Mmastodon TechnologyCybersecurity first seen 14 h ago, last 14 h ago, peak #7

Colin Percival reflects on 2005 RSA side-channel disclosure

Original: Colin Percival, FreeBSD maintainer and author of Tarsnap, reflecting on what it was like responsibly disclosing a side-c

Security researcher Colin Percival, a FreeBSD maintainer and creator of Tarsnap, has published a reflection on his 2005 responsible disclosure of a side-channel attack that could expose RSA private keys. The essay revisits the tense process of coordinating with vendors before going public, and readers note it resonates with today's debates over recent disclosure controversies in the security community.

Why now: Recent high-profile disclosure disputes have revived interest in how vulnerability disclosure was handled in past cases.

Colin PercivalFreeBSDTarsnapRSA

Open on mastodon →

Evidence

• Colin Percival, FreeBSD maintainer and author of Tarsnap, reflecting on what it was like responsibly disclosing a side-channel attack on RSA private keys back in 2005. This essay feels very much of this moment, with php2shell and Patrick Stewart in recent memory. https://www.… · krinkle@fosstodon.org · 1

API: https://socialmediatrends-api.osmike.com/v1/trends/4421561