Research

333 readers

1 active

2 users here now

/r/netsec's branch in the fediverse.

A community-curated aggregator of technical research. Our mission is to extract signal from the noise.

Only post technical content here. New tools (and major releases of existing ones), novel techniques, deep dives and post mortems are the ideal content. CTF and bug bounty writeups could be acceptable if they showcase lesser known approaches or techniques.

Non-technical content (both beginner and CISO level) will be considered spam.

founded 3 years ago

moderators

execveat@infosec.pub

Every Signature is Broken: On the Insecurity of Microsoft Office’s OOXML Signatures (www.usenix.org)

submitted 3 years ago by execveat@infosec.pub [M] to c/research@infosec.pub

comment fedilink hide all child comments

OOXML signatures are rendered pretty much useless due to 3 flaws in specification and 2 flaws in implementation.

"The vulnerabilities have been acknowledged by Microsoft. However, Microsoft has decided that the vulnerabilities do not require immediate attention."

no comments (yet)

sorted by: hot top controversial new old

there doesn't seem to be anything here

lemmy:	0.19.20
mlmym (mschae):	26.3.3