Security Is a Useless Controls Problem

securityis.substack.com
security-is-a-useless-controls-problem

We’re all a bunch of chimps in a cage In this blog, I cover: A somewhat popular StackOverflow answer to introduce a metaphor about useless security posts How to tell if a control is probably useless Why useless bad for … Read more

Security research on Private Cloud Compute

security.apple.com
security-research-on-private-cloud-compute

Private Cloud Compute (PCC) fulfills computationally intensive requests for Apple Intelligence while providing groundbreaking privacy and security protections — by bringing our industry-leading device security model into the cloud. In our previous post introducing Private Cloud Compute, we explained that … Read more

htmx Web Security Basics

htmx.org

Alexander Petros February 06, 2024 As htmx has gotten more popular, it’s reached communities who have never written server-generated HTML before. Dynamic HTML templating was, and still is, the standard way to use many popular web frameworks—like Rails, Django, and … Read more

JDK 21 Security Enhancements

seanjmullan.org

JDK 21 was released on September 19, 2023! As with my previous blogs, I have compiled a list of what I think are the most interesting and useful security enhancements in this release. I have also grouped them into appropriate … Read more

Security analysis of the Dominion ImageCast X

freedom-to-tinker.com
security-analysis-of-the-dominion-imagecast-x

J. Alex Halderman is Professor of Computer Science & Engineering at the University of Michigan and Director of Michigan’s Center for Computer Security & Society. He has twice testified to Congress about election cybersecurity, and he co-chairs the State of … Read more

Live2D Is a Security Trainwreck

undeleted.ronsor.com
live2d-is-a-security-trainwreck

Translations of this article are welcome. If you know Japanese or any other language, feel free to contact me. The markdown source for this article is here. Live2D Cubism is a popular 2D puppet animation software most known for its … Read more

API Security Is a Hot Topic for 2023

blog.treblle.com
api-security-is-a-hot-topic-for-2023

APIs now underpin many digital strategies, helping companies share data with internal stakeholders and empowering brand-new API-as-as-products to form. APIs power event-driven microservices architectures and enable the composable enterprise to take shape. But although web APIs may be the lingua … Read more

X.org Security Advisory: Security issue in the X server

lists.x.org

X.Org Security Advisory: Security issue in the X server Peter Hutterer peter.hutterer at who-t.net Tue Feb 7 00:28:41 UTC 2023 X.Org Security Advisory: February 07, 2023 Security issue in the X server ============================== This issue can lead to local privileges … Read more

(In)Security of the “Pass” password manager

rot256.dev
(in)security-of-the-“pass”-password-manager

What is “Pass; the standard unix password manager”? Password management should be simple and follow Unix philosophy. With pass, each password lives inside of a gpg encrypted file whose filename is the title of the website or resource that requires … Read more