Abstract:Tarski’s high school algebra problem asks whether every true identity concerning addition, multiplication, and exponentiation of positive integers follows from a list of 11 elementary identities. Surprisingly, Wilkie showed that the following identity is valid over the positive integers and … Read more
The attack helicopter is costly and complex to operate, yet it is taking a mauling in the Russian invasion of Ukraine. Russia’s full-scale invasion attempt of Ukraine starting in 2022 has shown both the vulnerability of helicopters and the effectiveness … Read more
Not long ago, during a discussion with a Zoomer colleague about how to find research material, I realized that he had never experienced internet search back when it was good. I tried to explain how it used to be easier … Read more
Introduction Andres Freund published the existence of the xz attack on 2024-03-29 to the public oss-security@openwall mailing list. The day before, he alerted Debian security and the (private) distros@openwall list. In his mail, he says that he dug into this … Read more
We’re under DDoS Attack Someone has been attempting to DDoS us for weeks now. They have flooded our server with hundreds of millions of requests and attempted to download our setup file millions of times. (In the last 5 days … Read more
It’s been a while since I wrote an “attack of the week” post, and the fault for this is entirely mine. I’ve been much too busy writing boring posts about Schnorr signatures! But this week’s news brings an exciting story … Read more
Everyone from advertisers and marketers to government-backed hackers and spyware makers wants to identify and track users across the web. And while a staggering amount of infrastructure is already in place to do exactly that, the appetite for data and … Read more
On April 12, GitHub Security began an investigation that uncovered evidence that an attacker abused stolen OAuth user tokens issued to two third-party OAuth integrators, Heroku and Travis-CI, to download data from dozens of organizations, including npm. The applications maintained … Read more
The Blockchain is the solution to everything, and especially the problem of the state. So or similar goes the hype. This book attacks that hype, and it’s fun to read. It very briefly (one chapter of many) and rather easily … Read more
Attack Surface Analyzer is a Microsoft developed open source security tool that analyzes the attack surface of a target system and reports on potential security vulnerabilities introduced during the installation of software or system misconfiguration. Getting Attack Surface Analyzer If … Read more