corpus.blog
43,567 blogs · 5,563,491 posts Claim your blog
Record · corpus.blog/posts/01a0fe14-d78b-70c8-9da5-0a1b77d4a5fa

Talk At Berkeley's Information Access Seminar

DSHR's Blog · published 6 February 2021

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at blog.dshr.org Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
External links
71
Words captured
6,024

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgVWRTd91LBq7ON4EtpiBycWUvOxkcGtf_g18ze-rEo4w1gpID9kxwmYLzW2H8SsOppEbtv-3sZyg0n2a_6_2PwEA3mwwlLOWvnTy1dvfOBJYQ0G-3-fw2nUmbHgddFE66m6TS5ibfo6AwA/s681/NYT-3.png
blogger.googleusercontent.com
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiCFH04bWBa9hSzmQVVYDs_P7eb3CpCBHTFMnO8-jUAWEKAJfPSI_9V79J5UcHt7n9QdT29-b1vOqEQdcsL2HYcRrCeRO_tzqH0iot4m237m6NDrWgoLYL5H19Wg_WD6b3Re904ul3Lju4r/s650/NYT-2.png
blogger.googleusercontent.com
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiJFa-tX60Mag3RmMFG90fMPFnZZn_8xjQ2r3oKSmcWuO-IY_I1oZ3kOW4MjLH3rEtmgzJRMjz9jykp7w2ANwJLBbQMs_vRqrnyNU62a22SCUPRX5SV-X1d0mqGBta8MFECkVKOgNjT-nZd/s678/NYT-1.png
blogger.googleusercontent.com
https://support.mozilla.org/en-US/kb/how-do-i-tell-if-my-connection-is-secure
support.mozilla.org
https://wiki.mozilla.org/CA/Included_Certificates
wiki.mozilla.org
https://www.eff.org/files/ccc2010.pdf
eff.org
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhg9DjTrnzIlpmRAm-_bOFGA7r6qjHW7mxX1Jx-tk9bbgiFFLWESxzNSLb7qBq0Sb5zN_NYdjVnDsy0sLm8fC5pz5OFRoljYAt-zS872x5cPhy9GASu9wkNzEACM1iRWjX3BMI23Hu_NwkA/s1600/blog.dshr.org.security.crop.png
blogger.googleusercontent.com
https://www.abetterinternet.org/about/
abetterinternet.org
https://www.mozilla.org/
mozilla.org
https://www.eff.org/
eff.org
https://letsencrypt.org/
letsencrypt.org
https://blogs.msdn.microsoft.com/ieinternals/2011/03/22/everything-you-need-to-know-about-authenticode-code-signing/
blogs.msdn.microsoft.com
https://arstechnica.com/information-technology/2018/02/counterfeit-certificates-sold-online-make-digitally-signed-malware-a-snap/
arstechnica.com
https://www.certificate-transparency.org/what-is-ct
certificate-transparency.org
https://www.zdnet.com/article/microsoft-warns-about-two-apps-that-installed-root-certificates-then-leaked-the-private-keys/
zdnet.com
https://www.secorvo.de/publikationen/headsetup-vulnerability-report-secorvo-2018.pdf
secorvo.de
https://www.zdnet.com/article/lenovo-accused-of-pushing-superfish-self-signed-mitm-proxy/
zdnet.com
https://en.wikipedia.org/wiki/Superfish
en.wikipedia.org
https://www.zdnet.com/article/dell-admits-preinstalling-root-certificate-and-pledges-to-remove-it/
zdnet.com
https://en.wikipedia.org/wiki/Dell
en.wikipedia.org
https://www.zdnet.com/article/kazakhstan-government-is-intercepting-https-traffic-in-its-capital/
zdnet.com
https://en.wikipedia.org/wiki/Man-in-the-middle_attack
en.wikipedia.org
https://en.wikipedia.org/wiki/Domain-validated_certificate
en.wikipedia.org
https://www.globalsign.com/en/ssl-information-center/telling-dv-and-ov-certificates-apart/
globalsign.com
https://en.wikipedia.org/wiki/Extended_Validation_Certificate
en.wikipedia.org
https://en.wikipedia.org/wiki/Certificate_authority
en.wikipedia.org
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiBv_RJAinS8l_xVYPDaENc2e8VIy84mH1Wsvcd8cQEXTcmFC4xFmB3kO7l5GBJaGWxBaCaKFvvC5_ADE4Z2zQVMBuF-U-EbAeXgZyk6citzZ5iw1trALuM3DWgDM2x-kWDmnmXLwtl5PGr/s1600/code-signing-certificates-ad-640x463.png
blogger.googleusercontent.com
https://doi.org/10.1145/2668152.2673311
doi.org
https://arstechnica.com/security/2017/03/google-takes-symantec-to-the-woodshed-for-mis-issuing-30000-https-certs/
arstechnica.com
https://www.phishlabs.com/
phishlabs.com
Half of all Phishing Sites Now Have the Padlock
krebsonsecurity.com
http://www.usenix.org/event/usenix08/tech/full_papers/wendlandt/wendlandt_html/
usenix.org
http://convergence.io/
convergence.io
https://www.eff.org/observatory
eff.org
https://doi.org/10.1038/491325a
doi.org
https://tools.ietf.org/html/rfc6962
tools.ietf.org
https://www.certificate-transparency.org/
certificate-transparency.org
https://www.certificate-transparency.org/ev-ct-plan
certificate-transparency.org
https://en.wikipedia.org/wiki/Trust,_but_verify
en.wikipedia.org
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhE5lgG2qEwwXa71m5LCLAT7r9RqakaD4_cvyxOagCVZ9TqHMC9n_CnCLiQXFicLi6CqTut3j5a5p2h_MD4bc4cuzSPloefrDym8LBbjBaZbvFhkHMEmj4-_s3TITLvfAGP0LJ7rDbB5dCw/s1600/ct_ssl_issuance_1.png
blogger.googleusercontent.com
https://www.certificate-transparency.org/how-ct-works
certificate-transparency.org
https://www.gstatic.com/ct/log_list/log_list.json
gstatic.com
https://en.wikipedia.org/wiki/Merkle_tree
en.wikipedia.org
http://dx.doi.org/10.1145/945445.945451
dx.doi.org
https://arstechnica.com/information-technology/2020/12/18000-organizations-downloaded-backdoor-planted-by-cozy-bear-hackers/
arstechnica.com
https://www.nytimes.com/2021/01/02/us/politics/russian-hacking-government.html
nytimes.com
https://arstechnica.com/information-technology/2018/11/hacker-backdoors-widely-used-open-source-software-to-steal-bitcoin/
arstechnica.com
https://www.npmjs.com/package/event-stream
npmjs.com
https://github.com/dominictarr
github.com
https://github.com/right9ctrl
github.com
https://arstechnica.com/information-technology/2021/02/new-supply-chain-attack-uses-poisoned-updates-to-infect-gamers-computers/
arstechnica.com
https://orangematter.solarwinds.com/wp-content/uploads/2021/01/TimelineGraphic8.jpg
orangematter.solarwinds.com
https://orangematter.solarwinds.com/2021/01/11/new-findings-from-our-investigation-of-sunburst/
orangematter.solarwinds.com
https://www.crowdstrike.com/blog/sunspot-malware-technical-analysis/?s=03
crowdstrike.com
https://www.theregister.com/2021/01/21/microsoft_solarwinds_deep_dive/
theregister.com
https://www.microsoft.com/security/blog/2021/01/20/deep-dive-into-the-solorigate-second-stage-activation-from-sunburst-to-teardrop-and-raindrop/
microsoft.com
https://arxiv.org/pdf/1711.07278.pdf
arxiv.org
https://www.reproducible-builds.org/
reproducible-builds.org
https://www.youtube.com/watch?v=m0FudIwSuzM
youtube.com
https://tests.reproducible-builds.org/debian/reproducible.html
tests.reproducible-builds.org
http://www.acm.org/classics/sep95/
acm.org
https://www.schneier.com/blog/archives/2006/01/countering_trus.html
schneier.com
https://doi.org/10.1145/358198.358210
doi.org
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjekC3c6wSIeIzB_KSn2tH5gDzM0KNzO7PPDi5Xf3HHlBoELpn_LM8-YOCOwvsDPw9j3rPVwG2Z_0f4e4clBD-CUvYV1urVCKRJRHciSuENbFuNRewCWHz74bqM0qjSm36-2s2VaFfjUosj/s596/Janneke-tweet.png
blogger.googleusercontent.com
https://twitter.com/janneke_gnu/status/1328080032800137224?s=03
twitter.com
https://bootstrappable.org/
bootstrappable.org
https://en.wikipedia.org/wiki/Sybil_attack
en.wikipedia.org
http://www.nber.org/papers/w24717
nber.org
Know, Prevent, Fix: A framework for shifting the discussion around vulnerabilities in open source Read at the source ↗
security.googleblog.com
https://queue.acm.org/detail.cfm?id=3344149
queue.acm.org
https://www.sonatype.com/hubfs/Corporate/Software%20Supply%20Chain/2020/SON_SSSC-Report-2020_final_aug11.pdf
sonatype.com
Elsewhere on blog.dshr.org (3)