cross-posted from: https://lemmy.pe1uca.dev/post/142289

The bug allows attackers to swipe data from a CPU’s registers. […] the exploit doesn’t require physical hardware access and can be triggered by loading JavaScript on a malicious website.

cross-posted from: https://lemmy.zip/post/738201

Different source: https://restoreprivacy.com/comms-standard-used-in-police-and-army-radios-contains-backdoor/

cross-posted from: https://lemmy.blahaj.zone/post/1074214

cross-posted from: https://lemmy.ml/post/2241073

HN link: https://news.ycombinator.com/item?id=36795173

======================================================================== Contents

Summary Background Experiments Results Discussion Acknowledgments Timeline

Some history and a reminder.

The gang is threatening to publish data stolen from the company, which commands 60% of the global foundry market, unless the company pays a $70 million ransom demand.

cross-posted from: https://lemmy.ca/post/871615

TIL the French government may have broken encryption on a LUKS-encrypted laptop with a "greater than 20 character" password in April 2023.

• https://nantes.indymedia.org/posts/87395/une-lettre-divan-enferme-a-la-prison-de-villepinte-perquisitions-et-disques-durs-dechiffres/

When upgrading TAILS today, I saw their announcement changing LUKS from PBKDF2 to Argon2id.

• https://tails.boum.org/security/argon2id/index.en.html

The release announcement above has some interesting back-of-the-envelope calculations for the wall-time required to crack a master key from a LUKS keyslot with PBKDF2 vs Argon2id.

And they also link to Matthew Garrett's article, which describes how to manually upgrade your (non-TAILS) LUKS header to Argon2id.

• https://mjg59.dreamwidth.org/66429.html

cross-posted from: https://feddit.de/post/851512

It sounds like a cool concept, but I can't see anyone migrating to this service since there is no logical way to import your current passwords.

Am I missing something?

new malware called Fractureiser is stealing discord tokens, brower user:pass & cookies, crypto wallets, etc

Its always been too easy for android to get exploited

Gather Real-Time Intelligence from Social Media, Cameras, Internet of Things, Industrial Control System devices. In addition search Wifi or Bluetooth networks and look for planes, cruises and city traffic

Black mirror season X

Local

Hope this helps ;)

Looks like he actually caught himself..

Off to races?

Methods to generate the random numbers we need for secure communications are all flawed in some way, but quantum computers that exist today could produce random numbers that can't be faked

Nobody is hidden

Well, that is interesting turn of events ;)

Well, I mean... on the silver plate