Georgios Kontaxis @k0ntax1s

Ph.D. in Computer Science. Security and Privacy. (On Mastodon: @[email protected]) cs.columbia.edu/~kontaxis/ Columbia University, NYC Joined June 2012

Tweets

4K
Followers

168
Following

268
Likes

1

Robert Graham @ErrataRob

2 years ago

Inflight wifi didn't work so of course I had to debug it. It appears the problem is lack of DHCP lease. The WiFi was using 8 hour leases, which was time enough for many planeloads of passengers to embark/disembark. A quick ARP scan at the time showed there were 55 devices on the…

361 1K 17K 3.4M 3K

Download Image

Frank ⚡ @jedisct1

2 years ago

SMTP Smuggling - Spoofing E-Mails Worldwide sec-consult.com/blog/detail/sm…

1 3 11 2K 10

Lina Khan @linamkhan

2 years ago

Today @FTC took action against Rite Aid for recklessly using facial recognition tools, leading to innocent people being wrongly accused of shoplifting. Our order prohibits the firm from using facial surveillance tools for 5 years, among other protections. ftc.gov/news-events/ne…

39 199 615 117K 41

Steven M. Bellovin @SteveBellovin

2 years ago

The full text of "Firewalls and Internet Security, Second Edition”, by Bill Cheswick, Avi Rubin, and myself, has been released under a Creative Commons license at wilyhacker.com. We include the full LaTeX source of the book, since we typeset it ourselves.

5 44 136 22K 32

Frank ⚡ @jedisct1

2 years ago

Framing Frames: Bypassing Wi-Fi Encryption by Manipulating Transmit Queues papers.mathyvanhoef.com/usenix2023-wif…

0 6 12 2K 1

Nick Sullivan @grittygrease

2 years ago

Messaging Layer Security: Secure and Usable End-to-End Encryption ietf.org/blog/mls-secur…

0 4 18 2K 2

Viktor Dukhovni 🇦🇺🇺🇦🇮🇱 @VDukhovni

2 years ago

OpenSSL support for RFC7250 raw public keys has been merged into the 3.2 development branch (master): github.com/openssl/openss… This supports trust validation via DANE TLSA records! I have pre-release code that adds DANE-with-RPK support to Postfix: github.com/vdukhovni/post…

1 8 15 1K 2

Privacy Matters  @PrivacyMatters

2 years ago

Zoom and dark patterns. Click a meeting link. It auto-downloads Zoom. Ignore that. The 'launch meeting' page gives no indication that you can join via browser but suggests install the Zoom Client. Click 'launch meeting' & you get the choice to 'Join from your Browser'.

1 8 37 5K 0

Download Image

Feisty Duck @feistyduck

2 years ago

From the TLS newsletter: Mike Malone wrote a blog post about using short-lived certificates to avoid having to deal with revocation. buff.ly/3Jn8QUg

0 6 9 2K 0

Download Image

majek04 @majek04

2 years ago

When can two TCP sockets share a local address? blog.cloudflare.com/the-quantum-st… @jkbs0 did a cool investigation on when bind-before-connect can reuse local port occupied by connect() and vice-versa. The results will shock you! :)

0 22 100 7K 19

Vasileios Kemerlis @vkemerlis

2 years ago

📢Our work on automated discovery of memory safety vulnerabilities in DL frameworks has been accepted at @USENIXSecurity 2023! Jointly with @neochristou @di_jin42 @Vatlidak @baishakhir | arxiv.org/abs/2209.14921 | gitlab.com/brown-ssl/ivys… | 39 CVEs 😎🤘💣#ivysyn #brownssl #usesec23

3 27 112 16K 8

Download Image

Eric Rescorla @ekr____

3 years ago

Really excited to see Google doing OHTTP with Fastly. My sources tell me it only took Fastly 45 minutes to build this. Amazing! Awesome to see this technology being used in the wild. Next up, OHTTP for DNS. developer.chrome.com/blog/oblivious…

1 17 44 24K 7

Steven Englehardt @s_englehardt

3 years ago

I'm very excited about the types of things OHTTP infrastructure will enable, so it's great to see it deployed in practice. e.g., I could imagine collecting signals of page breakage from tracking protection.

Eric Rescorla @ekr____

3 years ago

1 17 44 24K 7

0 1 9 1K 0

Frank ⚡ @jedisct1

3 years ago

Google Chrome - Partnering with Fastly—Oblivious HTTP relay for FLEDGE 𝑘-anonymity server developer.chrome.com/blog/oblivious…

0 3 8 2K 1

Retro Tech Dreams @RetroTechDreams

3 years ago

MVP?

11 71 811 45K 7

Download Image

Retro Tech Dreams @RetroTechDreams

3 years ago

Windows 98 Setup

25 122 1K 61K 16

Download Image

Ryan Dickson @ryancdickson

3 years ago

Let’s move the web PKI forward - together. chromium.org/Home/chromium-…

5 22 59 26K 7

Retro Tech Dreams @RetroTechDreams

3 years ago

Lemmings (1991)

21 97 1K 74K 17

Download Image

Ryan Hurst @rmhrisk

3 years ago

That brings up the question of what should be revoked? For ages, I have been saying revocation reasons don't make sense in the WebPKI. Well Mozilla agreed and has worked on defining those reasons better blog.mozilla.org/security/2022/…

1 1 3 1K 0

Mark Jessop - @[email protected] @vk5qi

3 years ago

Well this is not awesome. @Raspberry_Pi Camera v3 produces RF EMI on the GPS L1 frequency when enabled. Enough to make a GPS receiver maybe 20cm away from the camera cable drop lock. Camera v2 doesn't do this.