Quotidien Hebdomadaire Mensuel

Quotidien Shaarli

Tous les liens d'un jour sur une page.

January 9, 2023

The OWASSRF + TabShell exploit chain

We see that one of our vulnerabilities is exploited in the wild Link. So we decided to public the detail analysis of our two bug chains. Any customer has enough information to mitigate these bugs. The vendor also released all patches a week ago. This blog post shares the detail

Nouvelles règles: Boom des enregistrements de pilotes de drone en Suisse

Quelques 10'000 pilotes se sont officiellement enregistrés auprès de l'Office fédéral de l'aviation civile (OFAC) depuis un mois, après l'annonce des nouvelles prescriptions. Environ autant d'utilisateurs ont passé un examen d'exploitation.

New Paper on Old Threema Protocol

This is a statement on the NZZ news article from January 9, 2023 about alleged weaknesses in Threema's encryption. But these are completely impractical and theoretical.

Three Lessons from Threema: Analysis of a Secure Messenger

Threema is a Swiss encrypted messaging application. It has more than 10 million users and more than 7000 on-premise customers. Prominent users of Threema include the Swiss Government and the Swiss Army, as well as the current Chancellor of Germany, Olaf Scholz. Threema has been widely advertised as a secure alternative to other messengers.

In our work, we present seven attacks against the cryptographic protocols used by Threema, in three distinct threat models. All the attacks are accompanied by proof-of-concept implementations that demonstrate their feasibility in practice.

Advertising ID: APPLE DISTRIBUTION INTERNATIONAL fined 8 million euros

On 29 December 2022, the CNIL's restricted committee imposed an administrative fine of 8 million euros on the company APPLE DISTRIBUTION INTERNATIONAL because it did not collect the consent of iPhone's French users (iOS 14.6 version) before depositing and/or writing identifiers used for advertising purposes on their terminals.