I never did an #introduction!

Hi, I'm Max. I live in #NYC and do #journalism at PCMag where I cover #infosec, #security, and #privacy. I also write reviews of #VPN and professionally complain about #capitalism. I'm the Unit Chair of the ZDCG #union and moonlight as a #labor organizer. If you want to learn about how to unionize your workplace, plz DM me. I play #banjo badly and think about #medieval literature. I'm spending too much money on #fountainpens.

A Wildly Powerful, Privacy-Focused Linux Laptop Appears…

omgubuntu.co.uk/2020/07/purism…

"Suffice to say it's a beast based around a six-core Intel Core i7-10710U (1.10 GHz, 4.70 GHz turbo boost) processor."

@omgubuntu

Learn more about the all-new Librem 14: puri.sm/products/librem-14/

#privacy #freedom #security #linux

neilmadden.blog/2022/04/19/psy…

One side of the equation is r and the other side is multiplied by r and a value derived from s. So it would obviously be a really bad thing if r and s were both 0, because then you’d be checking that 0 = 0 ⨉ [a bunch of stuff], which will be true regardless of the value of [a bunch of stuff]! And that bunch of stuff is the important bits like the message and the public key. This is why the very first check in the ECDSA verification algorithm is to ensure that r and s are both >= 1.
Guess which check Java forgot?

#bugfix #crypto #java #security

CVE-2022-21449: Psychic Signatures in Java

The long-running BBC sci-fi show Doctor Who has a recurring plot device where the Doctor manages to get out of trouble by showing an identity card which is actually completely blank. Of course, thi…

^{Neil Madden}