Category: Security technology

Auto Added by WPeMatico

Dark Web Site Taken Down without Breaking Encryption

Posted on By infossl
bitcoin, childpornography, cryptocurrency, cryptography, darkweb, forensics, Security technology

The US Department of Justice unraveled a dark web child-porn website, leading to the arrest of 337 people in at least 18 countries. This was all accomplished not through any backdoors in communications systems, but by analyzing the bitcoin transactions and following the money: Welcome to Video made money by charging fees in bitcoin, and … Read More “Dark Web Site Taken Down without Breaking Encryption” »

Mapping Security and Privacy Research across the Decades

Posted on By infossl
academicpapers, computersecurity, historyofsecurity, privacy, Security technology

This is really interesting: “A Data-Driven Reflection on 36 Years of Security and Privacy Research,” by Aniqua Baset and Tamara Denning: Abstract: Meta-research—research about research—allows us, as a community, to examine trends in our research and make informed decisions regarding the course of our future research activities. Additionally, overviews of past research are particularly useful … Read More “Mapping Security and Privacy Research across the Decades” »

NordVPN Breached

Posted on By infossl
breaches, certificates, cryptography, disclosure, encryption, keys, Security technology, vpn

There was a successful attack against NordVPN: Based on the command log, another of the leaked secret keys appeared to secure a private certificate authority that NordVPN used to issue digital certificates. Those certificates might be issued for other servers in NordVPN’s network or for a variety of other sensitive purposes. The name of the … Read More “NordVPN Breached” »

Public Voice Launches Petition for an International Moratorium on Using Facial Recognition for Mass Surveillance

Posted on By infossl
biometrics, facerecognition, privacy, Security technology, surveillance

Coming out of the Privacy Commissioners’ Conference in Albania, Public Voice is launching a petition for an international moratorium on using facial recognition software for mass surveillance. You can sign on as an individual or an organization. I did. You should as well. No, I don’t think that countries will magically adopt this moratorium. But … Read More “Public Voice Launches Petition for an International Moratorium on Using Facial Recognition for Mass Surveillance” »

Calculating the Benefits of the Advanced Encryption Standard

Posted on By infossl
aes, cryptography, historyofcryptography, nist, Security technology

NIST has completed a study — it was published last year, but I just saw it recently — calculating the costs and benefits of the Advanced Encryption Standard. From the conclusion: The result of performing that operation on the series of cumulated benefits extrapolated for the 169 survey respondents finds that present value of benefits … Read More “Calculating the Benefits of the Advanced Encryption Standard” »

Why Technologists Need to Get Involved in Public Policy

Posted on By infossl
publicinterest, schneiernews, Security technology, video

Last month, I gave a 15-minute talk in London titled: “Why technologists need to get involved in public policy.” In it, I try to make the case for public-interest technologists. (I also maintain a public-interest tech resources page, which has pretty much everything I can find in this space. If I’m missing something, please let … Read More “Why Technologists Need to Get Involved in Public Policy” »

Adding a Hardware Backdoor to a Networked Computer

Posted on By infossl
backdoors, firewall, hacking, hardware, Security technology, spyware, supplychain

Interesting proof of concept: At the CS3sthlm security conference later this month, security researcher Monta Elkins will show how he created a proof-of-concept version of that hardware hack in his basement. He intends to demonstrate just how easily spies, criminals, or saboteurs with even minimal skills, working on a shoestring budget, can plant a chip … Read More “Adding a Hardware Backdoor to a Networked Computer” »

Using Machine Learning to Detect IP Hijacking

Posted on By infossl
academicpapers, bgp, crime, machinelearning, Security technology

This is interesting research: In a BGP hijack, a malicious actor convinces nearby networks that the best path to reach a specific IP address is through their network. That’s unfortunately not very hard to do, since BGP itself doesn’t have any security procedures for validating that a message is actually coming from the place it … Read More “Using Machine Learning to Detect IP Hijacking” »