PUBLIC MARKS with tags crypto & security

You might have heard that you shouldn't be using JWT. That advice is correct - you really shouldn't use it. In general, specifications that allow the attacker to choose the algorithm for negotiation have more problems than ones that don't (see TLS). N libraries need to implement M different encryption and decryption algorithms, and an attacker only needs to find a vulnerability in one of them, or a vulnerability in their combination. JWT has seen both of these errors; unlike TLS, it hasn't already been deployed onto billions of devices around the world.

kaos theory was formed to bring together the brightest minds in the information technology and security communities, willing to contribute their ideas and dedicate their free time and energy, to create and innovate in an effort to organically and wholisti

an OpenBSD 3.8 Live CD with strong tools for anonymizing and encrypting connections. Standard network applications are provided and configured to take advantage of the tor onion routing network.

OTP generator for Palm.

Using OTP with FreeBSD.