Posts by Tags

When a VPN server hosts multiple protocols, a probe-sensitive protocol can expose an otherwise probe-resistant service. Our study examines this weak-link problem across commercial VPN deployments.

MVPNalyzer audits the security and privacy of Android VPN apps. Our investigation of 281 apps found traffic leaks, unencrypted communication, tracking, and weaknesses in security practices.

When a VPN server hosts multiple protocols, a probe-sensitive protocol can expose an otherwise probe-resistant service. Our study examines this weak-link problem across commercial VPN deployments.

MVPNalyzer audits the security and privacy of Android VPN apps. Our investigation of 281 apps found traffic leaks, unencrypted communication, tracking, and weaknesses in security practices.

Private links delivered over SMS can act as bearer credentials. We show how a single exposed URL can reveal sensitive records and, in some services, expand into a much larger leak.

MVPNalyzer audits the security and privacy of Android VPN apps. Our investigation of 281 apps found traffic leaks, unencrypted communication, tracking, and weaknesses in security practices.

SpyChain examines how compromised components can threaten small satellite systems, including attacks that span multiple parts of the supply chain and evade testing.

SpyChain examines how compromised components can threaten small satellite systems, including attacks that span multiple parts of the supply chain and evade testing.

Private links delivered over SMS can act as bearer credentials. We show how a single exposed URL can reveal sensitive records and, in some services, expand into a much larger leak.