Recent content in Datagrams on hexproof
Companion to An Ok/Err Result Is a Bleichenbacher Oracle . It showed that one library’s Ok / Err decrypt result is a deterministic Bleichenbacher oracle. That Ok / Err reveals the bit : was the PKCS#1 v1.5 padding valid? This post surveys which other implementations leak it. That bit leaks more than one way, and has since Bleichenbacher’s 1998 paper: in the response itself (behavioral,…
A function returns Ok on valid padding and Err on invalid padding. That is a padding oracle. Bleichenbacher published the attack in 1998. It still works, and it does not care how fast your code runs. The timing variant, Marvin , leaks tens of nanoseconds under microseconds of jitter. Kario demonstrated it remotely over a network, but pulling the signal out takes statistics over many samples. The…
A MetaMask Android user enters their password, the wallet unlocks, they put the phone down. Thirty seconds later the autolock fires and the password screen returns. MetaMask’s UI indicates the keys are no longer reachable. The password the user just typed is in the process heap. So is the 12-word BIP39 mnemonic — in indexed form after every unlock, in contiguous plaintext from any session in…
A notification appears on the victim’s locked phone with whatever text the abuser typed. The victim taps it. Fifteen seconds later, the front camera silently takes a photo, the phone records where it is, and any other actions the abuser set up run too. The victim sees none of it. The lock-screen notification is one of many triggers. Cerberus runs whenever the phone does almost anything —…
There is an app on Google Play called Lock Screen Protector ( com.lsdroid.lsp ). It requests accessibility service permissions — the most sensitive permission on Android. Once granted, it reads all screen content, performs gestures, and takes screenshots. It monitors for the power dialog and dismisses it — the phone cannot be turned off. It blocks the notification shade — airplane mode cannot be…
Every AI coding tool solves the same fundamental problem: fitting the right information into a fixed-size context window so an LLM can write correct code. Claude Code (v2.1.88, source maps), Aider (v0.86.3, Apache 2.0), Cursor (leaked prompts, v1.0-2.0), Windsurf (leaked prompts, Waves 1-11), and GitHub Copilot (vscode-copilot-chat v0.43.0, MIT) solve it five completely different ways. Tobi Lutke…