SecurityRatty: Digg / Security

Twitter Phishers Also Targeting Facebook

2009-01-06 20:10:06 by Editor in Digg / Security

The phishing site that was set up to hoodwink Twitter's users has a second front door that looks exactly like Facebook. The address of the fake Twitter site was twitter.access-login.com/login, but take out the "/login" part and you arrive at the dead-ringer for the Facebook homepage.

14% of SSL certificates on the Internet potentially unsafe

2009-01-04 17:30:01 by Editor in Digg / Security

Netcraft provided more details on a critical digital certificate vulnerability revealed last week. Although Microsoft downplayed the problem by stating that the successful exploit was not published, Netcraft found that 14% of SSL certificates (135,000 total!) use the vulnerable MD5 hashing algorithm.

Australia's Firewall: Whats NOT mentioned even more scary

2008-12-31 20:00:02 by Editor in Digg / Security

Today I am ashamed to be Australian, ashamed that my Government should seek to implement draconian 19th century style censorship laws over the marvel of the modern age: The Internet. Free Speech may not be totally dead in Australia yet, but it’s about to be placed on life support.

SSL broken with 200 PS3s

2008-12-31 19:10:04 by Editor in Digg / Security

"a group of hackers announced that they'd beaten SSL, using a cluster of 200 PS3s. By exploiting a flaw in the MD5 cryptographic algorithm (used in certain digital signatures and certificates), the group managed to create a rogue Certification Authority (CA) which allows them to create their own SSL certificates"

Ga Reqires Sex Offenders to Hand Over Email, Passwords, Etc

2008-12-31 12:20:02 by Editor in Digg / Security

Privacy advocates are questioning an aggressive Georgia law set to take effect Thursday that would require sex offenders to hand over Internet passwords, screen names and e-mail addresses.

MD5 collision creates rogue Certificate Authority

2008-12-31 09:20:01 by Editor in Digg / Security

(Translation: Bad news for the Internet). At the 25th Chaos Communication Congress (CCC) today, researchers will reveal how they utilized a collision attack against the MD5 algorithm to create a rogue certificate authority. This is pretty big news, so read on.

Avoid Downloading Fake Torrents and Spam with Vertor

2008-12-29 17:00:02 by Editor in Digg / Security

With millions of potential targets, BitTorrent sites are a great arena for scammers and spammers. Vertor is a new BitTorrent site that aims to eliminate these threats.

Wanted: Web-Wide Cops

2008-12-29 16:50:03 by Editor in Digg / Security

The Internet needs to be globally regulated if it is to have any chance of stopping scams such as security 'scareware', a researcher has suggested.

Harvard Prof Wants to Broadcast RIAA Case on Internet

2008-12-27 23:30:01 by Editor in Digg / Security

Today, Professor Charles Nesson and his team of Harvard Law students filed a motion to broadcast courtroom coverage of the trial on the Internet, which is traditionally prohibited. Nesson is defending Joel Tenenbaum, who has been sued by the RIAA for $1,050,000 for allegedly making available 7 songs in a shared folder when he was 17 years old

Uproar in Australia Over the Plan to Block Web Sites

2008-12-27 03:50:09 by Editor in Digg / Security

A proposed Internet filter dubbed the '‘Great Aussie Firewall’' is promising to make Australia one of the strictest Internet regulators among democratic countries.