The Privacy Tax - How Tracking and Hacking Affect Disabled People, and What We Can Do About It
Explores surveillance's impact on disabled individuals, discussing privacy challenges, data security risks, and open-source solutions to reduce tracking and hacking vulnerabilities for people with disabilities.
A Journey to Performance - Using Rust in Mercurial
Explore Rust's impact on Mercurial's performance, focusing on 'hg status' optimization. Learn about interoperability, data structures, and version control internals for significant speed improvements.
How We Opened Up Our Private Museum Collection API
Explore ACMI's public API for museum collections, covering architecture, security, performance, and content licensing, with insights on potential future applications.
When Things Go Wrong and How We Fix Them
Live hardware hacking session demonstrating problem-solving techniques for project setbacks, offering insights into troubleshooting and fixing issues in real-time.
Avoiding DNS Pain
Explore DNS maturity assessment and management improvement techniques using tools like DNSControl to enhance security, resilience, and operational efficiency of this critical system.
Velociraptor - Dig Deeper in Linux
Explore Velociraptor, an open-source DFIR framework for efficient incident response and threat hunting in large networks. Learn to leverage VQL for powerful Linux security monitoring and automation.
Made to Measure - The Biases and Boundaries of Biometrics
Exploring biometrics' history, ethics, and societal impact, from phrenology to modern facial recognition, highlighting the need for responsible use of body measurement technologies.
Why Your Encrypted Database Isn't Secure - Practical Attacks Against Encrypted OSS Databases
Explore practical attacks on encrypted databases, their limitations, and mitigation strategies. Learn about threat modeling and alternative approaches to enhance data security while maintaining performance and usability.
The Security Community Expressed As Too Many Venn Diagrams
Explore the complex relationships within the Open Source security community, its impact on various disciplines, and future predictions for the broader Open Source ecosystem.
Why Are They Asking Me to Do This? or Adventures in IR Land
Explore the Incident Response process for Linux systems, focusing on preparation, detection, analysis, and containment strategies to combat the rising threat of Linux malware.
Becoming a Tyrant - Implementing Secure Boot in Embedded Devices
Explore secure boot implementation in embedded devices, covering mechanisms, reasons, experiences, and considerations. Learn about chain of trust, adversaries, and implications for device modification and security.
Implementing Passwordless Logins Using Passkey, WebAuthn Protocols and Spring Authorization Server
Explore passwordless authentication using Passkey and WebAuthn protocols with Spring Authorization Server, enhancing security and user experience in modern web applications.
Sweet Dreams - Abusing Sleep Mode to Break Wi-Fi Encryption and Disrupt WPA2/3 Networks
Novel Wi-Fi attacks exploiting power-save mode to leak encrypted frames and disrupt networks. Explores vulnerabilities in AP frame buffering and encryption, demonstrating potential security risks in Wi-Fi implementations.
Security Onion Essentials 2.4 - Alert Triage and Case Creation
Learn essential alert triage and case creation workflows in Security Onion, enhancing your ability to respond effectively to security incidents and manage investigations efficiently.
Security Onion Essentials 2.4 - Detection Engineering
Explore detection engineering in Security Onion, covering workflow essentials and best practices for enhancing network security and threat detection capabilities.
Security Advocacy Shouldn't Be for Security Professionals - An Analysis of How the Industry Misses the Mark and How We Can Improve
Explores how security advocacy should extend beyond professionals to all IT sectors and society, analyzing global security content and proposing improvements for broader impact.
Stealing With Style - Using CSS to Exploit ProtonMail & Friends
Explore critical vulnerabilities in privacy-focused webmail providers, including email theft and remote code execution, through CSS exploitation techniques in ProtonMail, Tutanota, and Skiff.
Prototype Pollution Leads to RCE - Gadgets Everywhere
Explore how Prototype Pollution vulnerabilities in JavaScript can lead to remote code execution, analyzing Node.js core code and NPM packages for potential security risks.
Building Images for the Secure Supply Chain
Explore techniques to enhance container image security, reduce vulnerabilities, and improve supply chain integrity. Learn about minimizing dependencies, updating images, and using tools like apko for reproducibility and SBOM generation.
PMFault - Voltage Fault Injection on Server Platforms Through the PMBus
Explore voltage fault injection attacks on server platforms via PMBus, revealing vulnerabilities in power management systems and discussing potential security implications for data centers.
PPLdump Is Dead - Long Live PPLdump
Explore Windows Protected Process Light (PPL) mechanism, its vulnerabilities, and historical exploits. Learn about PPLdump, its impact on system security, and Microsoft's approach to PPL-related vulnerabilities.