Opsec Cyber authentication Archives

Category Archives: authentication

Device Code Phishing

February 19 2025 By Bruce Schneier in authentication, Phishing, Russia, Security

This isn’t new, but it’s increasingly popular:

The technique is known as device code phishing. It exploits “device code flow,” a form of authentication formalized in the industry-wide Read more

Pairwise Authentication of Humans

February 10 2025 By Bruce Schneier in authentication, Security

Here’s an easy system for two humans to remotely authenticate to each other, so they can be sure that neither are digital impersonations.

To mitigate that risk, I have...
Read more

RADIUS Vulnerability

July 10 2024 By Bruce Schneier in authentication, Security, vulnerabilities

New attack against the RADIUS authentication protocol:

The Blast-RADIUS attack allows a man-in-the-middle attacker between the RADIUS client and server to forge a valid protocol accept message in response...
Read more

New Bluetooth Attack

December 8 2023 By Bruce Schneier in authentication, bluetooth, Security, vulnerabilities

New attack breaks forward secrecy in Bluetooth.

Three news articles:

BLUFFS is a series of exploits targeting Bluetooth, aiming to break Bluetooth sessions’ forward and future...
Read more

Breaking Laptop Fingerprint Sensors

November 29 2023 By Bruce Schneier in authentication, reports, Security, vulnerabilities

They’re not that good:

Security researchers Jesse D’Aguanno and Timo Teräs write that, with varying degrees of reverse-engineering and using some external hardware, they were able to fool the...
Read more

Apple to Add Manual Authentication to iMessage

November 22 2023 By Bruce Schneier in Apple, authentication, iPhone, Security

Signal has had the ability to manually authenticate another account for years. iMessage is getting it:

The feature is called Contact Key Verification, and it does just what its...
Read more

Parmesan Anti-Forgery Protection

August 24 2023 By Bruce Schneier in authentication, Security

The Guardian is reporting about microchips in wheels of Parmesan cheese as an anti-forgery measure.

Microsoft Signing Key Stolen by Chinese

August 7 2023 By Bruce Schneier in authentication, China, cybersecurity, Microsoft, Security

A bunch of networks, including US Government networks, have been hacked by the Chinese. The hackers used forged authentication tokens to access user email, using a stolen...

Microsoft hit by Storm season – a tale of two semi-zero days

July 19 2023 By Paul Ducklin in 0-day, authentication, Cryptography, Microsoft, Security, Vulnerability

The first compromise didn't get the crooks as far as they wanted, so they found a second one that did...

Brute-Forcing a Fingerprint Reader

May 30 2023 By Bruce Schneier in authentication, Security

It’s neither hard nor expensive:

Unlike password authentication, which requires a direct match between what is inputted and what’s stored in a database, fingerprint authentication determines a match using...
Read more

[email protected]

Singapore CBD

Category Archives: authentication

Device Code Phishing

Pairwise Authentication of Humans

RADIUS Vulnerability

New Bluetooth Attack

Breaking Laptop Fingerprint Sensors

Apple to Add Manual Authentication to iMessage

Parmesan Anti-Forgery Protection

Microsoft Signing Key Stolen by Chinese

Microsoft hit by Storm season – a tale of two semi-zero days

Brute-Forcing a Fingerprint Reader

Recent Posts

Age Verification Using Facial Scans

CVE Program Almost Unfunded

Slopsquatting

Upcoming Speaking Engagements

China Sort of Admits to Being Behind Volt Typhoon

Recent Comments

Archives

Categories

Meta

Contact Us

[email protected]

Singapore CBD

+65 8714 2780