Full Details Of The MD5 Vulnerability

Tuesday, December 30th, 2008

We have identified a vulnerability in the Internet Public Key Infrastructure (PKI) used to issue digital certificates for secure websites. As a proof of concept we executed a practical attack scenario and successfully created a rogue Certification Authority (CA) certificate trusted ...

FBI issues code cracking challenge

Monday, December 29th, 2008

The FBI today challenged anyone in the online community to break a cipher code on its site.  The code was created by FBI cryptanalysts. The bureau invited hackers to a similar code-cracking challenge last year and got tens of thousands of responses it said. A number of sites host such cipher ...

Make Firefox Alert You When You Send Information Unencrypted

Tuesday, December 23rd, 2008

Here's a quick little tip for users that might not know enough about internet security and privacy to stop and look for SSL/TLS (https://) when submitting forms on the web.  Or maybe the form page itself is on an unencrypted page, but the data actually gets sent encrypted when the ...

Lock Down Your Data

Saturday, December 20th, 2008

This is a great list of various things you can do to protect your data.  Here's a quick summary: 10. Wipe that iPhone (or BlackBerry) before trading in. 9. Use virtual credit cards for iffy online buys. 8. Hide data inside files with steganography. 7. Plan for the worst. 6. Get smarter on security questions. 5. ...

Securely Access Email In Various Clients

Tuesday, December 9th, 2008

SSL (Secure Sockets Layer) or TLS (Transport Layer Security) encrypt your email connection so that your password and messages are scrambled to eavesdroppers. If you're only connecting through a wired, office PC, you'll face little exposure with non-encrypted mail. But even with a wireless laptop on a known network--or especially ...