Viewing profile — micahflee

See also: TeleMessage customers include DC Police, Andreessen Horowitz, JP Morgan, and hundreds more: https://micahflee.com/telemessage-customers-include-dc-polic...

It says "Verify your TM SGNL PIN" instead of "Verify your Signal PIN". That's the only difference.

Hacks, Leaks, and Revelations: The Art of Analyzing Hacked and Leaked Data is available for sale today, and also it's free under a Creative Commons license

Hydroxychloroquine has dangerous side effects for people with heart abnormalities, and shouldn't be prescribed without first determining if it's safe. The FDA warned about this in …

I was suspended for posting this https://infosec.exchange/@micahflee/109520648205436407

I have doubts that a timing attack would even be exploitable here since it's a hidden service, but I just made the string comparison constant-time to be safe: https://github.com/mi…

Is 12.04 pre-Unity and Amazon ads? These start when the ads started.

It doesn't particularly matter if people trust StartSSL, it matters if browsers trust them (which they do). There are about 100 root CAs, and something like 1000 CAs if you include…

If you offer software to download HTTPS is a must. Otherwise any active attacker, from a kid at a coffee shop to the NSA at the ISPs, can make it so when people download your softw…

Hey, I'm the maintainer of HTTPS Everywhere. Last night we released a Chromium update that had a critical bug that broke the browser. As soon as we discovered this we removed it fr…