#security
8 pages tagged with "security"
infosec
- chunkloris: per-chunk http amplification — cross-ecosystem measurement of per-chunk / per-frame cpu cost in production http/1, http/2, http/3, and websocket servers under one-byte-per-chunk request bodies
- glaurung windows driver findings — a running catalog of windows kernel-driver bugs found with glaurung, the binary-analysis toolkit — what each bug is, how the tool surfaced it, and an honest read on why microsoft did or did not act on it.
- ioctlance: windows driver vulnerability detection — symbolic execution and taint analysis for finding vulnerabilities in windows kernel drivers
- network covert channels index — comprehensive catalog of network tunneling and covert channel techniques
security
- Detecting npm chalk/debug Compromise: Automated Scanner for September 2025 Supply Chain Attack — Automated detection tool and guide for checking if your system or packages are compromised by the chalk/debug npm supply chain attack
- minecraft chunk-batch backpressure bypass (MC-308703) — a client-controlled acknowledgement counter in the java-edition server had no lower bound, letting a joined player defeat chunk-send flow control and drive the server into unbounded off-heap growth and tick stall. reported as mojira MC-308703, fixed silently in 26.2.
- nato overview — hub for nato background, full document library, chronology, and related concepts