Nusyne · HackerTrans

Nusyne

no profile record

Submissions

Getting the maximum of your C compiler, for security

airbus-seclab.github.io

95 pointsby Nusyne5 anni fa9 comments

QEMU Internals

airbus-seclab.github.io

323 pointsby Nusyne5 anni fa33 comments

On the fly virtualization with Cappsule

blog.quarkslab.com

1 pointsby Nusyne10 anni fa0 comments

Cappsule: hypervisor to isolate desktop app inside VMs

cappsule.github.io

4 pointsby Nusyne10 anni fa0 comments

Reverse engineering an encrypted external HDD [pdf]

hardwear.io

3 pointsby Nusyne11 anni fa0 comments

Unfixable vulnerability in yubikey neo openpgp applet

forum.yubico.com

4 pointsby Nusyne11 anni fa1 comments

When Censorship Backfires: How Blue Coat Silenced a Security Researcher

forbes.com

1 pointsby Nusyne11 anni fa0 comments

comments

Nusyne

6 anni fadiscuss

There are examples in the author's presentation at SSTIC '19 -- in french only https://www.sstic.org/2019/presentation/GUSTAVE_FuzzItLikeIt...

Nusyne

7 anni fadiscuss

List of publications: https://who.paris.inria.fr/Leo.Perrin/#kuz-final Related article: https://tosc.iacr.org/index.php/ToSC/article/view/7405/6577 & presentation https://www.youtube.com/watch?v=7knu0mIzlnU&t=11325s by one of the researchers mentioned in the article

Nusyne

11 anni fadiscuss

Typed the following :

  hello
  -----
  hello

a scroll bar appeared, could not see first line anymore without scrolling up.

Nusyne

11 anni fadiscuss

TextSecure is either Text (SMS, which are not encrypted), OR secure (data). Not both simultaneously.

Nusyne

11 anni fadiscuss

Relevant fixes have been commited to OpenBSD

https://marc.info/?l=openbsd-cvs&m=142677386615089&w=2

https://marc.info/?l=openbsd-cvs&m=142677382215078&w=2

https://marc.info/?l=openbsd-cvs&m=142677372515025&w=2

https://marc.info/?l=openbsd-cvs&m=142677368815015&w=2

Nusyne

11 anni fadiscuss

Duplicity allows using gpg in a rather painless way:

  PASSPHRASE="myBackupGpgKeyPassphrase" duplicity ...

I use one gpg key per machine for backups, so having the passphrase in cleartext on that machine is not much of a problem.

Nusyne

11 anni fadiscuss

Attic seems good. Its encryption makes me uneasy (https://github.com/jborg/attic/blob/master/attic/key.py), and I don't feel qualified to review it:

  * use of pkbdf2(passphrase)[0:32] as encryption key?
  * is AES correctly used? there are many pitfalls

I would be much more comfortable with it using gpg for encryption.