Full Details Of The MD5 Vulnerability

Tuesday, December 30th, 2008

We have identified a vulnerability in the Internet Public Key Infrastructure (PKI) used to issue digital certificates for secure websites. As a proof of concept we executed a practical attack scenario and successfully created a rogue Certification Authority (CA) certificate trusted ...

Researchers devise undetectable phishing attack

Tuesday, December 30th, 2008

With the help of about 200 Sony Playstations, an international team of security researchers have devised a way to undermine the algorithms used to protect secure Web sites and launch a nearly undetectable phishing attack. To do this, they've exploited a bug in the digital certificates used by Web sites to ...

Make Firefox Alert You When You Send Information Unencrypted

Tuesday, December 23rd, 2008

Here's a quick little tip for users that might not know enough about internet security and privacy to stop and look for SSL/TLS (https://) when submitting forms on the web.  Or maybe the form page itself is on an unencrypted page, but the data actually gets sent encrypted when the ...

Securely Access Email In Various Clients

Tuesday, December 9th, 2008

SSL (Secure Sockets Layer) or TLS (Transport Layer Security) encrypt your email connection so that your password and messages are scrambled to eavesdroppers. If you're only connecting through a wired, office PC, you'll face little exposure with non-encrypted mail. But even with a wireless laptop on a known network--or especially ...

Fake SSL Certificates Seen Again

Wednesday, October 8th, 2008

Online banks use cryptographic protocols to secure the exchange of information on the Web, and hackers do not hesitate to adapt to this technology too. A new case of fake SSL (Secure Sockets Layer) certificates appeared again, following phishing threats we’ve seen last April and May. This time, the website of ...