Home Assistant tokens stay valid after password changes
Cleartext refresh secrets, non-expiring long-lived tokens, and backup restore behavior leave durable access even when users change passwords.
By tarpit#disclosure
gpg.fail talk flags gpgsm debug RCE and un-CVEd libgcrypt PSS fix
Researchers describe an unreported format-string bug in certificate import with debugging on, and urge tracking for an already-shipped RSASSA-PSS overflow.
By nonce