Cloud Security Alliance News Clipping Site

Tag: Crypto

  • Rekt: Polter Finance

    —

    by

    system automation
    in

    Source URL: https://www.rekt.news/polter-finance-rekt Source: Rekt Title: Polter Finance Feedly Summary: After losing roughly $8.7 million to a textbook case of oracle manipulation, Polter Finance is scrambling to clean up the mess. Their unaudited protocol left key vulnerabilities wide open, and now they’re facing the fallout. Another day, another lesson in DeFi’s recklessness. AI Summary and…

  • Hacker News: Nothing-up-my-sleeve number

    —

    by

    system automation
    in

    Source URL: https://en.wikipedia.org/wiki/Nothing-up-my-sleeve_number Source: Hacker News Title: Nothing-up-my-sleeve number Feedly Summary: Comments AI Summary and Description: Yes Summary: The text provides an in-depth exploration of “nothing-up-my-sleeve” numbers in cryptography, examining their importance in ensuring the integrity and security of cryptographic algorithms. This analysis is particularly relevant for professionals in security and compliance, as it highlights…

  • Hacker News: Will passkeys ever replace passwords? Can they? Here’s why they should

    —

    by

    system automation
    in

    Source URL: https://www.theregister.com/2024/11/17/passkeys_passwords/ Source: Hacker News Title: Will passkeys ever replace passwords? Can they? Here’s why they should Feedly Summary: Comments AI Summary and Description: Yes Summary: The text discusses the concept of passkeys as an alternative to traditional passwords, emphasizing their potential to enhance security against phishing attacks while addressing implementation challenges and user…

  • The Register: Will passkeys ever replace passwords? Can they?

    —

    by

    system automation
    in

    Source URL: https://www.theregister.com/2024/11/17/passkeys_passwords/ Source: The Register Title: Will passkeys ever replace passwords? Can they? Feedly Summary: Here’s why they really should Systems Approach I have been playing around with passkeys, or as they are formally known, discoverable credentials.… AI Summary and Description: Yes **Summary:** The text discusses the concept and implementation of passkeys, which are…

  • Hacker News: How Public Key Cryptography Works, Using Only Simple Math

    —

    by

    system automation
    in

    Source URL: https://www.quantamagazine.org/how-public-key-cryptography-really-works-20241115/ Source: Hacker News Title: How Public Key Cryptography Works, Using Only Simple Math Feedly Summary: Comments AI Summary and Description: Yes **Summary:** The text provides a comprehensive overview of public key cryptography, explaining its fundamental principles, historical development, and potential vulnerabilities posed by quantum computing. This is particularly relevant for security professionals…

  • Hacker News: Cyph – A cryptographically secure messaging and social networking service

    —

    by

    system automation
    in

    Source URL: https://www.cyph.com/ Source: Hacker News Title: Cyph – A cryptographically secure messaging and social networking service Feedly Summary: Comments AI Summary and Description: Yes Summary: The text discusses encrypted cloud storage solutions that protect various types of sensitive information, including files, passwords, notes, and cryptocurrencies. This is particularly relevant for professionals dealing with cloud…

  • Hacker News: Attestations: A new generation of signatures on PyPI

    —

    by

    system automation
    in

    Source URL: https://blog.trailofbits.com/2024/11/14/attestations-a-new-generation-of-signatures-on-pypi/ Source: Hacker News Title: Attestations: A new generation of signatures on PyPI Feedly Summary: Comments AI Summary and Description: Yes Summary: The announcement discusses a new security feature on the Python Package Index (PyPI): index-hosted digital attestations based on PEP 740. This feature enhances package provenance and security by integrating with Trusted…

  • Hacker News: Are We PEP740 Yet?

    —

    by

    system automation
    in

    Source URL: https://trailofbits.github.io/are-we-pep740-yet/ Source: Hacker News Title: Are We PEP740 Yet? Feedly Summary: Comments AI Summary and Description: Yes **Summary:** PEP 740 introduces a standard for cryptographically verifiable attestations for Python packages, ensuring better security and provenance verification through digital signatures. This initiative utilizes Sigstore technology and highlights the significance of trusted identities in safeguarding…

  • Hacker News: Implementing Signal’s Double Ratchet algorithm (2020)

    —

    by

    system automation
    in

    Source URL: https://nfil.dev/coding/encryption/python/double-ratchet-example/ Source: Hacker News Title: Implementing Signal’s Double Ratchet algorithm (2020) Feedly Summary: Comments AI Summary and Description: Yes Summary: The text provides a detailed exposition of the Double Ratchet algorithm and its implementation, emphasizing its benefits for end-to-end encryption (E2E) in securing communications. It highlights the algorithm’s key features such as forward…

  • Simon Willison’s Weblog: PyPI now supports digital attestations

    —

    by

    system automation
    in

    Source URL: https://simonwillison.net/2024/Nov/14/pypi-digital-attestations/#atom-everything Source: Simon Willison’s Weblog Title: PyPI now supports digital attestations Feedly Summary: PyPI now supports digital attestations Dustin Ingram: PyPI package maintainers can now publish signed digital attestations when publishing, in order to further increase trust in the supply-chain security of their projects. Additionally, a new API is available for consumers and…