Hacker News
- Factoring RSA Keys with TLS Perfect Forward Secrecy https://securityblog.redhat.com/2015/09/02/factoring-rsa-keys-with-tls-perfect-forward-secrecy/ 2 comments
- Samba remote execution vulnerability (CVE-2015-0240) https://securityblog.redhat.com/2015/02/23/samba-vulnerability-cve-2015-0240/ 26 comments
Lobsters
- Bash specially-crafted environment variables code injection attack https://securityblog.redhat.com/2014/09/24/bash-specially-crafted-environment-variables-code-injection-attack/ 14 comments security
- Go home SSLv2, you’re DROWNing https://securityblog.redhat.com/2016/03/01/go-home-sslv2-youre-drowning/ 7 comments linux
- The hidden costs of embargoes https://securityblog.redhat.com/2015/06/10/the-hidden-costs-of-embargoes/ 4 comments netsec
- Potential pre-auth code execution in Samba (CVE-2015-0240) https://securityblog.redhat.com/2015/02/23/samba-vulnerability-cve-2015-0240/ 27 comments netsec
- CVE-2013-6435: analysis of the flaw in RPM https://securityblog.redhat.com/2014/12/10/analysis-of-the-cve-2013-6435-flaw-in-rpm/ 8 comments netsec
- Bash specially-crafted environment variables code injection attack https://securityblog.redhat.com/2014/09/24/bash-specially-crafted-environment-variables-code-injection-attack/ 51 comments linux
- New Red Hat Enterprise Linux 7 Security Feature: systemd-journald, extra security to protect the cool kids that store their credit card data in /home on their NTP servers. https://securityblog.redhat.com/2014/04/11/new-red-hat-enterprise-linux-7-security-feature-systemd-journald/ 8 comments linux
- OpenSSL AES timing attacks https://securityblog.redhat.com/2014/07/02/its-all-a-question-of-time-aes-timing-attacks-on-openssl/ 3 comments netsec
- OpenSSL AES timing attacks https://securityblog.redhat.com/2014/07/02/its-all-a-question-of-time-aes-timing-attacks-on-openssl/ 12 comments crypto
- New attack on openssl - MITM https://securityblog.redhat.com/2014/06/05/openssl-mitm-ccs-injection-attack-cve-2014-0224/ 6 comments crypto
- Array allocation in C++ | Red Hat Security http://securityblog.redhat.com/2012/10/31/array-allocation-in-cxx/ 18 comments programming