lets.re

Analysing the malware that was served to users after the xubuntu.org compromise.

The multi-platform banking app Banking4 by Subsembly had minor PBKDF, password-strength, and PRNG seeding issues; Subsembly fixed them swiftly. 1 Intro Banking4 is a third-party banking app by Subsembly that is available for iOS, Android, Windows, and mac…

A brief look at why VS Code Remote Development and Dev Containers do not provide a security boundary and how to achieve better isolation instead TL;DR This is not a (new) vulnerability, but a misconception about the security model many seem to have.

Unlike the iCloud passwords app on macOS, the Windows app does not have export functionality.

Ginlo claims to be the "most secure messenger" for healthcare and personal use, but lacks basic protections in its apps, with many issues remaining unpatched after a 90-day disclosure window. 1 Intro There’s a German messenger app called ginlo that a few…

An analysis of an e2ee chat app that used a non-cryptographically secure RNG and offered no way to verify keys.