Craig Wright is not Satoshi Nakamoto
A detailed investigation into Craig Wright's claim to be Bitcoin creator Satoshi Nakamoto, examining forged evidence, tax fraud allegations, and failed cryptographic proofs
·26 min read
Securing Blockchain.info Users with Tor and SSL
Helping Blockchain.info become the second site after Facebook to offer a Tor hidden service with a CA-signed SSL certificate, protecting users from MITM attacks
·9 min read
FBI seizes fake Tor hosted Jihad funding website as part of Operation Onymous, leaves up real site
During Operation Onymous the FBI seized a fake clone of a jihad funding site while leaving the real version online, highlighting the scattershot nature of the takedowns
·1 min read
Large Number of Tor Hidden Sites Seized by the FBI in Operation Onymous were Clone or Scam Sites
The FBI announced the seizure of a large number of darkweb sites to much fanfare. It turns out most of what they got were fake clone sites
·18 min read
60 Minutes Australia on Silk Road and Bitcoin
A breakdown of 60 Minutes Australia's story on Silk Road and Bitcoin, including their confusion between the Deepweb and Darknet concepts
·6 min read
Analyzing the FBI’s Explanation of How They Located Silk Road
A technical analysis of the FBI's claims about how they located Silk Road's server, showing their explanation doesn't match how Tor hidden services work
·15 min read
Notes on the Celebrity Data Theft
An in-depth look at the underground networks behind "The Fappening" - how they operate, the techniques used to compromise iCloud accounts, and Apple's security weaknesses
·13 min read
Multiple Vulnerabilities in Disqus WordPress Plugin
Disclosure and fixes for a number of bugs in the Wordpress plugin for the popular Disqus commenting system
·4 min read
CS-Cart v4.2.0 Session Hijacking and Other Vulnerabilities
How weak session ID generation using uniqid() in CS-Cart allows session hijacking through targeted brute-force, plus a frustrating disclosure timeline
·5 min read
Multiple Vulnerabilities in MyGov, the Australian Government Single-sign-on Solution for Citizen Services.
Discovering XSS, SQL injection indicators, and poor cookie security in Australia's myGov portal that could expose 2.2 million citizens' tax and health records
·8 min read
Page 1 of 4