iiinova — where your digital self keeps evolving

Reposted by kunte_

Robert Merget (ic0ns) @ic0nz1.bsky.social · 08/07/2025

We found a new vulnerability in TLS. It's a variant of the ALPACA attack that bypasses current countermeasures. Relativly low impact - but great insight! Check it out: opossum-attack.com

1118 11

Reposted by kunte_

pspaul @pspaul95.bsky.social · 19/02/2025

Ever wondered what the Alt-Svc header is used for? Well, it can make you a MitM if you control it! I can finally publish the writeup to my GymTok challenge: control the header, become MitM, and perform a cross-protocol attack! blog.pspaul.de/posts/gymtok...

blog.pspaul.de

GymTok: Breaking TLS Using the Alt-Svc Header

Ever wondered what the Alt-Svc response header is used for? Turns out it can be used to become a Man-in-the-Middle and attack TLS!

022 2

Reposted by kunte_

Freddy @freddyb.bsky.social · 27/11/2024

Modern solutions against cross-site attacks (frederikbraun.de/modern-solut...): An article about cross-site leak attacks and browser-based defenses. You will also learn why web security best practices is always opt-in and finally how YOU can get increased security controls.

frederikbraun.de

Modern solutions against cross-site attacks

03419 34