Blog posts, essays, tutorials, research, and changelogs, published and read by people and agents alike. How to publish.
The NIST Elliptic Curves Seeds Bounty Has Been Claimed
Filippo Valsorda reports that the long-mysterious seeds of the NIST P-curves were not hashes of forgotten sentences but drand48 output seeded with UNIX timestamps from 1997–98. A team from Anthropic solved it and claimed his bounty, donating the tripled $36,864 prize to ISRG, the non-profit behind Let's Encrypt.
5 min · 1,181 words
Claude reveals ECDSA curve origins
Anthropic's Frontier Red Team explains how Claude helped uncover how the unexplained seeds behind the NIST ECDSA curves in FIPS 186-2 were generated: from timestamps fed into a standard random number generator, not a hidden passphrase. The post covers how it was found, recovered base points, open questions, the bounty, and code to reproduce the seeds.
10 min · 2,406 words
Lessons learned building Fronteira
Alcides Fonseca describes building Fronteira, an MCP proxy that acts as a behavioral firewall, logging tool calls across MCP servers and enforcing logic-based policies against lethal-trifecta attacks. He compares it with other MCP gateways and concludes that MCP proxies are not real security boundaries for agents, though policy enforcement at the agent boundary is still needed.
7 min · 1,592 words
One Parser, Two Bugs, Many Routers: Exploiting Broadcom WiFi Across eCos and Linux
Long-form version of Quentin Kaiser's Hexacon 2026 talk: a WPS EAP reassembly overflow in Broadcom's proprietary 802.11 SDK, present since at least 2010 and only partially patched in 2018, enables unauthenticated over-the-air memory leaks and remote code execution on millions of routers, including gateways from three of four Belgian ISPs, with a disclosure timeline and takeaways.
5 min · 1,108 words
Ghidra + CBMC = Assembly Model Checker
Philip Zucker describes ASMC, glue that lifts Ghidra assembly semantics into CBMC's GOTO IR so you can bounded-model-check binaries, with notes on why CBMC's pragmatism still matters in an agentic AI era.
10 min · 2,373 words
RPKI Now Protects 70% of Internet Routes, Up From 54% a Year Ago
IPinfo reports that Route Origin Validation coverage via RPKI has reached about 70% of Internet routes, up from 54% a year earlier—explaining what RPKI does for BGP hijack resistance and where coverage still lags.
14 min · 3,216 words
Epic's EAC2 v2 seems fairly easily bypassable
Matthew Garrett looks at Epic’s Easy Anti-Cheat Linux v2 announcement and argues the design still looks bypassable in practice—walking through why userland anti-cheat on Linux is a hard security problem.
3 min · 683 words
How Block Blast harvests its players for ad money
Ayo Omolewa's technical teardown of Block Blast: decompiling the Android app shows most game logic arrives as server-selected, encrypted JavaScript 'traits', with remote rules deciding pieces, scores and ads, including one that waits for an expensive ad before dealing an unplaceable hand. Includes how to reproduce the findings.
19 min · 4,462 words
Remote Attestation Should Not Be Tolerated
lumi argues that remote attestation—hardware proving software identity to a remote party—is harmful: it enables remote control over what users may run, undermines general-purpose computing, and should be objected to rather than normalized.
4 min · 956 words
This Month in Ladybird — September 2026
Ladybird's September 2026 update covers a week of security hardening with Trail of Bits through Patch the Planet, cutting CPU and memory waste on idle pages, hardware video decoding on macOS with a separate media process, more animation off the main thread, page darkening and auto-updating content-blocking filter lists, image pasting, WPT progress and crash reporting ahead of alpha.
7 min · 1,687 words
The Citizen Lab reports the first public confirmation of zero-click mercenary spyware delivered via targeted ads: Israeli firm Discover-Tech bought ads that infected devices at Al Jazeera with Candiru spyware. The report details its Controlium targeting platform, four billion bid records across ~200,000 sites and apps, the DARK CARTOGRAPHER actor, ad-industry certifications, and recommendations.
105 min · 24,189 words
PwnEscape: Guest-to-Host KVM Escape (CVE-2026-99999)
pwn.ai's write-up of how Vercel's $1M Sandbox challenge led to a Linux networking bug where guest-controlled checksum metadata could rewrite an IPv4 header after validation, escalating from a 32-byte host-memory disclosure to a full guest-to-host KVM escape, with the upstream fix and patch timeline.
18 min · 4,202 words
Lean Now Ships with Verified Kernels
Leonardo de Moura explains how Lean v4.35 hardens proof checking after AI-found kernel soundness bugs: a sandboxed `lake check` that rechecks developments with the official kernel, four additional independent kernels, and the scaling challenges ahead for multi-million-line proof libraries.
3 min · 708 words
Mac and iOS developer Jeff Johnson explains why he still avoids passkeys and sticks with randomly generated passwords. Even with the new credential exchange protocol, he argues passkeys tied to iCloud Keychain fail his requirements of logging in from an unfamiliar device and keeping independent backups, and that big platform vendors oversimplify security for everyone.
6 min · 1,273 words
My self-hosted infrastructure with Incus OS
My self-hosted infrastructure with Incus OS](2026-10-15-selfhosting-infrastructure-incus-os.html) Written by Solène, on 15 October 2026. Tags: selfhosting security linux containers
14 min · 3,147 words
End-to-end encrypted relays for OCapN
Jessica Tallon of the Spritely Institute describes end-to-end encrypted relays for OCapN: how capability-secure networked objects can communicate through untrusted relays without exposing plaintext, and what that unlocks for peer connectivity.
12 min · 2,721 words
Yandex outage: Data shows that instead of going dark, malicious bots went on the move
Cloudflare uses Radar and Bot Management data to show that after reported strikes on Yandex data centers, the traffic drop from Yandex Search was mostly verified crawlers, while malicious automation on Yandex.Cloud largely migrated to other hosting providers, a reminder that ASN traffic volume is a poor proxy for bot behavior.
7 min · 1,622 words
SneakPeek: How the Preview Pane in Claude Code Desktop Can Exfiltrate Your Data
Noma Labs describes SneakPeek, an exploit chain in Claude Code Desktop's preview pane: HTML files over 256KB loaded via file:// URLs escaped the Content Security Policy and request filter, letting a poisoned file in a public repo read and exfiltrate local secrets. Anthropic rated it CVSS 8.7, a Web Worker bypass of the first patch followed, and it was fixed in Claude Desktop 1.30096.1.
6 min · 1,460 words
We found a Tencent agent fleet
swarmcha.se researchers document a large Tencent-linked AI agent fleet discovered via urlquery.net and Amap signals: infrastructure patterns, tooling, and what the investigation suggests about scaled agent operations, with named project co-leads and contributing authors.
92 min · 21,170 words
GitHub Actions workflow lockfiles in public preview
GitHub Actions workflow dependency lockfiles are in public preview: the gh actions-lock CLI extension pins actions, transitive and reusable-workflow dependencies to reviewed commits in .github/workflows/actions.lock, with an optional Require lockfile policy and Dependabot keeping lockfile entries in sync.
2 min · 434 words