Brexit Deal Mandates Old Insecure Crypto Algorithms
December 31 2020
In what is surely an unthinking cut-and-paste issue, page 921 of the Brexit deal mandates the use of SHA-1 and 1024-bit RSA:
The open standard s/MIME as extension...
Read more
On the Evolution of Ransomware
December 30 2020
Good article on the evolution of ransomware:
Though some researchers say that the scale and severity of ransomware attacks crossed a bright line in 2020, others describe this year...
Read more
Russia’s SolarWinds Attack
December 28 2020
Recent news articles have all been talking about the massive Russian cyberattack against the United States, but that’s wrong on two accounts. It wasn’t a cyberattack in international...
Read moreFriday Squid Blogging: Small Giant Squid Washes Ashore in Japan
December 25 2020A ten-foot giant squid has washed ashore on the Western coast of Japan. As usual, you can also use this squid post to talk about the security stories in the...
Read moreHow China Uses Stolen US Personnel Data
December 24 2020
Interesting analysis of China’s efforts to identify US spies:
By about 2010, two former CIA officials recalled, the Chinese security services had instituted a sophisticated travel intelligence program, developing...
Read more
Investigating the Navalny Poisoning
December 23 2020Bellingcat has investigated the near-fatal poisoning of Alexey Navalny by the Russian FSB back in August. The details display some impressive traffic analysis. Navalny got a confession out of...
Read moreEavesdropping on Phone Taps from Voice Assistants
December 22 2020
The microphones on voice assistants are very sensitive, and can snoop on all sorts of data:
In Hey Alexa what did I just type? we show that when...
Read more
Cellebrite Can Break Signal
December 21 2020
Cellebrite announced that it can break Signal. (Note that the company has heavily edited its blog post, but the original — with lots of technical details —...
Read moreFriday Squid Blogging: Christmas Squid Memories
December 18 2020Stuffed squid for Christmas Eve. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Read my blog posting...
Read more
Recent Comments