Collaborate Disseminate
The security world held our collective breaths early this week for the big OpenSSL vulnerability announcement. Turns out it’s two separate issues, both related to punycode handling, and they’ve been …read more Continue reading This Week in Security: OpenSSL Fizzle, Java XML, and Nothing As It Seems
A decade ago, I was learning Linux through building projects for my own needs. One of the projects was a DIY CCTV system based on a Linux box – specifically, …read more Continue reading Make Your Pi Moonlight As A Security Camera
Sometimes, we see a project where it’s clear – its creator seriously wants to make a project idea accessible to newcomers; and today’s project is one of these cases. The …read more Continue reading An Easy-To-Make Pi-Powered Pocket Password Pal
Earlier this week, a new release of iOS rolled out, fixing a handful of security issues. One in particular noted it “may have been actively exploited”, and was reported anonymously. …read more Continue reading This Week in Security: iOS, OpenSSL, And SQLite
While networking was once all about the Cat 5 cables and hubs and routers, now most of us connect regularly in a wireless manner. Just like regular networks, wireless networks …read more Continue reading The WiFi Pumpkin is the WiFi Pineapple We Have at Home
Quantum computers present a unique threat to many aspects of modern information technology. In particular, many cryptographic systems could be at risk of compromise in the event a malicious actor …read more Continue reading Mastercard’s New Card: Safer From Quantum Attacks?
Ever wonder what makes a cellphone’s operating system secure, or what that app you just installed is saying about you behind your back? In a brand new video series, [Jiska] …read more Continue reading “Reversing Shorts” Demystify Phone Security
Up first this week is a quintet of vulnerabilities in the Linux kernel’s wireless code. It started with [Soenke Huster] from TU Darmstadt, who found a buffer overwrite in mac80211 …read more Continue reading This Week in Security: Linux WiFi, Fortinet, Text4Shell, and Predictable GUIDs
If there’s one thing about managing a bunch of keys, whether they’re for RSA, SSH, or a car, it’s that large amounts of them can be a hassle. In fact, …read more Continue reading Front Door Keys Hidden In Plain Sight
First up is some clever wizardry from the [Aqua Nautilus] research team, who discovered a timing attack that leaks information about private npm packages. The setup is this, npm hosts …read more Continue reading This Week in Security: npm Timing Leak, Siemens Universal Key, and PHP in PNG