PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Bit Rot Doesn't Always Increase Entropy – A Story from the Archives

bughunters.google.com | blog | #vulnerability-research | #cryptography | #case-study | #entropy | #google | #bug-hunters | #bit-rot
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

A Google archive story about how a statistical anomaly in 2010 uncovered a subtle flaw in the way a security-critical library was being used.
Published
Collected

Related coverage

blog · bughunters.google.com
More Cryptanalysis Makes Us All Safer
This post analyzes results published by Anthropic and argues that these recent advances do not signal the downfall of cryptography.
research · blog.quarkslab.com
State of Post-Quantum Cryptography implementations
In this blogpost, we first review the landscape of Post-Quantum Cryptography implementations across some of the most popular cryptographic libraries. Following that, we present the results of a differential fuzzing campaign on few of the presented implementations.
blog · bughunters.google.com
ESCAL8 2026: Agentic Hacking in the Lion City
Check out this post to learn more about ESCAL8 2026, Google’s annual flagship security conference, coming to Singapore from October 23–25, 2026!
blog · bughunters.google.com
Breaking into Google's GFile for $100k
This post details an attack on Google’s internal APIs, bypassing authorization to exploit the GFile library to gain access to internal filesystems and storage.
blog · bughunters.google.com
Scaling Memory Safety: AI-Assisted Rewrites of C/C++ Dependencies to Rust
This coverage gives security teams current context for monitoring, validation, and remediation.
blog · portswigger.net
Burp Sequencer 101
A plain-language explanation of Burp Sequencer: how bits of effective entropy are computed per bit position, and what the significance level means when judging whether session tokens are random.
Back