Babu Srinivasan's blog

Prefix truncation MITM attack on SSH protocol — Terrapin

Babu Srinivasan — Sat, 30 Dec 2023 19:08:34 +0000

CVE-2023-48795 describes a prefix truncation attack on the SSH (Secure Shell) protocol. The vulnerability is called Terrapin. Why Terrapin? Terrapin is a small North American turtle (shell, get it?). Reminds... Read more »

The post Prefix truncation MITM attack on SSH protocol — Terrapin appeared first on Babu Srinivasan's blog.

ChatGPT 3.5 Code generation — Silly mistakes that even a junior programmer won’t make

Babu Srinivasan — Sun, 17 Dec 2023 14:08:04 +0000

ChatGPT 3.5 is amazing, especially for a free product. We hear that ChatGPT can pass the bar exam, medical exam etc. — this is impressive. ChatGPT 3.5 can write code,... Read more »

The post ChatGPT 3.5 Code generation — Silly mistakes that even a junior programmer won’t make appeared first on Babu Srinivasan's blog.

ChatGPT 3.5 vs Bard — LLVM

Babu Srinivasan — Tue, 05 Dec 2023 19:55:59 +0000

I asked Bard "Explain LLVM". Bard said (in part) Imagine you have a program written in Python, but you want it to run on a device that only understands C... Read more »

The post ChatGPT 3.5 vs Bard — LLVM appeared first on Babu Srinivasan's blog.

Crypto strength — pre and post quantum

Babu Srinivasan — Sun, 27 Dec 2020 09:02:32 +0000

Security is only as good as the weakest link. Example: You have installed a very strong lock on your front door. A potential intruder will look at the strong lock... Read more »

The post Crypto strength — pre and post quantum appeared first on Babu Srinivasan's blog.

Are your communications secure? — https, root-ca, pfs, doh, dnssec, esni, rpki, blah, blah

Babu Srinivasan — Sun, 21 Jun 2020 05:55:37 +0000

A good friend of mine called me with this question: You work in computer security, right? I want to login to this website called xyz.com. Can anyone intercept my communications?... Read more »

The post Are your communications secure? — https, root-ca, pfs, doh, dnssec, esni, rpki, blah, blah appeared first on Babu Srinivasan's blog.

Doing crypto right is not easy

Babu Srinivasan — Fri, 08 May 2020 20:16:37 +0000

Rolling your own crypto is a bad idea — we should leave this to experts though even they get it wrong quite frequently. In general, one can safely use standard... Read more »

The post Doing crypto right is not easy appeared first on Babu Srinivasan's blog.

Web Assembly in a browser and beyond — Crypto Example

Babu Srinivasan — Thu, 15 Aug 2019 05:49:31 +0000

Web Assembly is a low level portable binary format (bytecode) for a stack-based virtual machine is a W3C web standard, that runs in a sandbox, on all major browsers runs... Read more »

The post Web Assembly in a browser and beyond — Crypto Example appeared first on Babu Srinivasan's blog.

2017 Security Recap

Babu Srinivasan — Sat, 06 Jan 2018 05:54:39 +0000

Cryptographers and Security Researchers have a penchant for coming up with colorful acronyms and names which describe, in brief, the vulnerability or exposure. Some are them are BEAST, CRIME, ShellShock,... Read more »

The post 2017 Security Recap appeared first on Babu Srinivasan's blog.

First SHA-1 collision, birthday paradox, should you rehash your will?

Babu Srinivasan — Mon, 20 Mar 2017 22:20:37 +0000

One of the most important properties of a cryptographic hash function is that of â€œStrong collision-resistanceâ€, that is, it should be "computationally infeasible" to find distinct inputs x1, x2 such... Read more »

The post First SHA-1 collision, birthday paradox, should you rehash your will? appeared first on Babu Srinivasan's blog.

Cross Platform (Android, iOS) app in F# with Reactive Extensions

Babu Srinivasan — Sun, 25 Sep 2016 16:17:15 +0000

If you love functional programming and want to write *native* cross-platform mobile apps (Android, iOS and even Windows Phone) and you know F#, you are set. The company that made... Read more »

The post Cross Platform (Android, iOS) app in F# with Reactive Extensions appeared first on Babu Srinivasan's blog.