The H is closing down - The H Security: News and Features
Although The H has produced many widely read stories, it has not been possible to effectively monetise that traffic to produce a working business model. Because of this, after four and a half years as The H and six years online, The H is, sadly, closing its doors. We thank all our readers for their deep interest and engagement. Work is taking place to create an archive to ensure that the content o
VirusTotal now analyses network traffic - The H Security: News and Features
VirusTotal's interface when scanning network traffic will be familiar The popular VirusTotal service, which can run more than 20 anti-virus scanners over a sample in one pass, can now also look for signs of malware infections in captured network traffic. To perform a check, users upload network packets that are captured in the common PCAP format instead of sending VirusTotal the more traditional s
SHA1 weakness benefits password crackers - The H Security: News and Features
Jens Steube, a co-author of the popular Hashcat password cracker, has discovered a weakness in the SHA1 cryptographic hashing technique that enables him to accelerate password cracking by about 20 per cent. SHA1 always processes blocks of 512 bits (64 bytes). However, this data is expanded to 2,048 bits when the SHA1 hash value is generated – Steube calls this process "word expansion". Words are e
New Oracle hacks revealed - The H Security: News and Features
At the DerbyCon 2.0 conference, security experts Laszlo Toth and Ferenc Spala presented a range of attacks, some of which were previously unknown, on Oracle databases and SQL servers; they even released suitable tools to exploit them at the same time. In "Hacking the Oracle Client", Laszlo Toth demonstrated that, although Oracle saves the user name and password for a database connection in encrypt
Vulnerability in SSL encryption is barely exploitable - The H Security: News and Features
Researchers have discovered that, where data sent over an encrypted HTTPS connection has undergone prior compression, the door is opened to attackers who, by modifying the data traffic in a targeted manner, are then able to crack the encryption. Compression is supported by almost half of all web servers, including the servers at many prominent organisations such as Google and Twitter. Browser make
New Burp Proxy cracks Android SSL - The H Security: News and Features
The new version of Burp Proxy is designed to improve the analysis of encrypted SSL connections on Android phones. Developers and security researchers like to use Burp Proxy to examine the web traffic on PCs, and lately also on smartphones. For example, The H's associates at heise Security recently used Burp to analyse the activities of various smartphone apps for c't magazine. To analyse web traff
Catching worms with ghost flash drives - The H Security: News and Features
Development of Sebastian Pöplau's Ghost USB Honeypot, originally developed at the University of Bonn, will now be taken up by the Honeynet Project. The software emulates a USB flash drive inserted into a USB port on a Windows system, and functions as malware bait. If a system is infected with a worm such as Conficker, Stuxnet or Flame, the worm will copy itself to the fake flash drive. It will the
1
リリース、障害情報などのサービスのお知らせ
最新の人気エントリーの配信
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く
NSS 3.15.1 brings TLS 1.2 support to Firefox - The H Security: News and Features
Windows 8.1: High-performance behaviour monitoring for Defender - The H Security: News and Features
Update problems for Microsoft's free anti-virus - The H Security: News and Features
Silent installs of add-ons still possible in Firefox - The H Security: News and Features
Android smartphones infected via drive-by exploit - Update - The H Security: News and Features