Security Leftovers
-
Securing NTP against MITM attacks
The Network Time Protocol (NTP) is one of the oldest Internet protocols that is still widely used. The protocol has no security mechanisms, communication is unencrypted, and there is no authentication between client and server or safeguards against manipulation of network packets. Attacks against NTP can have a serious impact because other protocols are dependent on the accuracy of the system time, such as DNSSEC, Kerberos, and TLS.
-
The Sequoia GnuPG Chameleon 0.1 Is Released
We are pleased to announce the first release of the Chameleon, Sequoia’s reimplementation of the GnuPG interface. This is a technology preview, but we encourage developers who integrate GnuPG into their software to see whether it works with the Chameleon.
The Chameleon is a re-implementation and drop-in replacement of gpg and gpgv using the Sequoia OpenPGP implementation.
-
Hacked Ring Cams Used to Record Swatting Victims
Two U.S. men have been charged with hacking into the Ring home security cameras of a dozen random people and then “swatting” them — falsely reporting a violent incident at the target’s address to trick local police into responding with force. Prosecutors say the duo used the compromised Ring devices to stream live video footage on social media of police raiding their targets’ homes, and to taunt authorities when they arrived.