Linux Cryptography - Page 15 - Results from #280

Discover Cryptography News

Warning: Undefined property: stdClass::$helix_ultimate_image in /var/www/www.linuxsecurity.com-443/html/templates/newsberg/html/com_content/category/blog_item.php on line 54

Warning: Undefined property: stdClass::$helix_ultimate_image in /var/www/www.linuxsecurity.com-443/html/templates/newsberg/html/com_content/category/blog_item.php on line 55

Microsoft: Emergency Patch for Flame Spyware Digital Signature Threat

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

Some components of the Flame spyware worm were signed using forged Microsoft certificates, according to a recent investigation by Microsoft. These unauthorised digital certificates allowed the Flame developers to make the malware appear as if it was actually created and approved by Microsoft.

LinuxSecurity.com Team
Jun 04, 2012

Best Hardware Encrypted Flash Drives For Secure Data Transport

If you're physically transporting data you don't want other people to see, you should be doing it on secure media. And what better than something that hides easily within a pocket? Secure flash drives that are only about the size of a small cigarette lighter feature robust hardware security to make them super secure. You'll pay a premium for the integrated security, but you can't put a price on the peace of mind you get by knowing that your data is locked down.

LinuxSecurity.com Team
May 25, 2012

Trustworthy Internet Movement Introduces SSL Pulse For SSL Improvements

The Trustworthy Internet Movement has launched SSL Pulse, a "real time" dashboard as part of an initiative to improve the quality of SSL implementations in use on the web. The Trustworthy Internet Movement (TIM) is a non-profit launched by the chairman and CEO of Qualys, Philippe Courtot, in February at the RSA conference. Its next step, it has decided, is to create a TIM SSL Taskforce to look at SSL governance and implementation across the internet.

LinuxSecurity.com Team
May 02, 2012

Ensuring Data Security with Automation in Cloud Architectures

Cloud computing is the ideal environment for processing big data. For databases that scale horizontally, sometimes with a million or more fields and reaching multiple petabytes in size, it's possible to chunk up the data and spread it across hundreds or thousands of servers for parallel processing and analytics. It's an efficient and effective use of cloud technology.

LinuxSecurity.com Team
Apr 09, 2012

University of Toronto Introduces Quantum Encryption Against Hacking

Researchers from the University of Toronto and the University of Vigo believe quantum cryptography is the solution to the hacker problem. They are turning their proof-of-concept into a prototype.

LinuxSecurity.com Team
Apr 05, 2012

Understanding SSH Tunneling As A Low-Cost VPN Solution for Remote Access

"If we see light at the end of the tunnel, it is the light of the oncoming train" ~ Robert Lowell. Oh yes, another good quote. This post is on SSH tunneling, or as I like to call it 'Poor Man's VPN'. Contrary to the sysadmin's popular belief, SSH tunneling actually can be very valuable use for both techies and home users.

LinuxSecurity.com Team
Apr 02, 2012

Bruce Schneier's Testimony on TSA Security Screening Canceled

Bruce Schneier, a vocal critic of security measures used by the Transportation Security Administration, was asked to testify before Congress about TSA's security screening initiatives but then was "formally uninvited" after the agency complained.

LinuxSecurity.com Team
Mar 26, 2012

Effective Encryption Strategies And Key Management For Data Safety

Encryption can make up for a litany of security snafus -- from a bad firewall to an unrelenting hacker to a lost laptop. Once data is encrypted, criminals can't use or sell it. Plus, if encrypted data goes missing, companies are protected from disclosure requirements in most states.

LinuxSecurity.com Team
Mar 26, 2012

Analysis of Mediyes Malware and Conpavi AG Certificate Key Theft

When Kaspersky Lab last week spotted code-signed Trojan malware dubbed Mediyes that had been signed with a digital certificate owned by Swiss firm Conpavi AG and issued by Symantec, it touched off a hunt to determine the source of the problem.

LinuxSecurity.com Team
Mar 19, 2012

Challenges In Mobile Security: Cryptographic Implementation Insights

Immaturity in mobile device hardware and operating system environments is holding back organizations' deployments of strong cryptographic protections around mobile applications, according to a pair of unrelated presentations at the RSA Conference last week.

LinuxSecurity.com Team
Mar 09, 2012

Exploring Quantum Encryption for Secure Messaging Against Cyber Threats

No matter how complex they are, most secret codes turn out to be breakable. Producing the ultimate secure code may require encoding a secret message inside the quantum relationship between atoms, scientists say.

LinuxSecurity.com Team
Feb 22, 2012

Analysis Reveals Weak Key Generation in SSL Protocols Identified

Analysis Cryptography researchers have discovered flaws in the key generation that underpins the security of important cryptography protocols, including SSL.

LinuxSecurity.com Team
Feb 16, 2012

Duplicate RSA Keys Found in X.509 Certificates by Researchers

Cryptography researchers collected millions of X.509 public key certificates that are publicly available over the web and found what they say is a shockingly high frequency of duplicate RSA-moduli keys.

LinuxSecurity.com Team
Feb 15, 2012

Trustwave: Subordinate Root Certificate Raises SSL Security Issues

Digital Certificate Authority (CA) Trustwave revealed that it has issued a digital certificate that enabled an unnamed private company to spy on SSL-protected connections within its corporate network, an action that prompted the Mozilla community to debate whether the CA's root certificate should be removed from Firefox.

LinuxSecurity.com Team
Feb 08, 2012

OpenDNS's DNSCrypt: Secure Your DNS Traffic With Encryption

DNS service provider OpenDNS has announced a preview release of a new open source tool to improve internet security: DNSCrypt encrypts all DNS traffic between a user's system and a DNS server. The tool is currently only available for the Mac, with a Windows version promised, and only works with OpenDNS's own DNS service.

LinuxSecurity.com Team
Dec 08, 2011

KPN: Security Incident Stops SSL Certificate Transactions Immediately

The largest telecommunications company in the Netherlands has stopped issuing SSL (Secure Sockets Layer) certificates after finding indications that the website used for purchasing the certificates may have been hacked.

LinuxSecurity.com Team
Nov 07, 2011

THC-SSL-DOS Tool: Effortless DoS Attacks Against SSL Servers

A hacker group has released a proof-of-concept tool that exploits how encryption keys can be renegotiated to launch a distributed denial of service attack against Secure Sockets Layer servers.

LinuxSecurity.com Team
Oct 26, 2011

XML Encryption Flaw Exposes Web Services To Security Risks

Watch your Web Services: the official XML Encryption Syntax and Processing standard can be broken. So say two researchers from Ruhr-University Bochum in Germany, who have demonstrated a practical attack against XML's cipher block chaining (CBC) mode.

LinuxSecurity.com Team
Oct 25, 2011

Gmail Default Encryption: Enhanced Privacy For User Searches

Google is extending SSL encryption security to search traffic for all logged-in Gmail users, the company has announced. The key phrase here is 'by default' because it has been possible for Google search users to access encrypted search manually since May of last year using the https://www.google.com/ site.

LinuxSecurity.com Team
Oct 21, 2011

Moxie Marlinspike Proposes Convergence Solution For SSL Certificates

The SSL certificate authorities like Comodo that have had their security undermined by hackers shouldn't be trusted, and in fact, the way the entire SSL certificate industry of today works can and should be replaced with something better, says Moxie Marlinspike, a security expert who's come up with a plan he says will do that.

LinuxSecurity.com Team
Oct 13, 2011

Community Poll

More Polls

Linux Cryptography - Page 15

Linux Kernel Gains Hardware-Wrapped Encryption Keys

When Security Hinges on a Single Key: A Wake-Up Call for Admins

IPFire 2.29 Core Update 193: Key Improvements in Security and Defense