Linux Cryptography - Page 13 - Results from #240

Discover Cryptography News

Warning: Undefined property: stdClass::$helix_ultimate_image in /var/www/www.linuxsecurity.com-443/html/templates/newsberg/html/com_content/category/blog_item.php on line 54

Warning: Undefined property: stdClass::$helix_ultimate_image in /var/www/www.linuxsecurity.com-443/html/templates/newsberg/html/com_content/category/blog_item.php on line 55

Data Aggregators Hacked: Authentication Security at Risk

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

The reported hack of major consumer and business data aggregators has intensified doubts of the reliability of knowledge-based authentication widely used in the financial services industry, analysts say.

LinuxSecurity.com Team
Oct 01, 2013

RSA Advisory on NSA's Dual_EC_DRBG Random Generator - Security Risk

Security biz RSA has reportedly warned its customers to stop using the default random-number generator in its encryption products - amid fears spooks can easily crack data secured by the algorithm.

LinuxSecurity.com Team
Sep 27, 2013

Exploring Quantum Entanglement For Enhanced Data Security

Quantum cryptography has yet to deliver a truly unbreakable way of sending messages. Quantum entanglement may change that. RECENT revelations of online snooping on an epic scale, by government agencies which may well have been breaking the law, have prompted some users of the internet to ask who you can trust with sensitive data these days.

LinuxSecurity.com Team
Sep 20, 2013

Cryptographers Unite Against NSA's Erosion of Encryption Standards

Cryptographers are fighting back against efforts by spy agencies to secretly weaken the encryption standards designed to keep the Internet secure.

LinuxSecurity.com Team
Sep 17, 2013

Examining NSA Surveillance: Trust Erosion and Its Impact on Perception

I've recently seen two articles speculating on the NSA's capability, and practice, of spying on members of Congress and other elected officials. The evidence is all circumstantial and smacks of conspiracy thinking -- and I have no idea whether any of it is true or not -- but it's a good illustration of what happens when trust in a public institution fails.

LinuxSecurity.com Team
Sep 06, 2013

Cryptopalypse: Trust in Online Systems Erodes as Encryption Fails

The Internet, and many forms of online commerce and communication that depend on it, may be on the brink of a "cryptopalypse" resulting from the collapse of decades-old methods of shared encryption.

LinuxSecurity.com Team
Aug 19, 2013

Phil Zimmermann Discusses Privacy, Big Data, and Security Issues

Phil Zimmermann, creator of PGP, in a wide-ranging interview talks about the corrupting nature of big data, the end of privacy and the rise of the surveillance society. He also shared his thoughts on Moore

LinuxSecurity.com Team
Aug 12, 2013

Matthew Green Discusses Crypto Advances and BREACH Attack Insights

Dennis Fisher talks with Matthew Green of Johns Hopkins University about the crypto advances in recent years, the BREACH attack revealed at Black Hat and whether it

LinuxSecurity.com Team
Aug 09, 2013

Two-Factor Authentication for Twitter Using RSA Keypair

Twitter just rolled out a pretty nice two-factor authentication system using your smart phone as the second factor: The new two-factor system works like this. A user enrolls using the mobile app, which generates a 2048-bit RSA keypair. The private key lives on the phone itself, and the public key is uploaded to Twitter

LinuxSecurity.com Team
Aug 08, 2013

Tor Exploit Reveals Malware Threats to Anonymous User Data

Some of the people who were most concerned about Internet privacy, and we're using the Tor anonymous Internet service to protect it, may have been the most exposed.

LinuxSecurity.com Team
Aug 05, 2013

Preventing SSH Brute Force Attacks and Strengthening Weak Passwords

One common and stupidly simple way hosts are compromissed is weak SSH passwords. You would think people have learned by now, but evidently there are still enough systems with root passwords like 12345 around to make scanning for them a worthwhile exercise.

LinuxSecurity.com Team
Jul 26, 2013

US Government Push for Master Encryption Keys Raises Security Concerns

Whether the FBI and NSA have the legal authority to obtain the master keys that companies use for Web encryption remains an open question, but it hasn't stopped the U.S. government from trying.

LinuxSecurity.com Team
Jul 24, 2013

NSA's Cryptanalysts Decoded Kryptos Sculpture Before CIA's Attempts

It took more than eight years for a CIA analyst and a California computer scientist to crack three of the four coded messages on the CIA

LinuxSecurity.com Team
Jul 11, 2013

Encryption Challenges Wiretap Surveillance Efforts in the U.S.

For the first time, encryption is thwarting government surveillance efforts through court-approved wiretaps, U.S. officials said today.

LinuxSecurity.com Team
Jul 01, 2013

Banking SMS Authentication Hijacking Risk: Bugat Trojan Analysis

Out of band authentication

LinuxSecurity.com Team
Jun 28, 2013

Opera Code-Signing Breach: Malware Threat for Windows Users

Opera Software said Wednesday hackers pilfered from its internal systems at least one code-signing certificate that was used to sign malicious software.

LinuxSecurity.com Team
Jun 27, 2013

David Stein's Eight-Year Journey to Decode the Kryptos Sculpture

It took eight years after artist Jim Sanborn unveiled his cryptographic sculpture at the CIA

LinuxSecurity.com Team
Jun 26, 2013

Microsoft EMET 4.0 Overview: Enhanced SSL Attack Detection and Mitigation

Microsoft has taught version 4.0 of the Windows mitigation tool EMET some new tricks. It now detects attacks that attempt to eavesdrop on encrypted connections and is better at thwarting return-oriented programming (ROP) attacks.

LinuxSecurity.com Team
Jun 20, 2013

Apple's Increased Transparency on U.S. User-Info Requests

Apple says it has end-to-end encryption for iMessage and FaceTime communications, but users should not interpret that as providing an ironclad defense against government snooping.

LinuxSecurity.com Team
Jun 19, 2013

SSLyze v0.6: Analyze SSL Server Configurations Effectively

SSLyze is a Python tool that can analyze the SSL configuration of a server by connecting to it. It is designed to be fast and comprehensive, and should help organizations and testers identify misconfigurations affecting their SSL servers.

LinuxSecurity.com Team
Apr 22, 2013

Community Poll

More Polls

Linux Cryptography - Page 13

Linux Kernel Gains Hardware-Wrapped Encryption Keys

When Security Hinges on a Single Key: A Wake-Up Call for Admins

IPFire 2.29 Core Update 193: Key Improvements in Security and Defense