Stories by chillax

Stealing HttpOnly cookies with the cookie sandwich technique

Backdooring Your Backdoors – Another $20 Domain, More Governments

September 2024 Progress Update on Microsoft's Secure Future Initiative (SFI)

Hello eBPF: Building a Fast Firewall with Java and eBPF (14)

Listen to the whispers: web timing attacks that work

Single-packet race condition breaking the 65535 byte lim

Ducks Now Sitting (DNS): Internet Infrastructure Insecurity

Exploiting Client-Side Path Traversal to Perform CSRF – Introducing CSPT2CSRF

Phantom Secrets: Undetected Secrets Expose Major Corporations

Encryption at Rest: Whose Threat Model Is It Anyway?

GitHub Self-Service Automation: Introduction to Repoman and Release

Java Scoped Values: Better ThreadLocals

HTTP/2 Continuation Flood

Kobold letters: HTML emails are a risk

ArchiveME - Digital Twin

MavenGate: A supply chain attack method for Java and Android applications

Google OAuth is broken (sort of)

SMTP Smuggling – Spoofing Emails Worldwide

Distribution Confusion in PyPI

Slack

1
2
3
4
5