News for hackers. Stuff that matters.

A comment on You can't just assume UTF-8. Parent comment

Re:You can't just assume UTF-8 by staunton on Tuesday April 30, 2024 @04:26AM (#40208507)
> most applications have broken implementations

What applications? Almost nobody writes their own implementations of encryption nowadays (nor should they). You mean openssl is "broken"?

[ Parent | on HN ]
Re:You can't just assume UTF-8 by neonsunset on Tuesday April 30, 2024 @05:07AM (#40208764)
By broken implementations I meant incorrect usage of cryptographic APIs - padding errors, nonce reuse, using weak hash functions, etc.
[ Parent | on HN ]