CVE-2014-5918

The CVE-2014-5918 entry refers to The Secret Circle - talk freely (com.easyxapp.secret) Android app version 2.2.00.26 that does not verify X.509 certificates from SSL servers, enabling MITM attackers to spoof servers and obtain sensitive information via crafted certificates. Other connected docum...

CVE-2014-5918

The Secret Circle - talk freely aka com.easyxapp.secret application 2.2.00.26 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

The world's most secure phone Blackphone security issues and vulnerability details-vulnerability warning-the black bar safety net

Blackphone,the carrier-independent and vendor-independent smartphone is stored privacy and let theuserhas direct permissions to the target is created, known as the world's most secure phone. However, the Bluebox security team in testing the phone, found that is not nothing. ! The research team...

Better Security, 'Progressive Encryption' in Silent Text 2.0

Silent Circle has released a new version of its private text messaging and secure file transfer service for Android and iOS mobile devices. Silent Text 2.0 includes a number of security and user-interface upgrades. The company claims this version eliminates a keying delay issue that existed in...

Boeing launches Ultra-Secure 'Black' Smartphone that has Self-Destruct Feature

Looking for a Secure Smartphone? World's biggest Aerospace company - Boeing is finally close to the launch of its high-security Android Smartphone, called "Boeing Black H8V-BLK1", primarily designed for secure communication between Governmental agencies and their contractors. Encrypted email,...

Silent Circle's Blackphone - Privacy and Security Focused Smartphone for $629

Earlier this year encrypted communications firm Silent Circle and Spanish Smartphone maker Geeksphone announced a privacy-focused encrypted Smartphone called 'Blackphone' and today the company has revealed it as 'Mobile World Congress' in Barcelona. The Blackphone titled as, “world’s first...

JBOSS 1 0 9 9 port remote method invocation vulnerability-vulnerability warning-the black bar safety net

Bird brother a few days ago sent me an article that is a java vulnerability, about 1 0 9 9 port may be remote method invocation thing. I suddenly think of it, had to XCON2012 of time, due to“forgotten”so there is no mention of a problem is a JBOSS remote code execution vulnerability. The domestic...

PGP Inventor announced encrypted PrivatOS based #BLACKPHONE against NSA surveillance

Mobile security may not be secure as you think. In September we have reported that the National Security Agency has the ability to access data on iOS, Android and even BlackBerry devices. Everyday a new revelation of NSA Surveillance Program makes Security and Privacy a major concern for all of u...

Passive Security Community Turned Activist

Security people like to call themselves a community, but until June some might say its greatest community achievement is turning Twitter into its own private and contentious echo chamber. But since the Snowden leaks, there’s been a palpable change and a marked swell in stand-taking. Tweeters have...

How Dark Mail Plans to Build an Open, Secure Email Platform

The new Dark Mail Alliance formed this week by Lavabit and Silent Circle will offer an open platform for secure email that will use existing protocols and cloud storage as a way to evade surveillance. The new system, which should be available next year, is in some ways a throwback to the...

'Dark Mail Alliance', Future of surveillance proof email technology

Yesterday I learned about 'Dark Mail Alliance', where Lavabit, reportedly an email provider for NSA leaker Edward Snowden and Silent Circle comes together to create a surveillance-proof email technology. Ladar Levison at Lavabit and Silent Circle CEO Mike Janke, Founders of two e-mail services th...

NSA Crypto Questions Resemble a 'Hall of Mirrors'

There’s been no shortage of discussion and debate in recent week about the possibility that the NSA has intentionally weakened some cryptographic algorithms and cipher suites in order to give it an advantage in its intelligence-gathering operations. If you subscribe to the worst-case scenario lin...

Silent Circle Moving Away From NIST Ciphers in Wake of NSA Revelations

The first major domino to fall in the crypto world after the NSA leaks by Edward Snowden began was the decision by Lavabit, a secure email provider, to shut down in August rather than comply with a government order. Shortly thereafter, Silent Circle, another provider of secure email and other...

Anonymity Tool Tor gains more than 1.2 Million new users since NSA PRISM scandal

Since Snowden came forward with details about the NSA's PRISM program in June, web users concerned about online privacy are increasingly turning toward privacy tools to protect their online data. U.S. Government project PRISM allows the government to tap phone calls, email, and web browsing of an...

Inside the Decision to Shut Down Silent Mail

Silent Circle’s decision to shut down its Silent Mail email service may have come quickly yesterday, and the timing of the announcement admittedly was prompted by Lavabit’s decision to suspend operations hours before. But the seeds for this decision may have been sown long before Edward Snowden,...

Encrypted Email Service 'Lavabit' abruptly shut down under U.S. Government Pressure

Texas-based Encrypted Email Service 'Lavabit' abruptly shut down for reasons linked to National Security Agency whistleblower Edward Snowden. The Feds want to Lavabit demanding access to Ed Snowden's email. Lavabit refused! Snowden was using the Lavabit service while holed-up in the Moscow airpor...

Encrypted Email Service 'Lavabit' abruptly shut down under U.S. Government Pressure

Texas-based Encrypted Email Service 'Lavabit' abruptly shut down for reasons linked to National Security Agency whistleblower Edward Snowden. The Feds want to Lavabit demanding access to Ed Snowden's email. Lavabit refused! Snowden was using the Lavabit service while holed-up in the Moscow airpor...

Several Flaws Discovered in ZRTPCPP Library Used in Secure Phone Apps

A security researcher has uncovered a number of serious vulnerabilities in one of the core security components of several secure telephony applications, including the Silent Circle system developed by PGP creator Phil Zimmermann. The vulnerabilities in the GNU ZRTPCPP library already have been...

Jieqi(Jackie)CMS V1. 6 PHP code execution 0day vulnerabilities EXP-vulnerability warning-the black bar safety net

Jackie website management system, referred to as the JIEQI CMS, China National copyright Bureau copyright registration number: 2006SR03382 is a modular site erected system with simple, flexible, superior performance, safe and reliable and other characteristics. We provide you with the current mos...

Phil Zimmermann on Mobile Encryption and Privacy

Dennis Fisher talks with cryptographer and PGP inventor Phil Zimmermann about the specter of mobile eavesdropping, his new venture Silent Circle and how the threat landscape has changed in recent years. Download: digitalunderground110 Related: Phil Zimmermann: ‘We Really, Really Don’t Have the...