Hackers can use blank signatures to pass ECDSA verification checks in Java

A failure to sanity check signatures for division-by-zero flaws makes forgeries easy. Read more

Similar

Amazon Joins Java Community Process (JCP)

Amazon runs thousands of Java production services; both we and our customers depend heavily on  various distributions of the JDK (Java Development Kit). In 2016 we started building Amazon Corretto, our OpenJDK binary distribution, and started using it to ... (more…)

Read more »

Measuring Time: From Java to Kernel and Back

Problem Statement Even the most basic problems become interesting when you dig deep enough. Today, I would like to do a deep dive into measuring time in Java. We will start with the very basics of the Java API and gradually move lower in our stack: throug... (more…)

Read more »