security
94 posts found
Merkle-Damgard State Leakage: Exploiting Secret Concatenation in API Auth
How Merkle-Damgard hash constructions leak internal state vectors and why secret concatenation fails API authentication.
Shizuku: How Android Apps Access System APIs Without Root
Android's permission model gates system APIs hard. Shizuku brokers privilege access without root, letting apps query system state safely through a validated IPC…
Agentic Reverse Engineering: Bridging Binary Disassembly and Model Context Protocol with REA
An architectural analysis of REA, an open-source MCP server that coordinates disassemblers, dynamic tracing, and static analysis for agentic reverse engineering…
Europol Quantum Warning: Hardening Crypto Wallet Signatures Before Harvest-Now Attacks
Europol flagged crypto wallets as the primary risk for harvest-now-decrypt-later quantum attacks. Here is a technical breakdown of how to evaluate signature exp…
Managing Secure Remote Infrastructure with Oryxis
A step-by-step guide to configuring Oryxis, an open-source Rust SSH client with encrypted vault storage and port forwarding.
The SSRF Problem Nobody Talks About in AI Pipelines
Everyone hardens the model. Almost nobody hardens what the model fetches. A walkthrough of SSRF and SSRF-adjacent risks in AI ingestion pipelines, with practica…
WebCheck: Self-Host Your Website OSINT Instead of Renting It
Website OSINT in one URL: DNS, TLS, headers, WHOIS, tech fingerprint, all passive. Run the WebCheck fork on your own box so targets never leave your network.
Why Is This Process Running? The Evolution of Process Provenance Tooling
How answering why a process is running moved from /proc archaeology to eBPF streams to witr, the open-source tool that makes provenance a single command.
How to Build a Censorship-Resistant Tunnel with Aether and MASQUE
A step-by-step guide to compiling and configuring Aether, a Rust userspace implementation of Cloudflare WARP using MASQUE over HTTP/3.
Paying for AI Without Revealing Who You Are: Zero-Knowledge Inference Tokens Explained
Zero-knowledge proofs decouple payment identity from LLM inference requests. Here is how the cryptographic architecture works and what security risks exist at t…