ThinkstScapes Research Roundup - Q3 - 2023

Cryptography still isn’t easy certmitm: automatic exploitation of TLS certificate validation vulnerabilities Aapo Oksman [ Slides ] [ Code ] [ Video ] Escaping Phishermen Nets: Cryptographic Methods Unveiled in the Fight Against Reverse Proxy Attacks Ksandros Apostoli [ Blog ] mTLS: When certificate authentication is done wrong Michael Stepankin [ Slides ] [ Blog ] Ultrablue: User-friendly Lightweight TPM Remote Attestation over Bluetooth Nicolas Bouchinet, Loïc Buckwell, and Gabriel Kerneis [ Slides ] [ Code ] [ Video ] HECO: Fully Homomorphic Encryption Compiler Alexander Viand, Patrick Jattke, Miro Haller, and Anwar Hithnawi [ Slides ] [ Paper ] [ Code ] [Continued] attack of the side-channels Freaky Leaky SMS: Extracting User Locations by Analyzing SMS Timings Evangelos Bitsikas, Theodor Schnitzler, Christina Pöpper, and Aanjhan Ranganathan [ Paper ] [ Code ] Downfall: Exploiting Speculative Data Gathering Daniel Moghimi [ Code ] [ Paper ] Your Clocks Have Ears – Timing-Based Browser-Based Local Network Port Scanner Dongsung Kim [ Slides ] [ Demo ] [ Video ] Composition is hard in the cloud Using Cloudflare to bypass Cloudflare Florian Schweitzer and Stefan Proksch [ Blog ] The GitHub Actions Worm: Compromising GitHub repositories through the Actions dependency tree Asaf Greenholts [ Slides ] [ Blog ] [ Video ] All You Need is Guest Michael Bargury [ Slides ] [ Code ] Nifty sundries Contactless Overflow: Critical contactless vulnerabilities in NFC readers used in point of sales and ATMs Josep Pi Rodriguez [ Slides ] [ Video ] Defender-Pretender: When Windows Defender Updates Become a Security Risk Omer Attias and Tomer Bar [ Slides ] [ Code ] Fuzz target generation using LLMs Dongge Liu, Jonathan Metzman, and Oliver Chang [ Results ] [ Report ] [ Blog ] Route to Bugs: Analyzing the Security of BGP Message Parsing Daniel dos Santos, Simon Guiot, Stanislav Dashevskyi, Amine Amri, and Oussama Kerro [ Slides ] [ Code ] It was harder to sniff Bluetooth through my mask during the pandemic… Xeno Kovah [ Slides ] [ Data ]

You can listen to ThinkstScapes Research Roundup - Q3 - 2023 online on Radio and Podcast. Open the player on this page to stream the available audio.

ThinkstScapes Research Roundup - Q3 - 2023 is an episode from ThinkstScapes by Jacob Torrey.

This episode is 00:24:59 long.

This episode was published on Nov 14, 2023.

Yes. Use the heart button on the episode page to add it to your favorite episodes list.

Yes. This page shows related episodes from ThinkstScapes when more episodes are available from the podcast feed.