As much as it pains me, Bluesky (...still...despite using domains that I own in their test suite!) doesn't support IDNs in a few places. Notably, it affects brid.gy on the account profile page. Cli...

Thinking about securely leaking information to news organizations? This guide will show you how.

I am absolutely thrilled to see my work getting more and more coverage! I'm aware of at least 8 articles that have been published. https://arstechnica.com/security/2024/09/systems-used-by-courts-and...

A recent wave of cybersecurity disclosures has uncovered alarming vulnerabilities in the platforms that government agencies and courts rely…

#Discord told me on #HackerOne that this isn't a security #vulnerability, so cool, I'll talk about it publicly. You can disable 2FA¹ on another person's account if you get access to their phone momen...

The flaw would have allowed anyone to submit a voter registration cancellation request for any Georgian using their name, date of birth and county of residence — information that is easily discoverabl...

The flaw would have allowed anyone to submit a voter registration cancellation request for any Georgian using their name, date of birth and county of residence — information that is easily discoverabl...

The flaw would have allowed anyone to submit a voter registration cancellation request for any Georgian using their name, date of birth and county of residence — information that is easily discoverabl...

The flaw would have allowed anyone to submit a voter registration cancellation request for any Georgian using their name, date of birth and county of residence — information that is easily discoverabl...

In more than 50 state and local court systems, vulnerabilities exposed medical records from child abuse victims, police body camera footage, and other sealed documents.

In more than 50 state and local court systems, vulnerabilities exposed medical records from child abuse victims, police body camera footage, and other sealed documents.

govtech.cc: List of govtech cybersecurity vulnerability disclosures from Jeltz.

I am an arrest canary for Jason.

Exclusive: The vulnerabilities allowed public access to restricted and sensitive court filings using only a web browser.