Cryptography

(get it in RSS or Atom)

Monday review - the hot 24 stories of the week

Monday review

In case you missed any recent stories, here's everything we wrote in the last seven days.

Get ready for the next #sophospuzzle - coming soon to a T-shirt near you

It's almost time for the annual AusCERT conference in Queensland, Australia.

And for everyone who's asked, the answer is, "Yes! There's a #sophospuzzle!"

No, you don't have to be there to join in...

Snapchat images that have "disappeared forever" stay right on your phone...

sc-250

Snapchat claims to let you share even "ugly selfies" because once they're viewed they "disappear forever."

US-based computer forensics geek Richard Hickman thought he'd find out how true that claim was...

SSCC 108 - WW2 crypto, Bitcoin mining, internet cameras, password breaches [PODCAST]

image-108-250

Chester calls home from Interop in Las Vegas to record the latest episode of the Sophos Security Chet Chat.

Join Chester and guest Paul Ducklin in their regular quarter-hour podcast as they laugh about (and lament) the latest goings-on in the world of computer security.

Monday review - the hot 20 stories of the week

Monday review

Get up to date with everything we wrote in the past seven days - it's weekly roundup time.

British cryptographic hacking from WW2 - how well would *you* have done?

If you were taken prisoner and wanted to send messages home under your captors' noses, what would you do?

Find out how a Royal Navy officer did just that during WW2, and have a go yourself at hiding a secret message in an innocent-sounding letter home!

Beware of encryption companies bearing gifts!

trojan-horse-250

An iPhone messaging app that claims to be "totally secure" is offering a £10,000 prize to anyone who can intercept a message from it.

Paul Ducklin wonders how you are supposed to win the prize if the app really is "totally secure"...

Monday review - the hot 22 stories of the week

dow-250

In case you missed anything, here's everything we wrote in the past seven days.

Kim Dotcom's Megaupload saga takes another turn - FBI wins appeal in extradition case

Kim Dotcom - image from bgr.com

The Kim Dotcom saga took yet another turn today when the New Zealand Court of Appeal knocked back one of the big fella's earlier minivictories again US law enforcers.

Paul Ducklin takes you through the timeline of the story so far, and tries to guess what happens next...

The top 10 unsolved ciphertexts

cipher_thumb

For over 12 centuries an intense battle has been fought between the code-makers and the code-breakers. But despite decades of cryptanalysis, there are many ciphertexts which have gone unsolved, leaving us in mystery.

Here's our top ten list, can you solve them?

SSCC 102 - Probably the best 15 minute security podcast you'll hear today

Sophos security Chet Chat podcast 102

Have your joined thousands of others, and become a loyal listener to the "Chet Chat" yet?

Here's the latest Naked Security podcast, Sophos Security Chet Chat 102, discussing a range of recent and newsworthy topics from the world of computer security.

Boffins 'crack' HTTPS encryption in Lucky Thirteen attack

The security of web transactions is again in the spotlight as a pair of UK cryptographers take aim at TLS.

Like 2011's much-talked-about BEAST attack, it has a groovy name: Lucky Thirteen.

Do programmers understand the meaning of PRIVATE?

Public-key encryption relies on a pair of cryptographic keys, one public and the other private.

You'd think that programmers would be able to tell which one to keep private and which one to make public, wouldn't you?

Kim Dotcom's coders hacking on Mega's cryptography even as we speak - true "perpetual beta" style

Kim Dotcom's new venture, Mega, wants to shield itself from accusations of failing to take action against piracy.

It does so by using cryptography to make sure it doesn't see, and indeed cannot tell, what you've uploaded. But you have to get the crypto right...

Kim Dotcom takes issue with critics taking issue with his new MEGA service

The party-time news of the past weekend was the launch of Kim Dotcom's comeback file sharing service, Mega.

Crypto critics have already taken issue with some aspects of Mega's implementation, and Dotcom has taken issue right back at them...

The TURKTRUST SSL certificate fiasco - what really happened, and what happens next?

The TURKTRUST SSL certificate fiasco - what happened, and what happens next?

Was the TURKTRUST SSL fiasco an abortive attempt at secret surveillance, or a blundering crisis of convenience?

Paul Ducklin takes stock of the situation...

VIDEO: How to solve the Skyfall #sophospuzzle

VIDEO: How to solve the Skyfall #sophospuzzle

By popular demand, here is a video showing you how to solve the Skyfall #sophospuzzle.

In James Bond style: recover a stolen file, decrypt it, use it to identify a famous person, find out where he was incarcerated, and geolocate the prison...

Email: the forgotten security problem

emialatsign

When you read a message in your inbox, should you trust that the information hasn't been tampered with or that it even comes from who it claims?

Wall of Fame for the #sophospuzzle - see who solved it and how fast

leaderboard-250

By popular request, here is the leaderboard for the Skyfall #sophospuzzle.

The solvers are listed in speed order.

Hints on solving the Skyfall #sophospuzzle before it's too late!

Hints on solving the Skyfall #sophospuzzle before it's too late!

Some hints to help you solve the latest #sophospuzzle before the deadline.

If you haven't tried it yet, perhaps this will help convince you that it's solvable after all. Go on - get your virtual secret agent tuxedo on, and give it a go.