from Hacker News

Java 15 introduced a cryptographic vulnerability

by TwoFactor on 4/20/22, 12:57 PM with 7 comments

• by tptacek on 4/20/22, 2:27 PM

  Submitted last night:

  https://news.ycombinator.com/item?id=31089216

• by rwbhn on 4/20/22, 1:45 PM

  This referenced article is better: https://neilmadden.blog/2022/04/19/psychic-signatures-in-jav...

• by lallysingh on 4/20/22, 1:28 PM

  > Madden points out that the affected versions of Java fail to check that two key variables in the ECDSA are not tested to ensure they’re non-zero.

  Who writes this garbage? How many negations does a sentence need?