Hacking, AppSec, and Bug Bounty newsletter
2019-03-12 | SwissPost-Scytl shuffle proof flaw, Car hacking tools part 1, and ProtonMail blocked in Russia
Tuesday, March 12
An international group of researchers: Sarah Jamie Lewis, Vanessa Teague, and Olivier Periera, found a critical flaw in the code that underlies the Swiss e-voting system that’s scheduled to roll out this year. The flaw could allow someone to alter votes without detection. From Matthew Green: “The problem occurs because the voting system implements a series of sophisticated cryptographic zero-knowledge proofs, in order to keep votes encrypted and untraceable while also preserving election integrity. At a critical place, one of the proofs is flawed.”
OTHER ARTICLES WE’RE READING
Car hacking tools by jgamblin
ProtonMail blocked in Russia due to … bomb threats?
Some good details and learnings in the Marriott breach post-mortem
Kim’s dream. We hear you. Time to go analog?
ABOUT ZERO DAILY
Zero Daily is a daily newsletter that highlights application security, bug bounty, and hacker focused topics. The content is curated with love by @luketucker and brought to you by HackerOne.
Friends don’t keep good things to themselves - forward this to your homies and co-workers. BTW, want to see who runs bug bounties?
Have a news tip / story to highlight? We’d love to hear about it. Email: firstname.lastname@example.org
I hope online voting never becomes mainstream.