I like breaking things. 🔑🔫 Into cryptography, embedded systems, and side channel attacks.
Joined August 2016
- Tweets72
- Following156
- Followers1.1K
- Likes80
How many SSH servers were vulnerable to the xz backdoor? According to our measurements, there were thousands. More here: infosec.exchange/@keeganryan…
Keegan Ryan retweeted
If you want to revisit the "recent" attacks on Mega E2E encryption (mega-awry.io/) and play the role of a malicious Mega server, I wrote a set of challenges which was released yesterday on cryptohack.org/, alongside some great new challenges!have fun 🙂
Keegan Ryan retweeted
I was relying on this app to publicize that I am defending in April! And looking for 2023 jobs! Guess I'll used...LinkedIn...now?
TL;DR If you want to understand/improve security processes using data and research science methods, shoot me a note. I'll post more later if I can
Keegan Ryan retweeted
If you have not updated your MEGA app or browser extension since 22 June, please do so now: New UCSD research [eprint.iacr.org/2022/914] lowers the minimum number of logins required to exploit older versions from 512 to just six. Additional information at blog.mega.io/mega-security-u…
“Cryptanalyzing MEGA in six queries”! This takes the recent attack on Mega, which required hundreds of login attempts, and reduces it to just six. eprint.iacr.org/2022/914
Our improved attack on MEGA's cryptography means that a substantial fraction of users were at higher risk than previously believed. The patches released last month for the original attack are effective here, so make sure you're updated!
“Cryptanalyzing MEGA in six queries”! This takes the recent attack on Mega, which required hundreds of login attempts, and reduces it to just six. eprint.iacr.org/2022/914
Keegan Ryan retweeted
So @Mark_Schultz wrote a whole series of posts explaining LWE (the PQC crypto constructions) from the ground up, with simplified but sane models in Python, and it’s great. mark-schultz.github.io/nist-…
Keegan Ryan retweeted
Cryptography-Twitter, here's a riddle (I don't know the answer): What happened to this modulus and can you factor it? crt.sh/?id=822860928
Keegan Ryan retweeted
Join me on August 15, 2021 for the 4th IACR Workshop on Attacks on Cryptography (WAC4): crypto.iacr.org/2021/wac.php
Lots of exciting talks by @ic0nz1 @faulst
@vanhoefm #JuliaLen @elie @lucawilkeUzL @PPessl @OmerShlomovits @victorlomne
@IACR_News #CryptoNews
Did eprint.iacr.org/2021/232 actually break RSA? Probably not, and here’s why. 1/n
However, there are many open questions. Would a different lattice construction avoid this problem? Can the bound be established in another way? What are the concrete performance numbers and asymptotic complexity? 8/
Keegan Ryan retweeted
Time for the next episode of Bug Bounty Report Explained. Today we take a look at SQLi in Zoom application found by
@inf_0_ that allowed the attacker to take a peek into victim's camera. UTF8 was abused to bypass protections. Enjoy!
youtu.be/5CCaQ9OK2vU
Keegan Ryan retweeted
Today we publish the details of a fault injection vulnerability affecting the MediaTek BootROM. We achieved code execution in the context of the Preloader, fully circumventing secure boot. Unpatchable. There’s a hole in your SoC: research.nccgroup.com/2020/1…
Keegan Ryan retweeted
Patch Tuesday surprise: @IntelSecurity updated the MDS advisory to include 10th Gen Processor Family (Ice Lake). It was previously claimed to be resistant against MDS, but apparently the mitigation were disabled in the hardware. intel.ly/32gOO9X
