OAuth - Why it doesn't work, and how to Zero-day attack existing services

Since this article is extremely long, it is also available in a PDF version . This article also has a companion website .  Intro What is OAu...

What's really wrong with systemd?

Unless you've been living under a rock or on a park bench during the past two years, you've probably heard of systemd and the numer...

Avoid incorrect ChaCha20 implementations

ChaCha20 is a stream cipher which is gaining a lot of popularity of late. Practically every library today which provides ciphers seems to ...

LibreSSL porting update

I've recently covered some issues with LibreSSL and some common porting mistakes . Since these articles came out, I've noticed two ...