Lessons From the apt Remote Code Execution Vulnerability

Well, it’s happened before, so it was bound to happen again: a remote code execution bug was found in APT. And it’s particularly interesting in the context of an age-old debate that has been dragging on in Debian-related circles about the use of HTTPS – a question that has been asked often enough that the… Continue Reading Lessons From the apt Remote Code Execution Vulnerability

USENIX Security ’18: Highlights

USENIX Security may not be the most glamorous security conference today, but I cannot remember the last time I’ve looked over the proceedings and said oh well, nothing interesting happened this year. And USENIX Security ’18 is no exception. USENIX graciously publishes all the papers presented at the conferences that it organizes, and the proceedings… Continue Reading USENIX Security ’18: Highlights