Tag Archive for: something

Crypto researchers: Time to use something better than 1024-bit encryption

/in

It’s actually possible for entities with vast computing resources – such as the NSA and major national governments – to compromise commonly used Diffie-Hellman key exchange groups, so it’s time for businesses to switch to something else like elliptic curve cryptography, researchers say.

“It’s been recommended to move from 1024-bit [encryption] for a long time, and now there are very concrete risks of not doing that,” says Nadia Heninger, an assistant professor of computer and information science at the University of Pennsylvania who is an author of a paper titled “Imperfect Forward Secrecy: How Diffie-Hellman Fails in Practice”.

To read this article in full or to leave a comment, please click here

Network World Security

Under DDoS attack? Look for something worse

/in

When businesses are hit by noticeable distributed denial-of-service attacks, three-quarters of the time those attacks are accompanied by another security incident, according to Kaspersky Lab.

Those other attacks may or may not originate from the same party, but they can go undetected if IT staff is totally focused on defending against the DDoS, says Evgeny Vigovsky, head of Kaspersky DDoS Protection.

“In many cases, it may be a coordinated effort, but even if these attacks originate from different sources, IT staff have to allocate resources to solve two problems at the same time, under a lot of stress,” Vigovsky says. Kaspersky polled top managers and IT pros at 5,500 companies in 26 countries about their experiences with DDoS attacks.

To read this article in full or to leave a comment, please click here

Network World Tim Greene

Facebook moves fast, breaks something – San Francisco Gate

/in

The result was “one monumental screw-up,” computer security expert Graham Cluley said Tuesday. The problems started when the contact e-mail addresses members chose to display on their Facebook profile pages were changed without notice to the name@facebook …
“computer security” – read more