Linux Cryptography - Page 17 - Results from #320

Discover Cryptography News

Warning: Undefined property: stdClass::$helix_ultimate_image in /var/www/www.linuxsecurity.com-443/html/templates/newsberg/html/com_content/category/blog_item.php on line 54

Warning: Undefined property: stdClass::$helix_ultimate_image in /var/www/www.linuxsecurity.com-443/html/templates/newsberg/html/com_content/category/blog_item.php on line 55

Analysis of SSL Breaches and Security Flaws Over Recent Years

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

Every year or so, a crisis or three exposes deep fractures in the system that's supposed to serve as the internet's foundation of trust. In 2008, it was the devastating weakness in SSL, or secure sockets layer, certificates issued by a subsidiary of VeriSign.

LinuxSecurity.com Team
Apr 11, 2011

Understanding Data Encryption in Enterprise Mobility at VentureBeat Summit

This discussion about enterprise mobility is one of the five themes we will be focusing on at theVentureBeat Mobile Summit, on April 25-26. We

LinuxSecurity.com Team
Apr 07, 2011

Hackers Exploit Internet Design Flaw: Major Web Encryption Violation

A long-known but little-discussed vulnerability in the modern Internet's design was highlighted yesterday by a report that hackers traced to Iran spoofed the encryption procedures used to secure connections to Google, Yahoo, Microsoft, and other major Web sites.

LinuxSecurity.com Team
Mar 24, 2011

Evaluating Security Flaws In Token-Based Authentication Methods

Alternative tokenless 2FA technologies may offer much greater levels of security, especially in light of the recent news that hackers have stolen data related to RSA secure tokens

LinuxSecurity.com Team
Mar 23, 2011

Comodo SSL Breach Forces Urgent Browser Updates for Security Fixes

According to Tor developer Jacob Appelbaum and a blog posting by the Mozilla Foundation, the Comodo SSL Certification Authority may have been compromised. As a consequence, criminals apparently obtained nine certificates for web sites that already existed, including addons.mozilla.org.

LinuxSecurity.com Team
Mar 23, 2011

Google Services Require SSL Encryption For API Requests

API requests for Google Documents List, Google Spreadsheets, and Google Sites will be required to use secure sockets layer connections.

LinuxSecurity.com Team
Mar 21, 2011

STARTTLS Command Injection Threats in SMTP: Insights from Venema

Vulnerabilities in implementations of the STARTTLS protocol for establishing an encrypted TLS connection could allow commands to be injected into a connection. According to a description by the discoverer of the problem, Postfix developer Wietse Venema, the key point is that commands are injected into the connection before it has been secured/encrypted, but are only executed once the secure connection has been established.

LinuxSecurity.com Team
Mar 08, 2011

Understanding P2P Encryption Security for PCI Compliance

The most secure P2PE option is to replace existing payment terminals with newer hardware devices offering built-in encryption capabilities. With encryption at the read head, all mag stripe data is encrypted on the hardware terminal itself as soon as the consumer swipes his or her card. No readable data ever leaves the unit, eliminating the risk of theft as it traverses the merchant network. This strategy completely defuses the threat of online attacks.

LinuxSecurity.com Team
Mar 01, 2011

Exploring Pervasive Memory Scraping Threats And Their Security Risks

What's "pervasive memory scraping" and why is it considered by SANS Institute security researchers to be among the most dangerous attack techniques likely to be used in coming the coming year?

LinuxSecurity.com Team
Feb 23, 2011

Helzberg Diamonds Tokenization for PCI Compliance and Data Protection

Florian Yanez, manager of technical systems for Helzberg Diamonds, is among those attending RSA Conference 2011. CSO recently caught up with him for a discussion on his company's efforts to adopt tokens as a way to address PCI DSS' rules on stored customer data.

LinuxSecurity.com Team
Feb 15, 2011

SSLShading Enhances Web Security Against Cyber Threats Like Firesheep

Researchers have found a cheaper, faster way to process SSL/TLS with off-the-shelf hardware, a development that could let more Web sites shut down cyber threats posed by the likes of the Firesheep hijacking tool.

LinuxSecurity.com Team
Jan 26, 2011

OpenSSH 5.7: Key Enhancements In Security And Performance Features

OpenSSH 5.7 has just been released. OpenSSH is a 100% complete SSH protocol version 1.3, 1.5 and 2.0 implementation and includes sftp client and server support. Read on for a description of the improvements, including Elliptic Curve Cryptography, sftp performance improvements, and much more.

LinuxSecurity.com Team
Jan 24, 2011

SHA-1 Exploit By Thomas Roth: Cloud Services And Wireless Security

A hacker claims he's used Amazon's cloud services to bust open SHA-1, a wireless network security standard, and he says he'll be demonstrating his process at an upcoming Black Hat get-together. Malicious hackers could quickly set up brute-force attack systems using the cloud, but critics say real-world password cracks might not come so easily.

LinuxSecurity.com Team
Jan 12, 2011

US Federal Policy Changes On Open-Source Encryption Exports

Federal restrictions will be relaxed on the export of open-source software that incorporates strong encryption, the US government announced on Friday in a lengthy disclosure. The effect of the changes announced in the US Federal Register is that cryptography software now may be exported to Cuba, Iran, North Korea, Syria, and Sudan as long as the source code from which it was derived is already

LinuxSecurity.com Team
Jan 07, 2011

DNS Security Study: 0.02% Domains Signed With DNSSEC, Major Threats

Use of the Domain Name System Security Extensions (DNSSEC) specifications for securing domain names increased by 340% from 2009 to 2010. Even so, only 0.02% of Internet zones are now being signed with DNSSEC, and 23% of those are using expired signatures.

LinuxSecurity.com Team
Dec 08, 2010

Chrome's SSL False Start Feature Improves Secure Web Connections

Google has begun shipping a feature called False Start in its Chrome browser to speed up secure communications. False Start essentially cuts out one set of the back-and-forth conversation needed to set up a secure channel between a Web browser and Web pages.

LinuxSecurity.com Team
Dec 07, 2010

Mobile Security Card VE 2.0: Protecting Voice Calls with Strong Encryption

Giesecke & Devrient (G&D) is introducing a new microSD card to prevent cell phone tapping. The Mobile Security Card VE 2.0 contains a cryptocontroller which encrypts cell phone conversations and securely authenticates the user. The microSD card was developed by Giesecke & Devrient Secure Flash Solutions (G&D SFS), a joint venture of G&D and Phison Electronics.

LinuxSecurity.com Team
Nov 30, 2010

The History of A5/2 Algorithm Withdrawal from GSM Networks

Recently, I wanted to investigate when and how A5/2 has been withdrawn from both GSM networks and GSM phones alike. Unfortunately there was no existing article discussing this history online, so I went through dozens of meeting reports and other documents that I could find online to recover what had happened.

LinuxSecurity.com Team
Nov 26, 2010

OpenSSL: Important Patch for TLS Server Remote Execution Risk

Red Hat security team rates the vulnerability 'important'. The OpenSSL server has now been patched to fix a critical flaw which could be used to remotely execute code or cause an application to crash.

LinuxSecurity.com Team
Nov 22, 2010

Amazon EC2 Cluster GPU Instance: Supercomputer Power For Every Task

Calling it a "nuclear-powered bulldozer", yesterday, Amazon announced and blogged about its newest cloud infrastructure service, the "Cluster GPU Instance", which delivers supercomputer calculation power for as little as $2.10 per hour. The new instance type employs the same NVIDIA Tesla processor used in three of the five fastest supercomputers.

LinuxSecurity.com Team
Nov 18, 2010

Community Poll

More Polls

Linux Cryptography - Page 17

Linux Kernel Gains Hardware-Wrapped Encryption Keys

When Security Hinges on a Single Key: A Wake-Up Call for Admins

IPFire 2.29 Core Update 193: Key Improvements in Security and Defense