The Curious Engineer

All blogs / Security

ritter.vg

ritter.vg

Tom Ritter's personal homepage, where he rambles about tech-related topics.

SecurityNetworking

’10’15’20’25
Posts
87 from 29 Oct 2008 to 20 Aug 2026
Posting
now and then (3 in the last year)
Kind
personal blog
Feed
http://feeds2.feedburner.com/rittervg

2026 3

  1. webaudio fingerprinting on alibaba
  2. webgl renderer privacy
  3. telemetry helps. you still get to turn it off

2018 2

  1. What is Firefox Sync and why would you use it
  2. extract it into a standalone page

2017 1

  1. My Tech Wishlist

2016 2

  1. A Bit on Certificate Transparency Gossip
  2. Querying CT Logs, Looking For Certificates

2015 2

  1. All About Tor
  2. An Experimental "RequireCT" Directive for HSTS

2014 3

  1. Code Execution In Spite of BitLocker
  2. Run Your Own Tor Network
  3. Booting from RAID using GRUB2

2013 21

  1. Universal Email Encryption Specification
  2. Evernote, and Privacy Preserving Applications
  3. Funniest Exchange Ever on TLs Mailing List
  4. Open Technology Fund Audit Report
  5. About the Tor/NSA Slide Decks
  6. About the Cryptopocalypse
  7. De-Anonymizing Alt.Anonymous.Messages Followup 1
  8. De-Anonymizing Alt.Anonymous.Messages
  9. Femtocell Media Blitz, and Vegas 2013
  10. Dendritic arborization in dauer IL2 neurons
  11. The Differences Between Onion Routing and Mix Networks
  12. Decrypting Amazon EC2 Windows Passwords
  13. Liberation Technology Auditing Guidelines
  14. Remailer Blog Posts
  15. An Attack on SSL Client Certificates
  16. Fixing revocation for web browsers on the internet
  17. A Tagging Attack on Mixmaster
  18. Packet Formats
  19. Tagging Attacks
  20. Remailers We've Got
  21. What is a Remailer?

2012 7

  1. Some Initial Thoughts on Pond
  2. Certificate Authorities & Pinning
  3. Details on CRIME
  4. On Couchsurfing's New Terms of Service
  5. An Attack on Unauthenticated Block Cipher Modes - Separator Oracle
  6. On the Sorry State of E-Mail Security
  7. Black Hat EU Presentation: The IETF & The Future of Security Protocols

2011 8

  1. An Open Letter to The Calyx Institute
  2. Ekoparty Presentation: Cloud & Control
  3. Non-Persistent PGP Keys
  4. US v Fricosu - Compelled Disclosure of Encryption Keys
  5. Beyond Padding Oracle - Manger's Oracle and RSA OAEP Padding
  6. Examining the CA/Browser Forum Requirements Draft
  7. Regional Broadcast Using an Atmospheric Link Layer
  8. bleed-through badges

2010 10

  1. NYU Poly CSAW CTF Finals Challenge
  2. an explanation of ElGamal Encryption
  3. ClickOnce MITM Attacks
  4. Detecting SQL Injection in a White-box Environment
  5. why event validation exists in ASP.Net
  6. finding the columns in a user defined type in SQL Server and IISAPP in IIS 7
  7. i have created comments
  8. Who's Your Survivor?
  9. Architecture of Buenos Aires
  10. simple crypto pack

2009 26

  1. bruce schneier is wrong
  2. i have a love/hate affair with sql
  3. updated travel page
  4. comparing loop hoisting in .net
  5. how'd you get that scar?
  6. not sleeping can be dangerous for your laptop
  7. How to break the internet: Follow Standards
  8. being prepared
  9. super cool javascript hackery
  10. server configuration published
  11. crypo.biz followup
  12. people who shouldn't do crypto, doing crypto PART 2!
  13. finally put up a travel page
  14. people who shouldn't do crypto, doing crypto
  15. reading list
  16. the bucket list
  17. hacking .net's clr
  18. rss feed!
  19. authentication poc
  20. rfid reader
  21. code update
  22. right... I was doing that all along!
  23. why I hate perl
  24. i got project upstream-ed
  25. man in the middle attack
  26. fastest data transfer protocol

2008 2

  1. adventure in code added
  2. proof of concept added