LastPass and the NSA Controversy

Tuesday, September 10th, 2013

With news that the United States National Security Agency has deliberately inserted weaknesses into security products and attempted to modify NIST standards, questions have been raised about how these actions affect LastPass and our customers. We want to directly address whether LastPass has been or could be weakened, and whether our users’ ...

The NSA Is Breaking Most Encryption on the Internet

Thursday, September 5th, 2013

The new Snowden revelations are explosive. Basically, the NSA is able to decrypt most of the Internet. They're doing it primarily by cheating, not by mathematics. It's joint reporting between the Guardian, the New York Times, and ProPublica. I have been working with Glenn Greenwald on the Snowden documents, and I have seen a lot ...

HTTP Nowhere for Firefox blocks all but encrypted traffic

Wednesday, August 28th, 2013

Protecting your privacy online is a hot topic right now, with PRISM looming over the heads of all Internet users. But even if you take PRISM aside, there is a drive towards privacy on the Internet. One of the things that users need to be aware of is the difference between ...

Turbo-charged cracking comes to long passwords

Tuesday, August 27th, 2013

For the first time, the freely available password cracker ocl-Hashcat-plus is able to tackle passcodes with as many as 55 characters. It's an improvement that comes as more and more people are relying on long passcodes and phrases to protect their website accounts and other online assets. Until now, ocl-Hashcat-plus, the Hashcat ...

Hackers Target Java 6 With Security Exploits

Tuesday, August 27th, 2013

Warning to anyone still using Java 6: Upgrade now to Java 7 to avoid being compromised by active attacks. That alert came via F-Secure anti-malware analyst Timo Hirvonen, who reported finding an in-the-wild exploit actively targeting an unpatched vulnerability in Java 6 following the recent publication of related proof-of-concept (POC) attack ...