Security and FUD
-
Feds Say Cyberattack Caused Suicide Helpline's Outage
A cyberattack caused a nearly daylong outage of the nation’s new 988 mental health helpline late last year, federal officials tell The Associated Press
-
Simo: OpenSSL 3.0 Providers and PKCS#11
What triggered it is that I started a new project because I wanted to explore two things I have been putting off for a while, and I had some time on my hands on a long weekend.
What's interesting about this project is that, on paper, it is straightforward, we just wire up one API to another, and given both deal with simple cryptography primitives it should be pretty simple... or is it?
Well of course it isn't, first of all we are talking about cryptography, which is notoriously finicky in terms of API for various legitimate, and less so, reasons. But the actual calls that need to be made to implement the cryptography are the least problematic, for the most part. What really makes things hard are the lack of documentation about OpenSSL providers, and the impedance mismatch between the way OpenSSL goes about handling some of the operation and the way PKCS#11 envisions applications should handle the cryptography engine.
-
Microsoft: Iran Unit Behind Charlie Hebdo Hack-and-Leak Op [Ed: Microsoft is the cause of many security incidents, but the gullible, sometimes Microsoft-sponsored, media will try to pretend Microsoft is a security expert, leveraging political sentiments to shift the blame and deflect responsibility]
After French satirical magazine Charlie Hebdo's launched a cartoon contest to mock Iran, an Iranian cyber retaliated in January.
-
AI threats and open-source vulnerabilities top host of security issues facing cloud-native community [Ed: SiliconANGLE is spreading Microsoft talking points and outright spam. SiliconANGLE also bags bribes from them, hence it relays this kind of nonsense.]
It turns out that security concerns in the cloud-native world look a lot like what’s keeping practitioners up at night in the rest of the technology ecosystem. -
The FBI tried in vain: The Russian case against REvil turned out to be insignificant [Ed: Microsoft Windows TCO]
As it became known to “Kommersant”, the investigative department of the Ministry of Internal Affairs of the Russian Federation completed the investigation of the criminal case of the so-called international group of hackers REvil, information about which was provided to Russia by the FBI. According to its results, the investigation was able to accuse eight alleged intruders of only two remote thefts of funds, and even then committed in the United States by who knows where and for what amount: there are no victims, as well as damage, in the criminal case. Lawyers for the defendants say that two weeks would be enough for them to study the materials, but the procedure seems to be delayed.