Cryptography – Page 7 – PossibleThreat Articles

OpenSSH goes Post-Quantum, switches to qubit-busting crypto by default

April 11, 2022 0 Comments Cryptography, ntru prime, openssh, Quantum Computing

Credit to Author: Paul Ducklin| Date: Mon, 11 Apr 2022 16:58:13 +0000

Useful quantum computers might not actually be possible. But what if they are? And what if they arrive, say, tomorrow?

S3 Ep75: Okta hack, CryptoRom, OpenSSL, and CafePress [Podcast]

March 24, 2022 0 Comments cafepress, Cryptography, data breach, data loss, FTC, lapsus, malware, Naked Security Podcast, Podcast, vulnerability

Credit to Author: Paul Ducklin| Date: Thu, 24 Mar 2022 13:49:08 +0000

Latest episode – listen now!

Security Sophos

OpenSSL patches infinite-loop DoS bug in certificate verification

March 18, 2022 0 Comments Cryptography, cve-2022-0778, DOS, OpenSSL, ormandy, vulnerability

Credit to Author: Paul Ducklin| Date: Fri, 18 Mar 2022 17:59:17 +0000

When it comes to writing loops in your code… never sit on the fence!

Security Sophos

Self-styled “Crocodile of Wall Street” arrested with husband over Bitcoin megaheist

February 9, 2022 0 Comments big bitcoin heist, bitcoin, btc, bust, cryptocurrency, Cryptography, doj, Law & order, quantum cryptography

Credit to Author: Paul Ducklin| Date: Wed, 09 Feb 2022 14:44:04 +0000

The cops say they’ve recovered 80% of a $72 million cryptocoin heist… but the recovered funds alone are now worth over $4 billion!

Security Sophos

Report calls for web pre-screening to end UK’s child abuse ‘explosion’

March 17, 2020 0 Comments age verification, chat apps, child abuse, child abuse imagery, child porn, child safety, children online, Cryptography, encryption, facebook, facetime, iicsa, imessage, Instagram, Law & order, messaging, Messenger, online grooming, online safety, photodna, predators, Privacy, snapchat, whatsapp, yubo

Credit to Author: Lisa Vaas| Date: Mon, 16 Mar 2020 11:57:40 +0000

The IICSA report cited “unprecedented levels of depravity” and said that encryption is getting in the way of current screening.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/ELFeXrr3UeQ” height=”1″ width=”1″ alt=””/>

Security Sophos

EARN IT Act threatens end-to-end encryption

March 17, 2020 0 Comments #nobackdoors, backdoor, backdoors, communications decency act, Cryptography, earn it act, earn-it, encryption, end-to-end encryption, Government security, Law & order, no backdoors, section 230

Credit to Author: Lisa Vaas| Date: Fri, 13 Mar 2020 13:12:27 +0000

The bill, which would undercut Section 230 protections for online publishing, presents itself as a way to stop online child abuse.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/SqOImXCXz8A” height=”1″ width=”1″ alt=””/>

Security Sophos

Let’s Encrypt issues one billionth free certificate

March 2, 2020 0 Comments acme, automated certificate management environment, Cisco, Cryptography, digital certificates, EFF, Electronic Frontier Foundation, facebook, Google, http, https, ietf, internet engineering task force, internet security research group, internet society, isrg, lets encrypt, Mozilla, ovh

Credit to Author: Danny Bradbury| Date: Mon, 02 Mar 2020 13:06:25 +0000

Thanks to this flood of free certificates, the web is a lot more encrypted than it was a few years ago.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/m_p5aVh50cI” height=”1″ width=”1″ alt=””/>

Security Sophos

Switch to Signal for encrypted messaging, EC tells staff

February 26, 2020 0 Comments chat apps, Cryptography, cyber espionage, data loss, european commission, Law & order, messaging, messaging apps, Mobile, pegasus, Privacy, secret messaging, security threats, signal, spying, whatsapp

Credit to Author: Lisa Vaas| Date: Wed, 26 Feb 2020 11:31:35 +0000

Formerly preferred diplomatic app WhatsApp apparently isn’t up to snuff.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/mRJrv_YSfXw” height=”1″ width=”1″ alt=””/>

Security Sophos

SSL/TLS certificate validity chopped down to one year by Apple’s Safari

February 25, 2020 0 Comments Apple, Apple Safari, ca/browser forum, certificate authorities, Cryptography, Google, https, Privacy, Safari, security threats, sha-1, ssl/tls, TLS, tls certificates, Web Browsers

Credit to Author: John E Dunn| Date: Mon, 24 Feb 2020 11:42:33 +0000

From 1 September 2020, Safari will no longer trust SSL/TLS certificates with more than a year on the clock.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/cpkLvAwmg9A” height=”1″ width=”1″ alt=””/>

Security Sophos

Apple chops Safari’s TLS certificate validity down to one year

February 24, 2020 0 Comments Apple, Apple Safari, ca/browser forum, certificate authorities, Cryptography, Google, https, Privacy, Safari, security threats, sha-1, ssl/tls, TLS, tls certificates, Web Browsers

Credit to Author: John E Dunn| Date: Mon, 24 Feb 2020 11:42:33 +0000