TrueCrypt Audit Results: No Backdoors Found In Cryptanalysis
The results are in from the cryptanalysis phase of the TrueCrypt audit, and they show
Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Linux Cryptography - Page 8
We have thousands of posts on a wide variety of open source and security topics, conveniently organized for searching or just browsing.
Linux Kernel Gains Hardware-Wrapped Encryption Keys
Let’s dive into the latest leap for Linux security: hardware-wrapped inline encryption keys. You might have heard about this feature making its way into the mainline Linux kernel with version 6.16. It's a fascinating piece of technology, particularly...
When Security Hinges on a Single Key: A Wake-Up Call for Admins
Admins managing Linux systems know firsthand that secur...
IPFire 2.29 Core Update 193: Key Improvements in Security and Defense
The latest IPFire 2.29 Core Update 193 releas...
Discover Cryptography News
Firefox Introduces Opportunistic Encryption For Enhanced Web Security
Developers of the Firefox browser have moved one step closer to an Internet that encrypts all the world's traffic with a new feature that can cryptographically protect connections even when servers don't support the HTTPS protocol.
Wikipedia's Advocacy Against NSA Surveillance And Privacy Rights
On March 10, Wikipedia took a stand for its users, in particular its anonymous volunteers, and sued the NSA, accusing it of mass surveillance.
RHEL: Critical OpenSSL Patches Needed Now to Mitigate Serious Risks
At first glance, you might not think that the latest set of OpenSSL security patches are that important. Sure, there's a dozen of them and two are serious, but are they really that bad? Yes, actually they're not just bad, they're awful.
Methods to Compromise Encryption Systems and Backdoors Explored
In the field of cryptography, a secretly planted
Yahoo's Email Encryption Plugin Code Awaits Expert Review For Security
Yahoo released the source code for a plugin that will enable end-to-end encryption of email messages, a planned data-security improvement prompted by disclosures of U.S. National Security Agency snooping.
OpenSSL: FREAK Attack Advisory - Weakened Encryption Risk
For the nth time in the last couple of years, security experts are warning about a new Internet-scale vulnerability, this time in some popular SSL clients. The flaw allows an attacker to force clients to downgrade to weakened ciphers and break their supposedly encrypted communications through a man-in-the-middle attack.
Gemalto: 2010-2011 Attack Confirmation and Possible NSA Role
Gemalto, the Dutch maker of billions of mobile phone SIM cards, confirmed this morning that it was the target of attacks in 2010 and 2011
Yahoo CISO Stamos Challenges NSA Director Over Encryption Backdoor Policies
Echoing the concerns many US-based technology companies have about US-led surveillance programs, Yahoo Chief Information Security Officer Alex Stamos asked the director of the National Security Agency some pointed questions concerning proposed or existing backdoors placed in encryption technologies.
Lenovo: Superfish Man-In-The-Middle Risk From Password Crack
Lenovo laptop owners are at risk for man-in-the-middle attacks as a vulnerability disclosed in pre-installed Superfish adware went nuclear this morning.
HARES Software Protection: Innovative Anti-Reverse Engineering Method
Software reverse engineering, the art of pulling programs apart to figure out how they work, is what makes it possible for sophisticated hackers to scour code for exploitable bugs. It
SSL's Status Declared: Implications for Data Protection Standards
On January 30, 2015, QSAs received the latest edition of the Council
GnuPG Funding: New Opportunities And Challenges After Significant Support
For almost two decades, the open source GnuPG encryption project has teetered on the brink of insolvency. Now, following word of that plight, the lone developer keeping the project alive has received more than $135,000
Challenges Facing Werner Koch In Funding Gnu Privacy Guard Project
The man who built the free email encryption software used by whistleblower Edward Snowden, as well as hundreds of thousands of journalists, dissidents and security-minded people around the world, is running out of money to keep his project alive.
Ensure Digital Safety By Verifying Crypto Applications Against Backdoors
At the beginning of the year, I did something I've never done before: I made a new year's resolution. From here on out, I pledged, I would install only digitally signed software I could verify hadn't been tampered with by someone sitting between me and the website that made it available for download.
Understanding Backdoor Risks in RSA Key Creation and Encryption
Hello, %username%! When I saw how it works, say that I was shocked is to say nothing. It's a pretty simple trick, but after reading this article, you will never look at the RSA as before. This is not a way to hijack RSA, but something that will make your paranoia greatly swell.
Cameron Comments on Encryption Impacting Crime Prevention
Comments this week by UK prime minister David Cameron have re-ignited the debate about how to weigh individuals' online privacy against the needs of law enforcement to be able to detect and prevent crime.
OpenSSL Updates Resolve Low Severity Issues: Denial Of Service Risks
OpenSSL has squashed eight low severity vulnerabilities bugs that could result in denial of service or the removal of forward secrecy. The holes, two graded "moderate", were addressed in OpenSSL updates 1.0.0p, 0.98zd, and 1.0.1k.
OphionLocker Ransomware: Bitcoin Demands via Elliptic Encryption
Cybercrooks have brewed a strain of ransomware that uses elliptic curve cryptography for file encryption, and Tor for communication. The malware, dubbed OphionLocker, is spreading using a malicious advertising (malvertising) campaign featuring the RIG exploit kit.
Upcoming Firefox Enhancement: Certificate Transparency Feature
Mozilla is planning to add support for Certificate Transparency checks in Firefox in the near future, but the company says that the feature won
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!