Hi! I’m a cybersecurity researcher who lives in NYC. I mostly write about computer science, cryptography, life, and music....
Fabian Bäumer and Marcus Brinkmann of the Ruhr University Bochum disclosed an interesting vulnerability to the OSS Security mailing list today. It is being tracked as CVE-2024-31497 . The PuTTY SSH client was designed to produce deterministic secret nonces ( k values) under DSA, due to the author's concern about low quality entropy on Windows in 2001. Deterministic signature generation isn't…
Read my article here : Model checking is a method of formally verifying whether a model of a system meets a specification. Modern model checkers can determine whether certain security properties hold true for a given program, and can automate the discovery of memory corruption bugs, unsafe arithmetic, assertion failures, and more. When a property is not found to hold, a model checker produces a…
Consider a scenario in which you are tasked with managing the security of a bank's vault. The vault is considered impenetrable without a key, which you are given on your first day on the job. Your goal is to securely manage the key. Let us suppose that you decide to keep the key on you at all times, granting access to the vault on an as-needed basis. You quickly learn that such a solution doesn't…
Back in April of 2017, the Golem Project published a blog post about the discovery a security bug affecting some exchanges such as Poloniex. According to the post, when certain exchanges processed transactions of ERC20 tokens, input validation was not being performed on account address length. The result was malformed input data being provided to the contract’s transfer function, and a subsequent…
I wrote a technical deep dive on CVE-2017-5638, which can be read here : At GDS, we’ve had a busy few weeks helping our clients manage the risk associated with CVE-2017-5638 (S2-045), a recently published Apache Struts server-side template injection vulnerability. As we began this work, I found myself curious about the conditions that lead to this vulnerability in the Struts library code. We often…