Established cryptographic algorithms like Signal’s double ratchet algorithm may include guidance or cautions for application or modifications of the parameters or construction used. But what can happen if you ignore said advice?
This article is a full disclosure on a low-severity key confusion vulnerability in version 3 of megolm, the latest version of megolm that is specified and used.
Read More…
QR Codes are a well-supported enough way to transfer someone onto a website on their phone.
But how do you make QR codes that don’t require a large surface area to scan correctly? (The answer probably won’t surprise too much)
Read More…
The ECB published 10 new potential Euro designs, 5 of which featuring featuring Europeans of various importance, and 5 featuring european Birds.
Another feature that is visible on 9 of them are their denomination in braille. After asking, it would appear that the other design also has a Braille feature.
Read More…
This website now can be accessed as an onion hidden service and through sneakerweb.
Read More…
MIPI-DSI is a display interface for, especially embedded, display panels, commonly used on embedded hardware.
These display panels generally need different initialization code, and depending on hardware also different power management code. As such Linux has code to support a wide variety of drivers for various DSI display panels.
In some cases, however, you may encounter a DSI display panel where the only Linux driver is for an older version of Linux. The Linux kernel is known for having an unstable driver interface, so these drivers just no longer work with newer versions of Linux.
This post will describe the changes you need to perform to allow your driver to be compatible with newer versions of Linux, based on a simplified version of the “clockworkpi”[1] CWD686 panel that I have recently ported fromn 5.10 to 6.6.
Read More…
This is a short rant on SHA3/Keccak which I have some non-security-related issues with
Read More…
The Desktop and Web versions of the popular Matrix client Element, as well as its fork Schildichat, support link previews. These can also be activated inside of end-to-end encrypted chats.
The problem arises from its implementation: The setting is stored insecurely on the homeserver and URLs are sent to the homeserver for link preview generation.
This article is the a full disclosure on this issue.
Read More…
End to end encryption in chat protocols is a complex topics with lots of pitfalls.
One such pitfall is failing to verify that a ciphertext is meant to be decrypted with a specific key, or that a ciphertext is meant to decrypt to a specific plaintext, especially when an attacker can specify the key.
This post is about how Matrix does not perform authenticated encryption at all for media sent in end-to-end encrypted chats.
Read More…
Final Fantasy 14 is an MMORPG that is fully playable on Linux with only minor bugs and that I have been playing for a while now. This post will describe my personal setup of it.
Parts of this will also apply to non-NixOS systems
Read More…