“The SHA-1 hash algorithm is still in use for verifying the authenticity of digital content, despite the march of Moore’s Law ramping up compute power available to hackers in the wild — and despite other, more robust alternatives having existed for years.  Systems that could be compromised via the technique according to the researchers include document signature, HTTPS certificates, version control (git), backup systems, software updates, ISO checksums and more.”

Read more: https://techcrunch.com/2017/02/23/security-researchers-announce-first-practical-sha-1-collision-attack/

Did you like this?
Tip Freedomwat.ch Staff with Bitcoin

Donate via Installed Wallet Copy

“Cloudflare revealed a serious bug in its software today that caused sensitive data like passwords, cookies, authentication tokens to spill in plaintext from its customers’ websites. The announcement is a major blow for the content delivery network, which offers enhanced security and performance for more than 5 million websites.  This could have allowed anyone who noticed the error to collect a variety of very personal information that is typically encrypted or obscured.  The leak may have been active as early as Sept. 22, 2016, almost five months before a security researcher at Google’s Project Zero discovered it and reported it to Cloudflare.”

Read more: https://techcrunch.com/2017/02/23/major-cloudflare-bug-leaked-sensitive-data-from-customers-websites/

Did you like this?
Tip Freedomwat.ch Staff with Bitcoin

Donate via Installed Wallet Copy