TLDR Index
Daily Editions
Contents
  1. Page 1: Today’s IndexTLDR, TLDR AI, TLDR Web Dev, TLDR InfoSec, TLDR Crypto · 9 stories
  2. Page 2: TLDRTLDR · 7 stories
  3. Page 3: TLDR AITLDR AI · 12 stories
  4. Page 4: TLDR Web DevTLDR Web Dev · 10 stories
  5. Page 5: TLDR InfoSecTLDR InfoSec · 10 stories
  6. Page 6: TLDR CryptoTLDR Crypto · 12 stories
  7. Page 7: TLDR DesignTLDR Design · 13 stories
  8. Page 8: TLDR FoundersTLDR Founders · 11 stories
  9. Page 9: TLDR MarketingTLDR Marketing · 13 stories
  10. Page 10: Resources & ToolsTLDR, TLDR AI, TLDR Web Dev, TLDR InfoSec, TLDR Design, TLDR Founders, TLDR Marketing · 17 stories
  11. Page 11: SponsoredTLDR, TLDR AI, TLDR Web Dev, TLDR InfoSec, TLDR Founders, TLDR Marketing · 12 stories
?
Keyboard shortcuts
← / →
Previous / next page
↑ / ↓
Scroll while full screen
PgUp / PgDn
Scroll by viewport
Space
Scroll down by viewport
Shift+Space
Scroll up by viewport
Home
First page
End
Last page
F
Full screen
Escape
Exit immersive mode

Daily Edition · Page 5

THE DAILY INDEX

Technology, AI, software, security, crypto and business

ATTACKS & VULNERABILITIES

TLDR InfoSec

TLDR InfoSec

ADDING THREAT DETECTION TO CUSTOM AUTHENTICATION FLOW WITH AMAZON COGNITO ADVANCED SECURITY FEATURES

Amazon Cognito is a user management offering from AWS that can include security features such as threat detection. Cognito can use custom authentication flows to support passwordless authentication methods. It now supports using advanced security features on custom authentication flows. This post walks through how to set up passwordless authentication using webauthn and enable and configure threat detection.

aws.amazon.com · 4 min

TLDR InfoSec

REVERSE ENGINEERING IOS 18 INACTIVITY REBOOT

This article reverse engineers iOS 18's new inactivity reboot security feature by analyzing both debug strings in the SEPKeyStore kernel extension and decrypted Secure Enclave Processor (SEP) firmware. The SEP tracks device unlock times and triggers a forced reboot after 72 hours of inactivity. The feature is not wireless-dependent as previously rumored, but rather is implemented through direct SEP-to-kernel communication that forces devices into a secure "Before First Unlock" state. The SEP's involvement makes this feature highly tamper-resistant, requiring kernel-level code execution within the first three days to prevent the reboot, effectively creating an asymmetric defense that particularly impacts criminals while leaving law enforcement a narrow window for forensic analysis.

naehrdine.blogspot.com · 11 min

TLDR InfoSec

ONE YEAR OF USING LLMS FOR APPLICATION SECURITY: WHAT WE LEARNED

LLMs show promise for finding vulnerabilities due to their potential to understand code behaviors and go beyond the exact pattern matching that is used in traditional SAST tools. LLMs provide inconsistent results, have privacy issues, are time-intensive to train, and their use can lead to vendor lock-in. Many of these issues could be mitigated by modifying their usage. This article lists some possible improvements. CodeLlama, LLaMA, Mixtral, and Mistral are particularly problematic for these tasks.

dryrun.security · 5 min

TLDR InfoSec

CISA'S JACK CABLE ON SECURE-BY-DESIGN PLEDGE PROGRESS — AND NEXT STEPS

There has been positive progress on the secure-by-design pledge, which was launched in May and has now been signed by 248 companies who committed to implementing seven key digital security practices within a year of signing. The pledge focuses on improvements like expanding multi-factor authentication, reducing default passwords, and better vulnerability disclosure. Companies like Microsoft and Google are already showing significant progress through monthly technical exchanges and public reporting. While CISA plans to partner with a civil society organization to independently assess companies' progress and launch a website tracking their commitments, it won't remove companies who fail to meet goals - it will instead let their lack of progress be evident through an absence of public updates.

therecord.media · 8 min

TLDR IndexPage 5