Welp. It’s the crypto bug of the year. Mark it down for April. Java 15-18 ECDSA doesn’t sanity check that the random x coordinate and signature proof are nonzero; a (0,0) signature validates any message. Breaks JWT, SAML, &c. neilmadden.blog/2022/04/19/psy…

A paper was published on the IACR’s ePrint archive yesterday, titled LadderLeak: Breaking ECDSA With Less Than One Bit of Nonce Leakage. The ensuing discussion on /r/crypto led to several int…

TL;DR; We are changing std::sort in LLVM’s libcxx. That’s a long story of what it took us to get there and all possible consequences, bugs you might encounter with examples from open so…

According to its source code, Pkg.jl uses a dependency resolving algorithm called MaxSum to resolve the package dependency graph. However, I was not able to find any documentation about this algorithm, or any concrete reference to some scientific paper describing…

成年人中，有33%的人感觉自己的成功不是理所应得的。

公開4周年おめでとうございます #リズと青い鳥

Because SLS just isn't interesting enough by itself.
This design works better than it really ought to.


Credit to @The KSP Maniac for hosting the challenge, @MuscoviteSW (twitter) for creating the photoshop.


Join the discord server! Hang out, discuss KSP…