user avatar
user avatar
user avatar
forest
  • Member for 6 years, 4 months
  • Last seen this week
  • Laniakea
236 votes
11 answers
56k views

Why is Math.random() not designed to be cryptographically secure?

28 votes
2 answers
3k views

Methods root can use to elevate itself to kernel mode

28 votes
1 answer
5k views

DMA attacks despite IOMMU isolation

16 votes
6 answers
4k views

Mitigating forensic memory acquisition when an attacker has physical access to a workstation

14 votes
1 answer
792 views

JPEG artifacts leaking information about redacted contents

13 votes
2 answers
937 views

Recovery of EEPROM data after bulk erase operation

12 votes
1 answer
846 views

Random seed not propagating to the entropy pools in a timely manner

11 votes
2 answers
1k views

What are the new MDS attacks, and how can they be mitigated?

10 votes
1 answer
1k views

Why does TLS 1.3 deprecate custom DHE groups?

10 votes
2 answers
2k views

Methods of cold boot attacks in the wild

9 votes
1 answer
676 views

Entropy sources used by modern Windows

9 votes
1 answer
2k views

Mitigating the new attack on WPA2 involving PMKID

9 votes
2 answers
521 views

How effective is Windows KDP for exploit mitigation in practice?

9 votes
3 answers
361 views

Simple way to safely paste text from website into terminal

8 votes
0 answers
300 views

Authentication using SysRq

8 votes
1 answer
592 views

Mitigating Meltdown by checking the faulting address in every page fault?

7 votes
1 answer
806 views

How sensitive are acoustic side-channels to compression with a narrowband codec?

6 votes
1 answer
283 views

What exactly is CVE-2021-23978 (from MSFA2021-08 in Mozilla Firefox)?

6 votes
1 answer
494 views

Can any of the INTEL-SA-00086 vulnerabilities be exploited by an unprivileged user?

6 votes
2 answers
5k views

Can mprotect() be used to change the permissions of .rodata?

5 votes
1 answer
284 views

What buses carrying sensitive information on a running computer are vulnerable to sniffing?

5 votes
1 answer
652 views

What use does a TPM have for accurate timekeeping?

5 votes
3 answers
3k views

Is the Linux kernel vulnerable to LazyFP (CVE-2018-3665)?

5 votes
1 answer
1k views

How does GCC's -mmitigate-rop work?

4 votes
1 answer
631 views

Can a JTAG device be attached to a running system?

4 votes
1 answer
2k views

LUKS2 on-disk format specifications

3 votes
1 answer
388 views

Injecting data into the Windows entropy pool

3 votes
1 answer
348 views

Does OpenSSH use padding of random lengths?

3 votes
1 answer
520 views

Is microcode physically able to mitigate Meltdown?

3 votes
0 answers
154 views

Identifying kernel pointer infoleaks via static analysis