@HomeSen said:
Well, to be fair, it’s a quite subtle issue. And many people still don’t know that kind of attack (even though it already is quite old)
whenever i see critical functionality (i.e. protecting confidentiality, integrity, availability) implemented by hand (as in contrast to using a well tested and verified library) some alarm goes off 