https://arxiv.org/pdf/1806.05179.pdf
SafeSpec: Banishing the Spectre of a Meltdown with Leakage-Free Speculation
A research that aims to a structural redesign of CPUs to solve Spectre and Meltdown flaws.
Tags: #security #hardware #cpu
SafeSpec: Banishing the Spectre of a Meltdown with Leakage-Free Speculation
A research that aims to a structural redesign of CPUs to solve Spectre and Meltdown flaws.
Tags: #security #hardware #cpu
https://www.wi-fi.org/news-events/newsroom/wi-fi-alliance-introduces-wi-fi-certified-wpa3-security
WPA3 specification for network authentication is now official. This is the official announcement.
Tags: #networking #security
WPA3 specification for network authentication is now official. This is the official announcement.
Tags: #networking #security
https://arstechnica.com/information-technology/2018/07/rash-of-fortnite-cheaters-infected-by-malware-that-breaks-https-encryption/
Even if we are talking about a game, a malware such this can be very risky.
Tags: #security #malware
Even if we are talking about a game, a malware such this can be very risky.
Tags: #security #malware
Ars Technica
Rash of Fortnite cheaters infected by malware that breaks HTTPS encryption
Malware can read, intercept, or tamper with the traffic of any HTTPS-protected site.
https://nakedsecurity.sophos.com/2018/06/28/windows-10-security-can-be-bypassed-by-settings-page-weakness/
Perhaps Microsoft won't ever fix this because "it's not a bug, it's a feature". Through this, you can execute cmd and Powershell commands.
Tags: #windows #security
Perhaps Microsoft won't ever fix this because "it's not a bug, it's a feature". Through this, you can execute cmd and Powershell commands.
Tags: #windows #security
Naked Security
Windows 10 security can be bypassed by Settings page weakness
The file type used by Windows 10’s settings page can be used to trick Windows into running files it’s supposed to block.
https://protonmail.com/blog/openpgpjs-protonmail-security-audit/
Tags: #security #encryption #javascript
Tags: #security #encryption #javascript
ProtonMail Blog
ProtonMail’s open source encryption library security audit - ProtonMail Blog
We maintain the OpenPGPjs encryption library. After some recent code enhancements, OpenPGPjs underwent an independent security audit, the results of which are discussed in this article.