#Backdoors

Matthew Green

matthew_d_green

So the resolution explicitly calls for gaining “targeted access to encrypted data”, but we’re going to say that’s not a “backdoor in encryption”. Because we say things. Sorry, @TechCrunch. The

Dmitri Alperovitch

DAlperovitch

#SolarWinds hack update thread.One word of caution, particularly for reporters publicizing hack victims. Many of the Orion platform customers have downloaded the backdoored update and it would have likely eventually

Mark Loveless

simplenomad

I want to be absolutely up front about this. The whole SolarWinds thing has be seriously bothered. Here’s why (rant time)... 1/6 SolarWinds did not find the backdoor in Orion,

Cliff Fisher

brdpoker

AYFKM?!?Every single person who cared SO MUCH about some emails but doesn't say a word about this can kindly leave the planet and never return Yes, we know that the

Malcolm Nance

MalcolmNance

Russia had 4 years of their asset in the White House allowed this attack. They mapped our known networks, evaded security & knew Trump would do nothing. Knowing he could/would

Password Hunter02

BenKTallmadge

Department of Homeland Security: China using TCL TVs to spy on Americans -‘TCL incorporated backdoors into all of its TV sets exposing users to cyber breaches & data exfiltration.’@CodeMonkeyZ ⁦@SidneyPowell1⁩⁦@LLinWood⁩http

derf_famous

derf_famous

Who remembers the 2006 documentary ‘Hacking Democracy’? The film investigates the flawed integrity of electronic voting machines, particularly those made by Diebold Election Systems, exposing previously unknown backdoors in the

Cyber Statecraft

CyberStatecraft

Since 2010, there have been at least 31 distinct attacks targeting updates in the software supply chain, of which 17 compromised build servers or altered code. Of those, more than

FireEye

FireEye

As part of our commitment to our customers and community, we are continuing to take action to protect orgs from the SolarWinds supply chain attack. 1/5https://feye.io/3gKoMBp SUNBURST is the malware

Noah Williams

noahsbwilliams

Hey so since @dhh has just reminded me of all the ways Apple deceives us into thinking their products are secure, I’d just like to compile my thoughts on all

Techlore

techloreistaken

(1) Threat-modeling is commonly oversimplified.Susan- Manages a business- Relies on contacting several clients a day- Wants to protect her personal phone number- Needs compartmentalization across several VOIP numbersLet’s break this

🍔CULTSULTANT 🍥

GRITCULT

threadtechnology is often physical manifestation of ideology to start with, i see ideology creating and influencing technology. one such ideological technology is innovation in 3d printing leading to 3d printed

Costin Raiu

craiu

1/9 The French National Cybersecurity Agency @ANSSI_FR released a report on Hades / Sandworm infecting Centreon servers with a PHP backdoor, followed by deploying the Exaramel Linux backdoor. Some notes:

Cyber Statecraft

CyberStatecraft

THREAD | A groundbreaking espionage operation targeting USG, the #Sunburst incident was also software supply chain compromise similar to 31 attacks observed since 2010. Using our Breaking Trust report @Cyberstatecraft

Ben Adida

benadida

1/ a little story. When I was 18yo, summer 1995, I had the immense luck of working as an intern at Hearst Publishing in NYC. I was a rising sophomore,

Pwn All The Things

pwnallthethings

SolarWinds hackers accessed Microsoft source code, the company sayshttps://www.reuters.com/article/us-global-cyber-microsoft/solarwinds-hackers-accessed-microsoft-source-code-the-company-says-idUSKBN2951M9 And the MS statement on it https:/

By continuing to use the site, you are consenting to the use of cookies as explained in our Cookie Policy to improve your experience.