Royce Williams roycewilliams

generated by Perplexity Pro, 2025-04-05

Summarize in detail, with dates, the good work that Eva Galperin (aka "evacide") has done in the digital liberties and privacy space

Eva Galperin, also known as "evacide," has made significant contributions to the fields of digital privacy, cybersecurity, and digital liberties, particularly through her work at the Electronic Frontier Foundation (EFF) and other initiatives. Below is a detailed summary of her key accomplishments, organized by dates and themes:

Early Career and Joining EFF (2007)

Tracking Hashmob progress on cracking downloadable SHA1 hashes from Pwned Passwords.

Each new target hashlist is a delta - the "net new" from the previous downloads. My list here is in reverse chronological order.

ID	Hashlist Name	Hash Type	Found	Total	Recovered %
#H11651	Have I been Pwned v2025-03 (Delta V8.12)	SHA1 (100)	411,723,586	420,878,532	97.82%
#H9259	Have I been Pwned V8.12 (Delta V8.4)	SHA1 (100)	630,532	778,688	80.97%
#H7464	Have I been Pwned V8.4 (Delta V8)	SHA1 (100)	16,019,292

Original report

Affected Vendor OpenPrinting Affected Product Several components of the CUPS printing system: cups-browsed, libppd, libcupsfilters and cups-filters. Affected Version All versions <= 2.0.1 (latest release) and master. Significant ICS/OT impact?no Reporter Simone Margaritelli [[email protected]] Vendor contacted?yes The vendor has been notified trough Github Advisories and all bugs have been confirmed:

[https://github.com/OpenPrinting/cups-browsed/secu…|https://github.com/OpenPrinting/cups-browsed/security/advisories/GHSA-rj88-6mr5-rcw8]

(reproduced from an email I received 2025-09-06 1:03AM AKT)

(Nitrokey Logo)

Nitrokeys Offer Investment Security Without Infineon's Security Vulnerability

Recently, a significant security vulnerability in Infineon security chips was made public. Nitrokeys do not contain Infineon chips and are therefore not affected by this security vulnerability! Nevertheless, this incident holds interesting lessons for Nitrokey and our customers. In a nutshell: Security certifications are overrated and open source offers advantages over them. Nitrokeys offer a high level of investment security thanks to firmware updates. More on this below.

What has happened?

(mirror snapshot of: https://infosec.exchange/@tychotithonus/111924626712765292)

summary: new DNSSEC validation DoS vulnerabilities CVE-2023-50387 ("KeyTrap"), CVE-2023-50868 (NSEC3 vuln)

(living doc, updated regularly - if you prefer a low-edit post to boost, use https://infosec.exchange/@tychotithonus/111926621712441626)

Looks like DNS-OARC coordinated fixes in advance, but I don't see a centralized analysis, other than this announcement from the team who discovered KeyTrap: https://www.athene-center.de/en/news/press/key-trap ... and their technical paper: https://www.athene-center.de/fileadmin/content/PDF/Technical_Report_KeyTrap.pdf

	#-----------------------------------------------------------------------------
	# All HIBP SHA1 hashes beginning with b2e98, as of 2025-02-25, by frequency in leaks.
	#
	# The HIBP API receives a hex prefix, and returns all hashes with that prefix
	# (with the prefix omitted), including frequency count, across all leaks in HIBP.
	# The first hash is often much more likely to be the password behind the query,
	# demonstrating the limits of k-anonymity as a mitigation when frequency is included.
	# Of the 618,979 passwords represented, 96.8% of them (599,297) are the top one.
	#
	# Permalink: https://gist.github.com/roycewilliams/2034c9253d46fbcaefb13f8e5d42daa2

	# Download from ftp.logitech.com/pub/quickcam
	# Contains file listing, plus various checksums
	# As of: 2024-12-13

	45056 Jan 23 2015 60patch.exe
	4620192 Jan 23 2015 LogiCamSettings.exe
	4666496 Jan 23 2015 LogiUCDpp.exe
	1191792 Jan 23 2015 LogitechWebcamProperties.dmg
	721408 Jan 23 2015 albumpatch.exe
	72416 Jan 23 2015 avifix.exe

	# Because this appeared to exist nowhere else in the Googles.

	= F2A0D5919C61DB3D (space)
	! = 695109AB020E401C
	" = A02BAAA4A6AE5FEA
	# = C2A20CAE7226E17D
	$ = DB2294261F598B4C
	% = 1068F8D7B3E22BFF
	& = A86FB73C70515BD7
	' = 6D12862D8225EBC6

	# hashcat rule to only insert non-contiguous dots/periods
	# Created 2024-04-13 by TychoTithonus (Royce Williams)
	# Source:
	:
	i1.
	i2.
	i2.i1.
	i3.
	i3.i1.

	#!/usr/bin/python
	# -- coding: utf-8 --
	#
	# Copyright 2017, Francesco "dfirfpi" Picasso <[email protected]>
	#
	# Licensed under the Apache License, Version 2.0 (the "License");
	# you may not use this file except in compliance with the License.
	# You may obtain a copy of the License at
	#
	# http://www.apache.org/licenses/LICENSE-2.0