BlackBerry Giving Encryption Keys to Indian Government

Wednesday, May 21st, 2008

RIM encrypts e-mail between BlackBerry devices and the server the server with 236-bit AES encryption. The Indian government doesn't like this at all; they want to snoop on the data. RIM's response was basically: that's not possible. The Indian government's counter was: Then we'll ban BlackBerries. After months of threats, ...

Attacking Banks – Encrypted Strings and Local Content Injection

Monday, May 19th, 2008

We have been noticing quite a few binaries lately that target Brazilian banks. While most tend to have the same behavior, we found a particular piece that actually encrypted most of its strings to slow down analysis. In this blog we analyze the decryption routine and write a decryption algorithm, ...

Debian and Ubuntu keys under attack

Friday, May 16th, 2008

A recently disclosed vulnerability in widely used Linux distributions can be exploited by attackers to guess cryptographic keys, possibly leading to the forgery of digital signatures and theft of confidential information, a noted security researcher said Thursday. HD Moore, best known as the exploit researcher who created the Metasploit penetration testing ...

Three-Layer Encryption Method Awarded Patent

Thursday, May 15th, 2008

Eruces Data Security has secured a patent for its three-step encryption and key management scheme, which is designed to lock down data through its lifecycle. The security firm’s so-called Tricryption technology first encrypts the data itself with symmetric keys, and then encrypts the keys and stores them in a central key ...

Admins warned of brute-force SSH attacks

Wednesday, May 14th, 2008

Over the weekend, a number of network administrators issued warnings over an order-of-magnitude increase in the number of attempts to guess the username and password of systems running secure shell (SSH), the encrypted access method that replaced the common telnet service. System administrators at universities and some companies have reported ...