security

Securing DNSSEC Keys via Threshold ECDSA From Generic MPC (2019) https://lobste.rs/s/e9jl9m #cryptography #security
https://eprint.iacr.org/2019/889

PACT: Anonymous Credentials for the Web – Mozilla Hacks https://lobste.rs/s/6pdyiy #privacy #security
https://hacks.mozilla.org/2026/06/pact-anonymous-credentials-for-the-web/

Re: https://mastodon.social/ap/users/115587243049342870/statuses/116934718425134083

I believe at this stage CloudFlare provides security in a way analogous to how a protection racket provides security.

#CloudFlare #security #cybersecurity #infosec #web

Setting up SSH keys on macOS with Touch ID https://lobste.rs/s/d7m5j1 #cryptography #mac #security
https://nmattia.com/posts/2026-10-19-setting-up-ssh-keys-touch-id/

Journey to Root, Episode I: The Maglev King https://lobste.rs/s/i0mnxl #security #vibecoding
https://blog.calif.io/p/journey-to-root-episode-i-the-maglev

tmp.0ut volume 5 via @eh https://lobste.rs/s/xiwynb #reversing #security
https://tmpout.sh/5/

reaction: A daemon that scans program outputs for repeated patterns, and takes action via @fanf https://lobste.rs/s/zzdc8x #security
https://framagit.org/ppom/reaction

Integrated Sensing and Communication (ISAC) https://lobste.rs/s/35dq6x #privacy #security
https://www.ericsson.com/en/6g/isac

Unauthenticated RCE in Motorola's MR2600 Router https://lobste.rs/s/s1jwea #security
https://mrbruh.com/motorola/

How Far Behind the Frontier are Leading Open Weight Models on Cyber? https://lobste.rs/s/vrcctk #security #vibecoding
https://www.aisi.gov.uk/blog/how-far-behind-the-frontier-are-leading-open-weight-models-on-cyber

Easy Sandboxing on Linux with Bubblewrap https://lobste.rs/s/stehhb #linux #security
https://bxt.rs/blog/easy-sandboxing-on-linux-with-bubblewrap/

7 Sandbox Escape Vulnerabilities Across 4 Coding Agent Vendors https://lobste.rs/s/bper0d #security #vibecoding
https://www.pillar.security/blog/the-week-of-sandbox-escapes

Switching Password Managers in 2026 https://lobste.rs/s/ikzvtv #practices #security
https://rmondello.com/2026/09/07/switching-password-managers-2026/

I accidentally logged hundreds of thousands of phone calls to military bases via @taavi https://lobste.rs/s/dyswyz #security
https://lina.sh/blog/hijacking-e164-arpa

A researcher bought noreply.net. Companies started sending him secrets https://lobste.rs/s/exgfc0 #privacy #security
https://arstechnica.com/security/2026/08/a-researcher-bought-noreply-net-companies-started-sending-him-secrets/

GitHub Actions needs OIDC audience constraints by @yossarian https://lobste.rs/s/ipt1em #security
https://blog.yossarian.net/2026/08/10/github-actions-needs-oidc-audience-constraints

Shipping post-quantum cryptography to Python https://lobste.rs/s/szvtko #cryptography #python #security
https://blog.trailofbits.com/2026/06/30/shipping-post-quantum-cryptography-to-python/

432 Linux kernel CVEs published in the last 24 hours https://lobste.rs/s/t2jxyu #linux #security
https://lore.kernel.org/linux-cve-announce/

Protecting Firefox users following the compromise of eMudhra intermediate certificates https://lobste.rs/s/gqyvn5 #security
https://blog.mozilla.org/security/2026/10/20/protecting-firefox-users-following-the-compromise-of-emudhra-intermediate-certificates/

New, exclusive, by me: LG to Ban Residential Proxy Providers from Smart TV Apps

The home appliance giant LG Electronics USA said this week it plans to suspend any apps built for its smart TVs that turn one’s television into an always-on residential proxy node. The move comes less than a month after researchers found that more than 42 percent of games and other apps available for download on LG’s webOS store allow unknown third-parties to route their Internet traffic through a user’s TV.

https://krebsonsecurity.com/2026/07/lg-to-ban-residential-proxies-from-smart-tv-apps/

#smarttv #lg #residentialproxies #spur #security

Updated GPG key for signing Firefox and Thunderbird Releases https://lobste.rs/s/vj2erc #security
https://blog.mozilla.org/security/2026/08/10/updated-gpg-key-for-signing-firefox-and-thunderbird-releases/

CVE-2026-49176 Exploit Development: WalletService to SYSTEM https://lobste.rs/s/dxhdqx #security #windows
https://davidcarliez.github.io/blog/cve-2026-49176-walletservice-to-system/

ZOOMSDAY, Zoom Zero-Click Vulnerabilities Via Annotation https://lobste.rs/s/juj7bi #security #vibecoding
https://a.security/blog/asecurity-zoomsday

Adopting Memory-Safety and Fine-Grained Compartmentalisation with CHERI via @fanf https://lobste.rs/s/lt89di #transcript #video #hardware #security
https://www.infoq.com/presentations/cheri-memory-safety-compartmentalization/

Unlocking _everything_ on the CPU with DRAM scrambling https://lobste.rs/s/a4zifd #security
https://github.com/xoreaxeaxeax/skitter-creek-bath-salts