Security

Security bouncing • 11 months ago • 85%

Cisco Can’t Stop Using Hard-Coded Passwords https://www.schneier.com/blog/archives/2023/10/cisco-cant-stop-using-hard-coded-passwords.html

Security bouncing • 1 year ago • 80%

Backdoor in TETRA Police Radios https://www.schneier.com/blog/archives/2023/07/backdoor-in-tetra-police-radios.html

> Seems that there is a deliberate backdoor in the twenty-year-old TErrestrial Trunked RAdio (TETRA) standard used by police forces around the world. >> Most interestingly is the researchers’ findings of what they describe as the backdoor in TEA1. Ordinarily, radios using TEA1 used a key of 80-bits. But Wetzels said the team found a “secret reduction step” which dramatically lowers the amount of entropy the initial key offered. An attacker who followed this step would then be able to decrypt intercepted traffic with consumer-level hardware and a cheap software defined radio dongle. Schneier with the *obvious take*: > Why aren’t we done with secret, proprietary cryptography? It’s just not a good idea.

Security bouncing • 1 year ago • 50%

WordPress plugin installed on 1 million+ sites logged plaintext passwords arstechnica.com

Another WordPress success story!