Disabling old Lets Encrypt validation will break HTTPS for Debian/Ubuntu usersfeistyduck.com·2 pts·hannob·0
My Bug Bounty Program Turned into a Free Security Audit for the Serendipity Blogblog.hboeck.de·2 pts·hannob·0
Private Keys in Software from Blizzard, EA, Microsoft&German Federal Barfeistyduck.com·3 pts·hannob·0
Optionsbleed – HTTP OPTIONS method can leak Apache's server memoryblog.fuzzing-project.org·142 pts·hannob·70
Six year old PDF loop bug affects most major implementationsblog.fuzzing-project.org·109 pts·hannob·29
Spotify – like Cisco – ships private key for publicly trusted certificategroups.google.com·3 pts·hannob·0