ninegunpi

97 karmajoined October 4, 2017On HN

CTO at data security company. Opinions reflect my current state of mind and nothing else matters. I blog at http://www.ivychapel.ink about information security, risk and other things that amaze me.

Recent submissions

Preventing SQL Injections When WAF’s Not Enough cossacklabs.com
18ninegunpi7y13 comments
Web app data leaks and how to prevent them 101 hackernoon.com
3ninegunpi7ydiscuss
On avoiding band-aid security after penetration tests medium.com
2ninegunpi7ydiscuss
Quiche: QUIC implementation in Rust github.com/cloudflare
2ninegunpi7ydiscuss
Hiring external security team: what you need to know cossacklabs.com
2ninegunpi7ydiscuss
Implementing tracing in modern distributed app cossacklabs.com
4ninegunpi7ydiscuss
CipherSweet: searchable field-pevel encryption for PHP github.com/paragonie
2ninegunpi7y1 comment
Analysis of ProtonMail Cryptographic Architecture eprint.iacr.org
2ninegunpi7y1 comment
Highlights of french cybersecurity strategy blog.lukaszolejnik.com
2ninegunpi8ydiscuss
Two types of engineering resiliency medium.com
2ninegunpi8ydiscuss
Meltdown, Spectre, and why hardware can be correct yet insecure andrumyers.wordpress.com
2ninegunpi8ydiscuss
SecureRandom is now secure in Ruby paragonie.com
5ninegunpi8ydiscuss
Hermes distributed access control scheme cossacklabs.com
2ninegunpi8ydiscuss
Disco – mixing Strobe and Noise protocol frameworks cryptologie.net
3ninegunpi8ydiscuss
Analysis of remote DoS vulnerability in VirtualBox unimplemented.org
2ninegunpi8ydiscuss
Standardizing Bad Cryptographic Practice [pdf]eprint.iacr.org
2ninegunpi8ydiscuss
Why TLS 1.3 isn't ready yet feistyduck.com
2ninegunpi8y3 comments
An incident response blog post containing 0day vuln security.infoteam.ch
2ninegunpi8y1 comment
Why decentralized social services fail medium.com
39ninegunpi8y29 comments
Post-Quantum Crypto: From NewHope to Kyber [pdf]cryptojedi.org
1ninegunpi8ydiscuss
Affected products by Infineon RSA vulnerability gist.github.com
1ninegunpi8ydiscuss

All submissions and comments on Hacker News.