How We Exploited Qodo: From a PR Comment to RCE and AWS Admin Key – Leaked Twice k kudelskisecurity.com 1 spiridow 9 months ago 0 comments
How we exploited CodeRabbit: From simple PR to RCE and write access on 1M repos r research.kudelskisecurity.com 687 spiridow 1 year ago 227 comments
Fuzzomatic: Using AI to Automatically Fuzz Rust Projects from Scratch r research.kudelskisecurity.com 3 spiridow 2 years ago 0 comments
Polynonce: A Tale of a Novel ECDSA Attack and Bitcoin Tears r research.kudelskisecurity.com 3 spiridow 3 years ago 0 comments
Practical attacks against attribute-based encryption r research.kudelskisecurity.com 3 spiridow 5 years ago 0 comments
Automatically Fix Security Issues at the Source r research.kudelskisecurity.com 2 spiridow 5 years ago 0 comments
Oramfs: Resizable ORAM, Remote Storage Agnostic, Written in Rust r research.kudelskisecurity.com 3 spiridow 5 years ago 0 comments
FIDO2: Solving the Password Problem r research.kudelskisecurity.com 4 spiridow 7 years ago 1 comments
* Why should I use a security key?
* What is it used for?
* How can I choose one ?
* What features should I look for?
We did cover FIDO2/Passkeys but also multiple other use cases.
Here are the slides if you're interested: https://tome.one/slides/amiet-pelissier-security-keys-worksh...