39-04:00 jaw awslabs/s2n s2n is a C99 implementation of the TLS/SSL protocols that is designed to be simple, small, fast, and with security as a priority. KeySweeper 983beec34b28395e857b677cfb4fbf16 2015-01-13T09:23:06-05:00 2015-01-13T09:23:06-05:00 jaw KeySweeper Secure Secure Shell 5c1e135ad70e56a9123c269b146e53eb 2015-01-08T09:15:43-05:00 2015-01-08T09:15:43-05:00 jaw Secure Secure Shell How To Safely Store A Password | codahale.com c2448e9e06afaadbf96ef3d3cddf265a 2014-09-19T12:35:36-04:00 2014-09-19T12:35:36-04:00 jaw How To Safely Store A Password | codahale.com Stop using unsafe keyed hashes, use HMAC | root labs rdist 5f7c020c02319b5ab4d23d8603ba9a7e 2014-09-19T12:03:29-04:00 2014-09-19T12:03:29-04:00 jaw Stop using unsafe keyed hashes, use HMAC | root labs rdist Two-Factor Authentication Made Easy - Duo Security 070bb226a9c0f2001bc8b9068166844e 2014-06-04T22:02:42-04:00 2014-06-04T22:02:42-04:00 jaw Two-Factor Authentication Made Easy - Duo Security IOS Security cae60935c430ab7700995d5f6a90b726 2014-03-04T09:20:26-05:00 2014-03-04T09:20:26-05:00 jaw IOS Security Security Engineering - A Guide to Building Dependable Distributed Systems 6a48c5f427889d59487e7b17bc433096 2014-02-27T12:50:46-05:00 2014-02-27T12:50:46-05:00 jaw Security Engineering - A Guide to Building Dependable Distributed Systems SRP: Design Specifications f64c525f0fdd4c381e56bfdd99694586 2014-02-12T00:43:03-05:00 2014-02-12T00:43:03-05:00 jaw SRP: Design Specifications SRP is the newest addition to a new class of strong authentication protocols that resist all the well-known passive and active attacks over the network. SRP borrows some elements from other key-exchange and identification protcols and adds some subtle modifications and refinements. The result is a protocol that preserves the strength and efficiency of the EKE family protocols while fixing some of their shortcomings. Open WhisperSystems >> Open WhisperSystems 9b5ee1f545d42b2142cbb00e011bfd98 2014-01-26T22:38:02-05:00 2014-01-26T22:38:02-05:00 jaw Open WhisperSystems >> Open WhisperSystems RedPhone provides end-to-end encryption for your calls, securing your conversations so that nobody can listen in. CCC-TV - 30C3 (1/4) 9bd703ca13541106e7e7d6f80cca829b 2014-01-26T22:36:46-05:00 2014-01-26T22:36:46-05:00 jaw CCC-TV - 30C3 (1/4) Ori File System e7ffd6544119a8c429c530da519d89a3 2014-01-25T16:34:20-05:00 2014-01-25T16:34:20-05:00 jaw Ori File System Ori is a distributed file system built for offline operation and empowers the user with control over synchronization operations and conflict resolution. We provide history through light weight snapshots and allow users to verify the history has not been tampered with. Through the use of replication instances can be resilient and recover damaged data from other nodes. On Covert Acoustical Mesh Networks in Air - Volume 8, No. 11, November 2013 - Journal of Communications eb412697121126d1e3bbff84fb65fb87 2013-11-26T09:20:01-05:00 2013-11-26T09:20:01-05:00 jaw On Covert Acoustical Mesh Networks in Air - Volume 8, No. 11, November 2013 - Journal of Communications Authy de3d9223f55b8eb216fbb9fd12916769 2013-11-22T15:36:54-05:00 2013-11-22T15:36:54-05:00 jaw Authy Authy is the first strong authentication platform built for large-scale applications and built with the end-user in mind. With Authy you get all the benefits of strong authentication with the simplicity that you've always wanted for your customers. Analysis of the HTTPS Certificate Ecosystem∗ 4bc66e96b4e64da047d9afef4c361eb5 2013-11-16T10:29:29-05:00 2013-11-16T10:29:29-05:00 jaw Analysis of the HTTPS Certificate Ecosystem∗ Secure Mobile Apps and Open-Source Code for a Better Tomorrow 1d94a53572bad11dde1c387b4dc9046a 2013-09-05T09:14:55-04:00 2013-09-05T09:14:55-04:00 jaw Secure Mobile Apps and Open-Source Code for a Better Tomorrow The Guardian Project is about more than just apps. All of our code is open-source in order to move the collective ball forward in mobile security efforts. In addition we are building developer-focused libraries, tools and source code for you to add security-oriented features and capabilities to your own apps. ZMap · The Internet Scanner 61893c49b0dd976d36d2147cbd637909 2013-08-20T09:13:53-04:00 2013-08-20T09:13:53-04:00 jaw ZMap · The Internet Scanner Know your Enemy: Tracking Botnets 850176ece69a99e5cc006745d392edee 2013-08-14T17:18:21-04:00 2013-08-14T17:18:21-04:00 jaw Know your Enemy: Tracking Botnets Tarnovsky Deconstruct Processor - YouTube 140d6201371116400c5b784953af0485 2013-03-05T15:08:50-05:00 2013-03-05T15:08:50-05:00 jaw Tarnovsky Deconstruct Processor - YouTube FST-01 - Wiki 8d58c1a205b3e5818255d54dc921d601 2013-02-25T20:51:30-05:00 2013-02-25T20:51:30-05:00 jaw FST-01 - Wiki GnuK 99835c4624d24a3c4e0821dc397891a4 2013-02-25T20:44:38-05:00 2013-02-25T20:44:38-05:00 jaw GnuK Gnuk is an implementation of USB cryptographic token for GNU Privacy Guard. Gnuk supports OpenPGP card protocol version 2, and it runs on STM32F103 processor. Easier to Get Infected With Malware on 'Good Sites' Than on Shady Sites, Cisco Says | SecurityWeek.Com 086be6fe92828a0f728a7723904e94e9 2013-02-01T09:18:41-05:00 2013-02-01T09:18:41-05:00 jaw Easier to Get Infected With Malware on 'Good Sites' Than on Shady Sites, Cisco Says | SecurityWeek.Com dns-fuzz NSE Script 379dd7681c84058ab7356eccf132d4e4 2013-01-19T10:47:32-05:00 2013-01-19T10:47:32-05:00 jaw dns-fuzz NSE Script