EFF Encrypt the Web Report Shows Crypto Leaders, Laggards

There’s nothing like a little peer pressure to nudge someone toward doing the right thing. That’s the philosophy behind the Electronic Frontier Foundation’s Encrypt the Web Report, which examines the encryption capabilities of 18 leading Internet companies, including large carriers, social...

HTTP/2 Supports only HTTPS URIs

The head of the working group designing the next version of HTTP said the HTTP/2 protocol will work only with encrypted URIs. “I believe the best way that we can meet the goal of increasing use of TLS on the Web is to encourage its use by only using HTTP/2.0 with https:// URIs,” wrote Mark...

Court: Government Need Not Justify Warrantless Data Requests

A Virginia appeals court on Friday denied a right-to-access order filed by the Electronic Frontier Foundation and the American Civil Liberties Union on behalf of Icelandic parliamentarian Birgitta Jonsdottir and computer security researchers Jacob Appelbaum and Rop Gonggrijp. The denial confirms ...

Bank Fraud Suspects Net $1M in Citibank Casino Scheme

Fourteen individuals were charged late last week after the Federal Bureau of Investigation, along with the Los Angeles Police Department and the Glendale, Calif. Police Department found they were behind a scheme that extracted more than $1 million from Citibank cash-advance kiosks in Southern...

We Are Being Held in Cyber Handcuffs

Hello my Princes of Peace, Warriors of the Revolution, Princesses of the cause, I want you to take two minutes and watch this video: This video is the epitome of the ignorance and arrogance of governments all over the world in response to our cyber war revolution. As you will see, the power peopl...

[SECURITY] Fedora 18 Update: libotr-3.2.1-1.fc18

Off-the-Record Messaging Library and Toolkit This is a library and toolkit which implements Off-the-Record OTR Messagi ng. OTR allows you to have private conversations over IM by providing Encryptio n, Authentication, Deniability and Perfect forward secrecy...

Fedora Update for libotr FEDORA-2012-11959

Check for the Version of libotr OpenVAS Vulnerability Test Fedora Update for libotr FEDORA-2012-11959 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

[SECURITY] Fedora 16 Update: libotr-3.2.1-1.fc16

Off-the-Record Messaging Library and Toolkit This is a library and toolkit which implements Off-the-Record OTR Messagi ng. OTR allows you to have private conversations over IM by providing Encryptio n, Authentication, Deniability and Perfect forward secrecy...

[SECURITY] Fedora 17 Update: libotr-3.2.1-1.fc17

Off-the-Record Messaging Library and Toolkit This is a library and toolkit which implements Off-the-Record OTR Messagi ng. OTR allows you to have private conversations over IM by providing Encryptio n, Authentication, Deniability and Perfect forward secrecy...

SSL Perfect Forward Secrecy Cipher Suites Supported

The remote host supports the use of SSL ciphers that offer Perfect Forward Secrecy PFS encryption. These cipher suites ensure that recorded SSL traffic cannot be broken at a future date if the server's private key is compromised. C Tenable Network Security, Inc. include"compat.inc"; if descriptio...

Google Implements Forward Secrecy

Google is stepping up their security game in a big way for the second time this year: introducing a more secure browsing method known as forward secrecy in Gmail and a number of other Web-based services, according to a post on the GoogleOnlineSecurity blog. In recent months, the Silicon Valley...

It's Time For an Apple Patch Tuesday

If there’s one thing that can be said about Apple, it’s that the company operates on its own timeline. It does what it pleases at whatever time suits it, and the customers appear. Actually, they don’t simply appear, they wait expectantly and move as one when asked. This has proven to be enormousl...

Apple Internship In Hand, Comex Promises 'No More Jailbreaks'

As the now famous iOS hacker best known as “Comex,” Nicholas Allegra was more than willing to weigh in on the vulnerabilities of Apple’s iOS mobile operating system. But now that he has accepted a position as an intern at Apple, Comex said his jailbreaking days are over. In an “ask me anything”...

Wikileaks Founder, Assange gets Sydney Peace Prize !

Wikileaks Founder, Assange gets Sydney Peace Prize ! WikiLeaks founder Julian Assange was Wednesday awarded the Sydney Peace Foundation's top honor for "exceptional courage in pursuit of human rights," joining the likes of Nelson Mandela and the Dalai Lama. Assange, an Australian former computer...

Lawmakers, Scholars Warn Against Reactionary Anti-WikiLeaks Legislation

The WikiLeaks disclosures this fall that have precipitated so much controversy and agita among national security officials and politicians should not be used as a springboard for new, more restrictive laws, lawmakers, attorneys and policy analysts said in a House hearing Thursday. In fact, the...

Why Bob Maley's Firing is Bad for All of Us

The news that Pennsylvania CISO Bob Maley lost his job for publicly discussing a security incident at last week’s RSA Conference really shouldn’t come as a surprise, but it does. Even for a government agency, this kind of lack of understanding of what actually matters is appalling and it is a...

Design/Logic Flaw

The "internal state tracking" code for the random and urandom devices in FreeBSD 5.5, 6.1 through 6.3, and 7.0 beta 4 allows local users to obtain portions of previously-accessed random values, which could be leveraged to bypass protection mechanisms that rely on secrecy of those values...

CVE-2007-6094

The IPsec module in the VPN component in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 allows remote attackers to cause a denial of service module crash via an IPsec Phase 2 proposal that lacks Perfect Forward Secrecy PFS...

Sample SecurID Token Emulator with Token Secret Import

Sample SecurID Token Emulator with Token Secret Import We have performed some cryptoanalysis and let's just say we do have grounds to believe that this algorithm is easily breakable. Once again, security of the cipher should be based entirely on the secrecy of the key, not the algorithm. Least...