User forest

236 votes

11 answers

56k views

Why is Math.random() not designed to be cryptographically secure?

asked Mar 15, 2018 at 6:11

28 votes

2 answers

3k views

Methods root can use to elevate itself to kernel mode

linux exploit privilege-escalation kernel

asked Apr 7, 2016 at 2:50

28 votes

1 answer

5k views

DMA attacks despite IOMMU isolation

linux hardware memory kernel dma-attack

asked Jan 2, 2018 at 11:41

16 votes

6 answers

4k views

Mitigating forensic memory acquisition when an attacker has physical access to a workstation

hardware physical threat-modeling physical-access tamper-resistance

asked Apr 1, 2016 at 23:51

14 votes

1 answer

792 views

JPEG artifacts leaking information about redacted contents

forensics compression image

asked Apr 20, 2018 at 7:10

13 votes

2 answers

937 views

Recovery of EEPROM data after bulk erase operation

data-recovery flash-memory

asked Oct 27, 2019 at 0:56

12 votes

1 answer

846 views

Random seed not propagating to the entropy pools in a timely manner

linux random entropy

asked Apr 12, 2018 at 0:09

11 votes

2 answers

1k views

What are the new MDS attacks, and how can they be mitigated?

hardware threat-mitigation side-channel intel

asked May 15, 2019 at 2:06

10 votes

1 answer

1k views

Why does TLS 1.3 deprecate custom DHE groups?

tls cryptography protocols key-exchange diffie-hellman

asked Mar 19, 2018 at 3:10

10 votes

2 answers

2k views

Methods of cold boot attacks in the wild

disk-encryption forensics memory physical-access cold-boot-attack

asked Apr 4, 2016 at 23:07

9 votes

1 answer

676 views

Entropy sources used by modern Windows

windows random entropy

asked Apr 5, 2018 at 1:23

9 votes

1 answer

2k views

Mitigating the new attack on WPA2 involving PMKID

wifi password-cracking wpa2 threat-mitigation hashcat

asked Aug 5, 2018 at 3:14

9 votes

2 answers

521 views

How effective is Windows KDP for exploit mitigation in practice?

windows virtualization windows-10 kernel anti-exploitation

asked May 16, 2021 at 21:57

9 votes

3 answers

361 views

Simple way to safely paste text from website into terminal

web-browser terminal

asked May 21, 2021 at 22:12

8 votes

0 answers

300 views

Authentication using SysRq

authentication linux physical-access

asked Feb 6, 2018 at 3:57

8 votes

1 answer

592 views

Mitigating Meltdown by checking the faulting address in every page fault?

linux hardware detection kernel meltdown

asked Jan 9, 2018 at 7:49

7 votes

1 answer

806 views

How sensitive are acoustic side-channels to compression with a narrowband codec?

side-channel compression audio infoleak

asked Apr 27, 2021 at 1:20

6 votes

1 answer

283 views

What exactly is CVE-2021-23978 (from MSFA2021-08 in Mozilla Firefox)?

firefox cve vulnerability-assessment

asked Feb 23, 2021 at 23:35

6 votes

1 answer

494 views

Can any of the INTEL-SA-00086 vulnerabilities be exploited by an unprivileged user?

hardware cve privilege-escalation firmware cvss

asked Nov 28, 2017 at 0:54

6 votes

2 answers

5k views

Can mprotect() be used to change the permissions of .rodata?

linux kernel

asked Nov 29, 2017 at 21:24

5 votes

1 answer

284 views

What buses carrying sensitive information on a running computer are vulnerable to sniffing?

hardware forensics physical-access signal-analysis

asked Apr 5, 2016 at 1:52

5 votes

1 answer

652 views

What use does a TPM have for accurate timekeeping?

hardware tpm time tamper-resistance

asked May 25, 2018 at 5:22

5 votes

3 answers

3k views

Is the Linux kernel vulnerable to LazyFP (CVE-2018-3665)?

linux vulnerability hardware kernel side-channel

asked Jun 15, 2018 at 5:04

5 votes

1 answer

1k views

How does GCC's -mmitigate-rop work?

compiler gcc rop

asked Mar 10, 2018 at 7:08

4 votes

1 answer

631 views

Can a JTAG device be attached to a running system?

hardware debugging

asked Apr 24, 2016 at 3:39

4 votes

1 answer

2k views

LUKS2 on-disk format specifications

encryption disk-encryption luks

asked Feb 17, 2018 at 22:21

3 votes

1 answer

388 views

Injecting data into the Windows entropy pool

windows random entropy kernel

asked Apr 25, 2018 at 0:12

3 votes

1 answer

348 views

Does OpenSSH use padding of random lengths?

network ssh random openssh side-channel

asked May 13, 2018 at 2:32

3 votes

1 answer

520 views

Is microcode physically able to mitigate Meltdown?

hardware firmware meltdown

asked Jan 18, 2018 at 17:21

3 votes

0 answers

154 views

Identifying kernel pointer infoleaks via static analysis

linux kernel static-analysis infoleak

asked Nov 17, 2018 at 8:12

Stack Exchange Network

current community

your communities

more stack exchange communities

38 Questions

Why is Math.random() not designed to be cryptographically secure?

Methods root can use to elevate itself to kernel mode

DMA attacks despite IOMMU isolation

Mitigating forensic memory acquisition when an attacker has physical access to a workstation

JPEG artifacts leaking information about redacted contents

Recovery of EEPROM data after bulk erase operation

Random seed not propagating to the entropy pools in a timely manner

What are the new MDS attacks, and how can they be mitigated?

Why does TLS 1.3 deprecate custom DHE groups?

Methods of cold boot attacks in the wild

Entropy sources used by modern Windows

Mitigating the new attack on WPA2 involving PMKID

How effective is Windows KDP for exploit mitigation in practice?

Simple way to safely paste text from website into terminal

Authentication using SysRq

Mitigating Meltdown by checking the faulting address in every page fault?

How sensitive are acoustic side-channels to compression with a narrowband codec?

What exactly is CVE-2021-23978 (from MSFA2021-08 in Mozilla Firefox)?

Can any of the INTEL-SA-00086 vulnerabilities be exploited by an unprivileged user?

Can mprotect() be used to change the permissions of .rodata?

What buses carrying sensitive information on a running computer are vulnerable to sniffing?

What use does a TPM have for accurate timekeeping?

Is the Linux kernel vulnerable to LazyFP (CVE-2018-3665)?

How does GCC's -mmitigate-rop work?

Can a JTAG device be attached to a running system?

LUKS2 on-disk format specifications

Injecting data into the Windows entropy pool

Does OpenSSH use padding of random lengths?

Is microcode physically able to mitigate Meltdown?

Identifying kernel pointer infoleaks via static analysis