Stealing login credentials from a locked PC or Mac just got easier
20 seconds of physical access with a $50 device is all it takes. Continue reading Stealing login credentials from a locked PC or Mac just got easier
Author Archives: Dan Goodin
Meet PocketBlock, the crypto engineering game for kids of all ages
When you’re a cryptographer, telling your preteen kids what you do isn’t easy. Continue reading Meet PocketBlock, the crypto engineering game for kids of all ages
Feds pin brazen kernel.org intrusion on 27-year-old programmer
Indictment comes five years after mysterious breach of the Linux repository. Continue reading Feds pin brazen kernel.org intrusion on 27-year-old programmer
Golden State Warriors Android app constantly listens to nearby audio, fan says
Official app of the NBA’s Golden State Warriors is the subject of a federal lawsuit. Continue reading Golden State Warriors Android app constantly listens to nearby audio, fan says
New cloud attack takes full control of virtual machines with little effort
Existing crypto software “wholly unequipped” to counter Rowhammer attacks. Continue reading New cloud attack takes full control of virtual machines with little effort
Meet USBee, the malware that uses USB drives to covertly jump airgaps
Technique works on virtually all USB drives with no modifications necessary. Continue reading Meet USBee, the malware that uses USB drives to covertly jump airgaps
Actively exploited iOS flaws that hijack iPhones likely spread for years
Jailbreak vulnerabilities allowed attackers to tap encrypted chat messages. Continue reading Actively exploited iOS flaws that hijack iPhones likely spread for years
HTTPS and OpenVPN face new attack that can decrypt secret cookies
More than 600 sites found to be vulnerable to demanding exploit called Sweet32. Continue reading HTTPS and OpenVPN face new attack that can decrypt secret cookies
NSA-linked Cisco exploit poses bigger threat than previously thought
With only a small amount of work, ExtraBacon will commandeer new versions of ASA. Continue reading NSA-linked Cisco exploit poses bigger threat than previously thought
How the NSA snooped on encrypted Internet traffic for a decade
Exploit against Cisco’s PIX line of firewalls remotely extracted crypto keys. Continue reading How the NSA snooped on encrypted Internet traffic for a decade