https://blog.cryptographyengineering.com/2025/09/10/kerberoasting/
I learn about cryptographic vulnerabilities all the time, and they generally fill me with some combination of jealousy (“oh, why didn’t I think of that”) or else they impress me with the brilliance of their inventors. But there’s also another class of vulnerabilities: these are the ones that can’t possibly exist in important production software, because there’s no way anyone could still do that in 2025. Today I want to talk about one of those ridiculous ones, something Microsoft calls “low tech, high-impact”. This vulnerability isn’t particularly new; in fact the worst part a
Image:
Image:
Image: https://2.gravatar.com/avatar/b8e81a16777cfcacc459c2a900d9f120f88bef2d30669a33df5b2a486b8e29c2?s=96&d=identicon&r=PG
I learn about cryptographic vulnerabilities all the time, and they generally fill me with some combination of jealousy (“oh, why didn’t I think of that”) or else they impress me with the brilliance of their inventors. But there’s also another class of vulnerabilities: these are the ones that can’t possibly exist in important production software, because there’s no way anyone could still do that in 2025. Today I want to talk about one of those ridiculous ones, something Microsoft calls “low tech, high-impact”. This vulnerability isn’t particularly new; in fact the worst part a
Image:
Image:
Image: https://2.gravatar.com/avatar/b8e81a16777cfcacc459c2a900d9f120f88bef2d30669a33df5b2a486b8e29c2?s=96&d=identicon&r=PG
Views: 3
Categories: General [c1], Technology & Open Source [c124]