|
Which news topic is most interesting to you?
| |
Viruses & Worms |
 | |
Safe Programming |
| |
Policies |
| |
General Security |
| |
Cryptography |
| |
Countermeasure |
| |
Corporate Security |
| View Results |
There is currently 0 registered member(s) and 1 guest(s) that are online.
|
|
|
Bringing Internet privacy into the 21st century
Posted by: ttye0 on April 02, 2010 10:22
|
[0 comment(s)]
[Submit Comment]
|
|
Finally, there's something Google and Microsoft can agree on: Our electronic privacy protections are in serious need of an overhaul. They, along with Intel, AOL, AT&T, the ACLU, and a dozen other household names, have formed the Digital Due Process coalition, aimed at urging Congress to modernize the Electronic Communications Privacy Act (ECPA) -- the only thing keeping Johnny Law from pawing through your digital life. The ECPA was passed into law in 1986. To put that in context, the first Notes From the Field columns appeared in print issues of InfoWorld that year, back when I was just a cub reporter. Ronald Reagan was still president, even if he may not have been aware of it at the time. The Web was still three years from being invented. The term "spam" still referred to canned luncheon meat, and a 300-baud modem represented a state-of-the-art Internet connection. Yet the ECPA is still the digital law of the land. It's a little like using statutes written for the horse and buggy era to govern the Autobahn....[more].
|
Researchers Claim RSA Authentication Crack
Posted by: ttye0 on March 04, 2010 13:31
|
[0 comment(s)]
[Submit Comment]
|
|
Researchers at the University of Michigan say they have uncovered a way to circumvent encryption used on many devices. The research is the work of Valeria Bertacco, Todd Austin and Andrea Pellegrini. According to their paper, entitled 'Fault-Based Attack of RSA Authentication' (PDF), the trio demonstrated a way to beat the popular encryption method, which is used in media players, laptop computers, smartphones and other devices. It is also used by retailers to secure customer information online.
The researchers found that by varying the voltage on a device it was possible to get their hands on the 'private key' needed to beat the security feature. Using what they described as an inexpensive device specially-built for the experiment, the trio manipulated the voltage and caused the computer to make small mistakes in its communications with other clients. This ultimately revealed small pieces of the private key, which they eventually used to reconstruct the key offline....[more].
|
|
