security
115 posts found
BTCPay Server Hot Wallet Attack: What Broke, What to Do, and the Patch Gap Problem
BTCPay Server versions through 2.4.1 are confirmed vulnerable to an attack that drained hot wallets. Here is what the architecture makes possible, how to harden…
EIP-7702 Account Delegation: Attack Surfaces in Ephemeral Contract Wallets
EIP-7702 introduces temporary contract delegation to Ethereum EOAs, but persistent designators and blind authorization signatures create critical attack vectors…
Comparing Desktop SSH Clients: Oryxis vs SSH Pilot
An architectural comparison of Oryxis and SSH Pilot across local vault encryption, secret manager integration, GPU rendering performance, and peer-to-peer synch…
Liability Boundaries for Autonomous Agent Payments
Delegating execution authority to autonomous software without cryptographic parameter envelopes forces infrastructure operators to assume unlimited financial co…
Bitcoin Core Vulnerability Policy: Fast-Lane Fixes for Automated Audits
Bitcoin Core revised its security policy to drop long disclosure embargoes for easily discoverable bugs. Here is why automated code analysis forced the change a…
Stadia RAT Workstation Triage: An Inspection Checklist for Stolen Credential Incidents
Stadia RAT combines StealC credential theft with hidden desktop access and interactive shells. Use this 10-point triage checklist to inspect Windows endpoints b…
Container Runtime Hardening: Ten Controls Against Host Compromise
Default container runtimes favor developer convenience over defensive isolation. Here is a 10-point checklist to lock down Linux container deployments against p…
How to Audit Codebases with Cloudflare Security Audit Skill
A step-by-step technical guide on running multi-phase vulnerability audits with Cloudflare's security-audit-skill, coverage ledgers, and adversarial disproof lo…
Linux Transparent Proxying: TPROXY vs TUN Device Interception
Comparing Linux Netfilter TPROXY and Layer 3 TUN virtual interfaces across kernel overhead, metadata tracking, routing topology, and transport protocol handling…
Quantum Alliance vs NIST: Two Standards Paths for Post-Quantum Cryptography
Six million bitcoin vulnerable to quantum attack. NIST and an industry Quantum Alliance offer different governance models for post-quantum cryptography. Compare…