Cryptography

(get it in RSS or Atom)

And the winner of the World War Two steganography competition is...

dearmum-250

Last week, we ran a competition around a steganographic code that was used by the British during the Second Word War.

Take a secret military message, and wrap it up into a believable "letter home"... it's harder than it sounds!

Is your laptop still unencrypted? Perhaps 7 seconds of CCTV might change your mind...

Here's a video that might make you think twice about taking your laptop out into the world unencrypted.

This is "data theft" in the most literal sense...

Snapchat images that have "disappeared forever" stay right on your phone...

sc-250

Snapchat claims to let you share even "ugly selfies" because once they're viewed they "disappear forever."

US-based computer forensics geek Richard Hickman thought he'd find out how true that claim was...

Monday review - the hot 20 stories of the week

Monday review

Get up to date with everything we wrote in the past seven days - it's weekly roundup time.

British cryptographic hacking from WW2 - how well would *you* have done?

If you were taken prisoner and wanted to send messages home under your captors' noses, what would you do?

Find out how a Royal Navy officer did just that during WW2, and have a go yourself at hiding a secret message in an innocent-sounding letter home!

IBM takes a big new step in cryptography: practical homomorphic encryption

IBM just released an open source software package called HELib.

HE stands for *homomorphic encryption*, and HELib is an important cryptographic milestone.

Paul Ducklin explains why...

Beware of encryption companies bearing gifts!

trojan-horse-250

An iPhone messaging app that claims to be "totally secure" is offering a £10,000 prize to anyone who can intercept a message from it.

Paul Ducklin wonders how you are supposed to win the prize if the app really is "totally secure"...

XKCD cartoon reminds users to log out for better security

XKCD cartoon reminds users to log out for better security

It's disturbing just how many people seem to leave their computers permanently logged in to online services. An XKCD cartoon teaches us all an important security lesson.

Monday review - the hot 17 stories of the week

Monday review - the hot stories of the week

Catch up with everything we've written in the last seven days - it's weekly roundup time.

WordPress.com boosts security for bloggers with two-factor authentication

With WordPress.com powering more than 60 million websites worldwide, anything to improve the safety and security of its users is to be welcomed.

Paul Ducklin tries out the new WordPress 2FA service on his Naked Security account...

"Rude password - login denied": the AT&T April Fool that wasn't

rude-password-250

Why, and more importantly, *how*, would you go about weeding out rude passwords?

Surely an April Fool?

Paul Ducklin takes a look...

Anatomy of a bug - misplaced parenthesis threatens NetBSD's random numbers

random-250

NetBSD recently patched a programming bug in its kernel that affected the sanctity of the operating system's random numbers.

One lousy parenthesis misplaced by just two characters...

Monday review - the hot 32 stories of the week

Monday review - the hot stories of the week

It's that time of the week again - here's your roundup of everything we wrote in the last seven days.

Has HTTPS finally been cracked? Five researchers deal SSL/TLS a biggish blow...

ts-cracked-250

Cryptographers have once again put SSL/TLS (that's the padlock in HTTPS) in their gunsights and opened fire.

This time, they've done some severe damage.

Paul Ducklin takes a detailed look...

Monday review - the hot 22 stories of the week

dow-250

In case you missed anything, here's everything we wrote in the past seven days.

The top 10 unsolved ciphertexts

cipher_thumb

For over 12 centuries an intense battle has been fought between the code-makers and the code-breakers. But despite decades of cryptanalysis, there are many ciphertexts which have gone unsolved, leaving us in mystery.

Here's our top ten list, can you solve them?

Monday review - the hot 22 stories of the week

dow-250

Catch up with anything you might have missed last week – it’s weekly roundup time.

Can freezing an Android device crack its encryption keys?

Will chilling an Android phone to -15°C freeze the encryption keys into memory? And if so, can you use a modified version of Android to dig them out?

German researchers had a crack at it - Paul Ducklin takes a look at how things turned out.

Monday review - the hot 21 stories of the week

Monday review - the hot 24 stories of the week

Get yourself up to date with everything we've written in the last seven days - it's weekly roundup time.

SSCC 102 - Probably the best 15 minute security podcast you'll hear today

Sophos security Chet Chat podcast 102

Have your joined thousands of others, and become a loyal listener to the "Chet Chat" yet?

Here's the latest Naked Security podcast, Sophos Security Chet Chat 102, discussing a range of recent and newsworthy topics from the world of computer security.