Prefer to watch/listen than read? There's a vloggy/video version of this post in which I explain all the key concepts and demonstrate an SHA-1 length extension attack against an imaginary site.

I understood the concept of a length traversal attack and when/how I needed to mitigate them for a hacking, security, cryptography, work, technology, geeky

When I was a kid of about 10, one of my favourite books was Usborne's Spy's Guidebook. (I also liked its sister the Detective's Handbook, but the Spy's Guidebook always seemed a smidge cooler to me).

So I was pleased when our eldest, now 7, took an interest in the book too. This morning,

books, children, javascript, cryptography, open source

(This video is also available on YouTube.)

I've been working as part of the team working on the new application framework called the Endpoint Encabulator and wanted to share with you what I think makes our project so exciting: I promise it'll make for two minutes of your time you won't seen web development, cryptography, funny, video, technology

I scratched an itch of mine this week and wanted to share the results with you, in case you happen to be one of the few dozen other people on Earth who will cry "finally!" to discover that this is now a thing.

I've used ProtonMail as my primary personal email provider for about four years, email, security, cryptography, open source

Mostly for my own benefit, as most other guides online are outdated, here's my set-up for intercepting TLS-encrypted communications from an emulated Android device (in Android Emulator) using Fiddler. This is useful if you want to debug, audit, reverse-engineer, or evaluate the security of an android, hacking, mobiles, web, security, cryptography, ssl