1. 3
    SigSpoof: Spoofing signatures in GnuPG, Enigmail, GPGTools and python-gnupg (CVE-2018-12020) – NeoPG crypto security neopg.io
    hanno avatar via hanno 7 days ago | cached | no comments
  2. 8
    efail: Outdated Crypto Standards are to blame crypto security blog.hboeck.de
    hanno avatar authored by hanno 29 days ago | cached | no comments
  3. 12
    Introducing Snallygaster - a Tool to Scan for Secrets on Web Servers security web blog.hboeck.de
    hanno avatar authored by hanno 2 months ago | cached | no comments
  4. 2
    Government Hack: Hack on German Government via E-Learning Software Ilias php security golem.de
    hanno avatar authored by hanno 3 months ago | cached | no comments
  5. 30
    Private keys in software from Blizzard, Electronic Arts, Microsoft, and the German Federal Bar crypto security feistyduck.com
    hanno avatar authored by hanno 5 months ago | cached | no comments
  6. 34
    FLIMP! The GIMP has a security problem security flimp.fuzzing-project.org
    hanno avatar authored by hanno 6 months ago | cached | 20 comments
  7. 18
    The ROBOT Attack - Return of Bleichenbacher's Oracle Threat crypto security web robotattack.org
    hanno avatar authored by hanno 6 months ago | cached | 2 comments
  8. 5
    Microsoft Dynamics 365: Wildcard Certificate with a private Key for everyone crypto security windows golem.de
    hanno avatar authored by hanno 6 months ago | cached | no comments
  9. 16
    Some minor Security Quirks in Firefox browsers javascript security blog.hboeck.de
    hanno avatar authored by hanno 7 months ago | cached | no comments
  10. 22
    How Optionsbleed wasn't found in 2014 science security web blog.fuzzing-project.org
    hanno avatar authored by hanno 9 months ago | cached | 4 comments
  11. 31
    Optionsbleed - HTTP OPTIONS method can leak Apache's server memory security web blog.fuzzing-project.org
    hanno avatar authored by hanno 9 months ago | cached | 2 comments
  12. 13
    Pytosquatting programming python security pytosquatting.org
    hanno avatar authored by hanno 9 months ago | cached | no comments
  13. 5
    Crash Firefox on Linux via Notification API browsers security web files.hboeck.de
    hanno avatar authored by hanno 9 months ago | cached | 6 comments
  14. 3
    Comodo fails to check CAA records crypto security web mail-archive.com
    hanno avatar authored by hanno 9 months ago | cached | no comments
  15. 15
    In Search of a Secure Time Source crypto security blog.hboeck.de
    hanno avatar authored by hanno 9 months ago | cached | 9 comments
  16. 7
    Abandoned Domain Takeover as a Web Security Risk javascript security web blog.hboeck.de
    hanno avatar authored by hanno 9 months ago | cached | 2 comments
  17. 11
    Six year old PDF loop bug affects most major implementations pdf security testing blog.fuzzing-project.org
    hanno avatar authored by hanno 9 months ago | cached | 2 comments
  18. 5
    Certificate Transparency: Hacking web applications before they are installed crypto security web golem.de
    hanno avatar authored by hanno 10 months ago | cached | 2 comments
  19. 41
    How I tricked Symantec with a Fake Private Key crypto security blog.hboeck.de
    hanno avatar authored by hanno 11 months ago | cached | 5 comments
  20. 10
    HTTPS: Private Keys on Web Servers security web golem.de
    hanno avatar authored by hanno 11 months ago | cached | no comments
  21. 3
    How 2,000 Unsecured Databases Landed on the Internet databases privacy security zeit.de
    hanno avatar authored by hanno 11 months ago | cached | no comments
  22. 24
    Don't leave Coredumps on Web Servers debugging linux security web blog.hboeck.de
    hanno avatar authored by hanno 1 year ago | cached | 5 comments
  23. 10
    The Problem with OCSP Stapling and Must Staple and why Certificate Revocation is still broken crypto web blog.hboeck.de
    hanno avatar authored by hanno 1 year ago | cached | 3 comments
  24. 8
    Passwords in the Bug Reports (Owncloud/Nextcloud) security blog.hboeck.de
    hanno avatar authored by hanno 1 year ago | cached | no comments
  25. 1
    htpasswDoS: Local Denial of Service via Apache httpd password hashes security web blog.fuzzing-project.org
    hanno avatar authored by hanno 1 year ago | cached | no comments