Security

Here's a curiousity that's developing in modern browser security: The security of a given browser is dominated by how much effort it...

[With thanks to Mathias Kresin for being the first to notice] An incident, what fun! Earlier today, I was alerted that a vsftpd download fro...

A while ago, I was playing with grammar-based XPath fuzzing and I found and fixed an interesting libxml bug. The commit, for the curious, is...

I'm just back from the fun that was HiTB Amsterdam 2011. (Plug: you should check out one of the HiTB series if you haven't yet; Dhil...

Over the past few years, there have been various high-profile incidents and concerns with the Certificate Authority-based infrastructure tha...

It's not often that I find a bug that affects multiple different codebases in the same way, but here is an interesting info-leak bug tha...

I did a bunch of fairly interesting things with my corporate hat on today (not to be confused with any of my personal research ;-) Firstly, ...