Timeline for What are some ways to ensure that a cryptography library is reliable in an ecosystem that is new to me?
Current License: CC BY-SA 4.0
4 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jun 27, 2022 at 9:09 | comment | added | slebetman |
To reinforce the advice that being careful about libraries is not specific to cryptography there have been several incidents where attacks were conducted using seemingly innocent libraries. In the javascript community the two most famous are perhaps the ua-parser-js incident and the event-stream incident. One is a simple library to detect what kind of browser the client is using and the other is a stream handling library. One installed a cryptocurrency miner and the other steals your Bitcoin secret keys
|
|
| Jun 26, 2022 at 8:16 | history | edited | Steffen Ullrich | CC BY-SA 4.0 |
added 212 characters in body
|
| Jun 26, 2022 at 7:30 | history | edited | Steffen Ullrich | CC BY-SA 4.0 |
added 22 characters in body
|
| Jun 26, 2022 at 7:24 | history | answered | Steffen Ullrich | CC BY-SA 4.0 |