This magazine is from a federated server and may be incomplete. Browse more on the original instance.
Today, 16 years ago, Debian published a security advisory announcing CVE-2008-0166, a severe bug in their OpenSSL package that effectively broke the random number generator and limited the key space to a few ten thousand keys. The vulnerability affected Debian+Ubuntu between 2006 and 2008. In 2007, an email signature system...
cross-posted from: lemmy.ml/post/15178977...
There’s a server, a client, and a hacker in a network. For encryption, the client and the server need to share their private keys. Wouldn’t the hacker be able to grab those during their transmission and decrypt further messages as they please?
cross-posted from: infosec.pub/post/11554206...
cross-posted from: infosec.pub/post/11143989...
cross-posted from: infosec.pub/post/10912691...
discuss.systems/
wetdry.world/@ari/112230288896956003
The XZ Utils backdoor, discovered last week, and the Heartbleed security vulnerability ten years ago, share the same ultimate root cause. Both of them, and in fact all critical infrastructure open source projects, should be fixed with the same solution: ensure baseline funding for proper open source maintenance.
Spain’s High Court has ordered the suspension of messaging app Telegram’s services in the country after media companies complained it was allowing users to upload their content without permission, according to a court source....
Today, almost everything about our lives is digitally recorded and stored somewhere. Each credit card purchase, personal medical diagnosis, and preference about music and books is recorded and then used to predict what we like and dislike, and—ultimately—who we are....
