Je ne voulais pas faire de compte-rendu du #SSTIC 2018, mais des forces contraires m'ont obligé à réaffirmer que la sécurité est un échec ... Bonne lecture ! news0ft.blogspot.com/2018/06/sstic-…

An automated crypto audit of the Jenkins CI system cryptosense.com/blog/crypto-au… #jenkinsci #cryptography

I would liken Tor to putting on Sauron's ring. The wearer is invisible to ordinary beings, like Men, but highly visible to the Nazgûl.

Batch-GCDing Github SSH Keys cryptosense.com/batch-gcding-g…

Cryptosense's Etienne Millon is at #sstic in Rennes, seek him out for all your HSM, P11, Github SSH GCD & cryptosense recruiting questions!

Thanks to Cryptosense for helping us find users' weak RSA SSH keys by examining their public keys bounty.github.com/researchers/cr…

@das_kube Cryptosense That's a good point. We had not before we published enumerators.

Try our crypto service discovery tool discovery.cryptosense.com and read the thinking behind its analysis rules cryptosense.com/cryptosense-cr…

The Lesson From DROWN: Bad Crypto Can Be Worse Than No Crypto cryptosense.com/the-lesson-fro…

Nice scanner of crypto services configuration, by Cryptosense discovery.cryptosense.com

We submitted our NSE scripts for detecting DROWN (as used on discovery.cryptosense.com) to NMap seclists.org/nmap-dev/2016/…

.Bertrand Bonnefoy-Claudet is demoing discovery.cryptosense.com at Prosecco at Inria Paris next week. Academic-style abstract required

New Nmap Project NSE script from Bertrand Bonnefoy-Claudet detects SSLv2 DROWN and CVE-2016-0703, CVE-2016-0704 in OpenSSL: nmap.org/nsedoc/scripts…

Congratulations to the OpenSSL team on releasing 1.1.0, a huge milestone. openssl.org/news/openssl-1…

How to use Heroku with certificates from Let's Encrypt medium.com/cryptosense-te…

Let's make Firefox's crypto faster! A word on formal verification in NSS. Great work from Inria & Mozilla blog.mozilla.org/security/2017/…

From the CCS accepted papers list.

The Multi-Account Containers Firefox 🔥 add-on is awesome. To my surprise, it doesn't get in the way of regular browsing. addons.mozilla.org/en-US/firefox/…

I wrote a post about some new work by Rosler, Mainka and Schwenk finding vulnerabilities in WhatsApp and Signal group messaging. blog.cryptographyengineering.com/2018/01/10/att…