Category: Uncategorized

Auto Added by WPeMatico

Breaking the Zeppelin Ransomware Encryption Scheme

Posted on By infossl
cryptanalysis, cybersecurity, encryption, ransomware, Security technology, Uncategorized

Brian Krebs writes about how the Zeppelin ransomware encryption scheme was broken: The researchers said their break came when they understood that while Zeppelin used three different types of encryption keys to encrypt files, they could undo the whole scheme by factoring or computing just one of them: An ephemeral RSA-512 public key that is … Read More “Breaking the Zeppelin Ransomware Encryption Scheme” »

Friday Squid Blogging: Squid Brains

Posted on By infossl
Security technology, squid, Uncategorized

Researchers have new evidence of how squid brains develop: Researchers from the FAS Center for Systems Biology describe how they used a new live-imaging technique to watch neurons being created in the embryo in almost real-time. They were then able to track those cells through the development of the nervous system in the retina. What … Read More “Friday Squid Blogging: Squid Brains” »

First Review of A Hacker’s Mind

Posted on By infossl
A Hacker's Mind, Schneier news, Security technology, Uncategorized

Kirkus reviews A Hacker’s Mind: A cybersecurity expert examines how the powerful game whatever system is put before them, leaving it to others to cover the cost. Schneier, a professor at Harvard Kennedy School and author of such books as Data and Goliath and Click Here To Kill Everybody, regularly challenges his students to write … Read More “First Review of A Hacker’s Mind” »

Successful Hack of Time-Triggered Ethernet

Posted on By infossl
cyberattack, embedded systems, hardware, Security technology, spoofing, Uncategorized

Time-triggered Ethernet (TTE) is used in spacecraft, basically to use the same hardware to process traffic with different timing and criticality. Researchers have defeated it: On Tuesday, researchers published findings that, for the first time, break TTE’s isolation guarantees. The result is PCspooF, an attack that allows a single non-critical device connected to a single … Read More “Successful Hack of Time-Triggered Ethernet” »

Failures in Twitter’s Two-Factor Authentication System

Posted on By infossl
authentication, cybersecurity, passwords, Security technology, sms, twitter, two-factor authentication, Uncategorized, vulnerabilities

Twitter is having intermittent problems with its two-factor authentication system: Not all users are having problems receiving SMS authentication codes, and those who rely on an authenticator app or physical authentication token to secure their Twitter account may not have reason to test the mechanism. But users have been self-reporting issues on Twitter since the … Read More “Failures in Twitter’s Two-Factor Authentication System” »

Russian Software Company Pretending to Be American

Posted on By infossl
russia, Security technology, smartphones, supply chain, Uncategorized

Computer code developed by a company called Pushwoosh is in about 8,000 Apple and Google smartphone apps. The company pretends to be American when it is actually Russian. According to company documents publicly filed in Russia and reviewed by Reuters, Pushwoosh is headquartered in the Siberian town of Novosibirsk, where it is registered as a … Read More “Russian Software Company Pretending to Be American” »

Another Event-Related Spyware App

Posted on By infossl
cyberweapons, egypt, Security technology, smartphones, spyware, Uncategorized

Last month, we were warned not to install Qatar’s World Cup app because it was spyware. This month, it’s Egypt’s COP27 Summit app: The app is being promoted as a tool to help attendees navigate the event. But it risks giving the Egyptian government permission to read users’ emails and messages. Even messages shared via … Read More “Another Event-Related Spyware App” »

New Book: A Hacker’s Mind

Posted on By infossl
A Hacker's Mind, books, Schneier news, Security technology, Uncategorized

I have a new book coming out in February. It’s about hacking. A Hacker’s Mind: How the Powerful Bend Society’s Rules, and How to Bend them Back isn’t about hacking computer systems; it’s about hacking more general economic, political, and social systems. It generalizes the term hack as a means of subverting a system’s rules … Read More “New Book: A Hacker’s Mind” »

NSA Over-surveillance

Posted on By infossl
nsa, privacy, Security technology, surveillance, Uncategorized

Here in 2022, we have a newly declassified 2016 Inspector General report—”Misuse of Sigint Systems”—about a 2013 NSA program that resulted in the unauthorized (that is, illegal) targeting of Americans. Given all we learned from Edward Snowden, this feels like a minor coda. There’s nothing really interesting in the IG document, which is heavily redacted. … Read More “NSA Over-surveillance” »