TechHub

Crypto NewsMajor Breach Study Reveals Widespread Leaks of Bank Statements, SSNs, and Crypto Keys - A new study has revealed the extent of sensitive information leaked through ransomware at... - <a href="https://cryptonews.com/news/major-breach-study-reveals-widespread-leaks-of-bank-statements-ssns-and-crypto-keys/" rel="nofollow noopener" translate="no" target="_blank">https://cryptonews.com/news/major-breach-study-reveals-widespread-leaks-of-bank-statements-ssns-and-crypto-keys/</a> <a href="https://schleuss.online/tags/securitybreach" class="mention hashtag" rel="nofollow noopener" target="_blank">#securitybreach</a> <a href="https://schleuss.online/tags/altcoinnews" class="mention hashtag" rel="nofollow noopener" target="_blank">#altcoinnews</a> <a href="https://schleuss.online/tags/databreach" class="mention hashtag" rel="nofollow noopener" target="_blank">#databreach</a> <a href="https://schleuss.online/tags/privatekey" class="mention hashtag" rel="nofollow noopener" target="_blank">#privatekey</a>

Hacker NewsIs Anybody Using This Private Key<a href="https://isanybodyusingthisprivatekey.com/" rel="nofollow noopener" translate="no" target="_blank">https://isanybodyusingthisprivatekey.com/</a><a href="https://mastodon.social/tags/HackerNews" class="mention hashtag" rel="nofollow noopener" target="_blank">#HackerNews</a> <a href="https://mastodon.social/tags/PrivateKey" class="mention hashtag" rel="nofollow noopener" target="_blank">#PrivateKey</a> <a href="https://mastodon.social/tags/Security" class="mention hashtag" rel="nofollow noopener" target="_blank">#Security</a> <a href="https://mastodon.social/tags/Cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#Cybersecurity</a> <a href="https://mastodon.social/tags/HackerNews" class="mention hashtag" rel="nofollow noopener" target="_blank">#HackerNews</a> <a href="https://mastodon.social/tags/DigitalPrivacy" class="mention hashtag" rel="nofollow noopener" target="_blank">#DigitalPrivacy</a>

Crypto NewsNew ESP32 Chip Flaw Lets Hackers Steal Bitcoin Keys from Popular Wallets - Key Takeaways:ESP32 chips expose crypto wallets and IoT devices to silent attac... - <a href="https://cryptonews.com/news/crypto-wallets-using-chinese-made-esp32-chip-vulnerable-to-private-key-theft-report/" rel="nofollow noopener" translate="no" target="_blank">https://cryptonews.com/news/crypto-wallets-using-chinese-made-esp32-chip-vulnerable-to-private-key-theft-report/</a> <a href="https://schleuss.online/tags/bitcoinhardwarewallets" class="mention hashtag" rel="nofollow noopener" target="_blank">#bitcoinhardwarewallets</a> <a href="https://schleuss.online/tags/blockchainnews" class="mention hashtag" rel="nofollow noopener" target="_blank">#blockchainnews</a> <a href="https://schleuss.online/tags/privatekey" class="mention hashtag" rel="nofollow noopener" target="_blank">#privatekey</a> <a href="https://schleuss.online/tags/esp32chip" class="mention hashtag" rel="nofollow noopener" target="_blank">#esp32chip</a>

Erik van StratenPublic key cryptografie voor lekenHet is een beetje behelpen met "ASCII graphics", maar in <a href="https://www.security.nl/posting/884482/Public+keys+voor+leken" rel="nofollow noopener" translate="no" target="_blank">https://www.security.nl/posting/884482/Public+keys+voor+leken</a> probeer ik, ook aan minder digitaal vaardigen, uit te leggen hoe asymmetrische cryptografie werkt.Doe er uw voordeel mee, want deze techniek is een belangrijk fundament van de steeds verder digtaliserende maatschappij.U leert hoe een digitale handtekening werkt en wat een digitaal certificaat is.Veel te weinig mensen begrijpen dat goed, en dat bemoeilijkt een fatsoenlijke discussie over deze technieken enorm.Big tech is de lachende derde: zij maximaliseren hun winsten terwijl alle risico's voor uw rekening komen.<a href="https://infosec.exchange/tags/BigTechIsEvil" class="mention hashtag" rel="nofollow noopener" target="_blank">#BigTechIsEvil</a> <a href="https://infosec.exchange/tags/GoogleIsEvil" class="mention hashtag" rel="nofollow noopener" target="_blank">#GoogleIsEvil</a> <a href="https://infosec.exchange/tags/DVcerts" class="mention hashtag" rel="nofollow noopener" target="_blank">#DVcerts</a> <a href="https://infosec.exchange/tags/EchtVanNepKunnenOnderscheiden" class="mention hashtag" rel="nofollow noopener" target="_blank">#EchtVanNepKunnenOnderscheiden</a> <a href="https://infosec.exchange/tags/NepVanEchtKunnenOnderscheiden" class="mention hashtag" rel="nofollow noopener" target="_blank">#NepVanEchtKunnenOnderscheiden</a> <a href="https://infosec.exchange/tags/NepWebsites" class="mention hashtag" rel="nofollow noopener" target="_blank">#NepWebsites</a> <a href="https://infosec.exchange/tags/BankHelpdeskFraude" class="mention hashtag" rel="nofollow noopener" target="_blank">#BankHelpdeskFraude</a> <a href="https://infosec.exchange/tags/OnlineOplichting" class="mention hashtag" rel="nofollow noopener" target="_blank">#OnlineOplichting</a> <a href="https://infosec.exchange/tags/EDIW" class="mention hashtag" rel="nofollow noopener" target="_blank">#EDIW</a> <a href="https://infosec.exchange/tags/EUDIW" class="mention hashtag" rel="nofollow noopener" target="_blank">#EUDIW</a> <a href="https://infosec.exchange/tags/AitM" class="mention hashtag" rel="nofollow noopener" target="_blank">#AitM</a> <a href="https://infosec.exchange/tags/MitM" class="mention hashtag" rel="nofollow noopener" target="_blank">#MitM</a> <a href="https://infosec.exchange/tags/BasisKennis" class="mention hashtag" rel="nofollow noopener" target="_blank">#BasisKennis</a> <a href="https://infosec.exchange/tags/Encryptie" class="mention hashtag" rel="nofollow noopener" target="_blank">#Encryptie</a> <a href="https://infosec.exchange/tags/Cryptografie" class="mention hashtag" rel="nofollow noopener" target="_blank">#Cryptografie</a> <a href="https://infosec.exchange/tags/DigitaleVaardigheden" class="mention hashtag" rel="nofollow noopener" target="_blank">#DigitaleVaardigheden</a> <a href="https://infosec.exchange/tags/PublicKeyCryptografie" class="mention hashtag" rel="nofollow noopener" target="_blank">#PublicKeyCryptografie</a> <a href="https://infosec.exchange/tags/AsymmetrischeCryptografie" class="mention hashtag" rel="nofollow noopener" target="_blank">#AsymmetrischeCryptografie</a> <a href="https://infosec.exchange/tags/PrivateKey" class="mention hashtag" rel="nofollow noopener" target="_blank">#PrivateKey</a> <a href="https://infosec.exchange/tags/PubliekeSleutel" class="mention hashtag" rel="nofollow noopener" target="_blank">#PubliekeSleutel</a> <a href="https://infosec.exchange/tags/PrivateSleutel" class="mention hashtag" rel="nofollow noopener" target="_blank">#PrivateSleutel</a>

Crypto NewsZKSync Admin Wallet Compromised, $5M Stolen - An admin wallet for layer-2 blockchain ZKsync was compromised on Tuesday with the hacker ... - <a href="https://www.coindesk.com/business/2025/04/15/zksync-admin-wallet-compromised-usd5m-stolen" rel="nofollow noopener" translate="no" target="_blank">https://www.coindesk.com/business/2025/04/15/zksync-admin-wallet-compromised-usd5m-stolen</a> <a href="https://schleuss.online/tags/privatekey" class="mention hashtag" rel="nofollow noopener" target="_blank">#privatekey</a> <a href="https://schleuss.online/tags/zksyncera" class="mention hashtag" rel="nofollow noopener" target="_blank">#zksyncera</a> <a href="https://schleuss.online/tags/finance" class="mention hashtag" rel="nofollow noopener" target="_blank">#finance</a> <a href="https://schleuss.online/tags/hack" class="mention hashtag" rel="nofollow noopener" target="_blank">#hack</a>

Steve Dustcircle 🌹<a href="https://masto.ai/tags/Phishing" class="mention hashtag" rel="nofollow noopener" target="_blank">#Phishing</a> and <a href="https://masto.ai/tags/PrivateKey" class="mention hashtag" rel="nofollow noopener" target="_blank">#PrivateKey</a> <a href="https://masto.ai/tags/Theft" class="mention hashtag" rel="nofollow noopener" target="_blank">#Theft</a> Made Attackers Most <a href="https://masto.ai/tags/Money" class="mention hashtag" rel="nofollow noopener" target="_blank">#Money</a> in 2024 <a href="https://cryptonews.com/news/phishing-private-key-theft-top-crypto-attacks-in-2024/" rel="nofollow noopener" translate="no" target="_blank">https://cryptonews.com/news/phishing-private-key-theft-top-crypto-attacks-in-2024/</a>

Kevin Karhan :verified:<a href="https://social.hackingand.coffee/@hon1nbo" class="u-url mention" rel="nofollow noopener" target="_blank">@hon1nbo</a> <a href="https://digipres.club/@foone" class="u-url mention" rel="nofollow noopener" target="_blank">@foone</a> yeah, but all these things would essentially necessitate a fundamentally incompatible <a href="https://infosec.space/tags/Fork" class="mention hashtag" rel="nofollow noopener" target="_blank">#Fork</a> of the <a href="https://infosec.space/tags/USB" class="mention hashtag" rel="nofollow noopener" target="_blank">#USB</a> standard, creating <a href="https://infosec.space/tags/costs" class="mention hashtag" rel="nofollow noopener" target="_blank">#costs</a>, <a href="https://infosec.space/tags/fragmentation" class="mention hashtag" rel="nofollow noopener" target="_blank">#fragmentation</a> and lessen the likelyhood of success.<ul><li>Not to mention it'll require significant investments in <a href="https://infosec.space/tags/UserAwareness" class="mention hashtag" rel="nofollow noopener" target="_blank">#UserAwareness</a>, <a href="https://infosec.space/tags/Training" class="mention hashtag" rel="nofollow noopener" target="_blank">#Training</a> and would still have some issues...</li></ul>I gues a sort-of "Secure HID Port" that mandates proper authentification and does full <a href="https://infosec.space/tags/E2EE" class="mention hashtag" rel="nofollow noopener" target="_blank">#E2EE</a> from the Keyboard Matrix / Pointing Device controller up is an option, but you'd have to expect state-sponsored attackers willing to do <a href="https://www.youtube.com/watch?v=RyW0lXnoFOA" rel="nofollow noopener" target="_blank">"Kamikaze" Hacks</a>...<ul><li>There's like a <a href="https://www.youtube.com/watch?v=U7VwtOrwceo&t=4m5s" rel="nofollow noopener" target="_blank">long talk</a> by <a href="https://infosec.space/tags/TonyChen" class="mention hashtag" rel="nofollow noopener" target="_blank">#TonyChen</a> from <a href="https://infosec.space/tags/Microsoft" class="mention hashtag" rel="nofollow noopener" target="_blank">#Microsoft</a> explaining how they secured the <a href="https://infosec.space/tags/XboxOne" class="mention hashtag" rel="nofollow noopener" target="_blank">#XboxOne</a>.</li></ul><a href="https://infosec.space/tags/TLDW" class="mention hashtag" rel="nofollow noopener" target="_blank">#TLDW</a>: <a href="https://www.youtube.com/watch?v=U7VwtOrwceo&t=11m2s" rel="nofollow noopener" target="_blank">It requires custom silicon and a hard root of trust</a>…<ul><li>And as we saw with <a href="https://infosec.space/tags/GoldenKeyBoot" class="mention hashtag" rel="nofollow noopener" target="_blank">#GoldenKeyBoot</a> all it takes is a single <a href="https://infosec.space/tags/leak" class="mention hashtag" rel="nofollow noopener" target="_blank">#leak</a> of a <a href="https://infosec.space/tags/PrivateKey" class="mention hashtag" rel="nofollow noopener" target="_blank">#PrivateKey</a> and that entire system is fucked!</li></ul><a href="https://infosec.space/@kkarhan/113716442182953660" translate="no" rel="nofollow noopener" target="_blank">https://infosec.space/@kkarhan/113716442182953660</a>

Crypto NewsClipper DEX says recent $450K hack wasn’t caused by private key leak - A $450,000 hack on Clipper was likely from a withdrawal vulnerability, n... - <a href="https://cointelegraph.com/news/clipper-dex-clarifies-hack-not-private-key-leak" rel="nofollow noopener" translate="no" target="_blank">https://cointelegraph.com/news/clipper-dex-clarifies-hack-not-private-key-leak</a> <a href="https://schleuss.online/tags/cryptohacks" class="mention hashtag" rel="nofollow noopener" target="_blank">#cryptohacks</a> <a href="https://schleuss.online/tags/privatekey" class="mention hashtag" rel="nofollow noopener" target="_blank">#privatekey</a> <a href="https://schleuss.online/tags/exchange" class="mention hashtag" rel="nofollow noopener" target="_blank">#exchange</a> <a href="https://schleuss.online/tags/clipper" class="mention hashtag" rel="nofollow noopener" target="_blank">#clipper</a> <a href="https://schleuss.online/tags/hack" class="mention hashtag" rel="nofollow noopener" target="_blank">#hack</a> <a href="https://schleuss.online/tags/leak" class="mention hashtag" rel="nofollow noopener" target="_blank">#leak</a> <a href="https://schleuss.online/tags/dex" class="mention hashtag" rel="nofollow noopener" target="_blank">#dex</a>

Kevin Karhan :verified:<a href="https://transfem.social/@puppygirlhornypost2" class="u-url mention" rel="nofollow noopener" target="_blank">@puppygirlhornypost2</a> <a href="https://social.vlhl.dev/users/navi" class="u-url mention" rel="nofollow noopener" target="_blank">@navi</a> And whilst it's easy to blame <a href="https://infosec.space/tags/GoldenKeyBoot" class="mention hashtag" rel="nofollow noopener" target="_blank">#GoldenKeyBoot</a>, a leaked <a href="https://infosec.space/tags/PrivateKey" class="mention hashtag" rel="nofollow noopener" target="_blank">#PrivateKey</a> that was impossible to be removed, the problem is that <a href="https://infosec.space/tags/Windows" class="mention hashtag" rel="nofollow noopener" target="_blank">#Windows</a> is architecturally "insecure-able" because any changes necessary to make this not a problem would inherently mean the end for Windows as it's known to most.<ul><li>In fact, everything is done better by <a href="https://infosec.space/tags/Linux" class="mention hashtag" rel="nofollow noopener" target="_blank">#Linux</a> on the <a href="https://infosec.space/tags/Desktop" class="mention hashtag" rel="nofollow noopener" target="_blank">#Desktop</a> for almost two decades, which is why classic <a href="https://infosec.space/tags/Malware" class="mention hashtag" rel="nofollow noopener" target="_blank">#Malware</a> isn't a thing on Linux systems.</li></ul>Shure, you get some <a href="https://infosec.space/tags/Cryptojacking" class="mention hashtag" rel="nofollow noopener" target="_blank">#Cryptojacking</a> and some <a href="https://infosec.space/tags/CMS" class="mention hashtag" rel="nofollow noopener" target="_blank">#CMS</a>|es like <a href="https://infosec.space/tags/WordPress" class="mention hashtag" rel="nofollow noopener" target="_blank">#WordPress</a> that are constantly being attacked but generally, the way <a href="https://infosec.space/tags/updates" class="mention hashtag" rel="nofollow noopener" target="_blank">#updates</a> and <a href="https://infosec.space/tags/distribution" class="mention hashtag" rel="nofollow noopener" target="_blank">#distribution</a> of <a href="https://infosec.space/tags/Software" class="mention hashtag" rel="nofollow noopener" target="_blank">#Software</a> works on Linux Distros for the most part is completely antithetical to Windows.<ul><li>And that's how we got <a href="https://www.stickycomics.com/computer-update/" rel="nofollow noopener" target="_blank">this realistic scenario</a></li></ul>And anything <a href="https://infosec.space/tags/Microsoft" class="mention hashtag" rel="nofollow noopener" target="_blank">#Microsoft</a> could do at this point if they weren't horny for money but avtually cared is to scrap Windows and instead invest into <a href="https://infosec.space/tags/Wine" class="mention hashtag" rel="nofollow noopener" target="_blank">#Wine</a> to ease the transition...

Daniel BöhmerWhy is everyone using <a href="https://ieji.de/tags/base64" class="mention hashtag" rel="nofollow noopener" target="_blank">#base64</a> to encode their private SSH keys to store them in masked variables in <a href="https://ieji.de/tags/GitLab" class="mention hashtag" rel="nofollow noopener" target="_blank">#GitLab</a> CI?! 🤔⚠️ GitLab cannot effectively mask your private key in CI logs if you only give it a base64-encoded version of it!Instead I found a solution that stores the *original* private key format from <a href="https://ieji.de/tags/OpenSSH" class="mention hashtag" rel="nofollow noopener" target="_blank">#OpenSSH</a> in a one-line CI variable and recreates the begin/end markers for a valid OpenSSH identity file with commands inside the CI.<a href="https://stackoverflow.com/a/79124959/498634" rel="nofollow noopener" translate="no" target="_blank">https://stackoverflow.com/a/79124959/498634</a><a href="https://ieji.de/tags/ITsecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#ITsecurity</a> <a href="https://ieji.de/tags/CICD" class="mention hashtag" rel="nofollow noopener" target="_blank">#CICD</a> <a href="https://ieji.de/tags/privatekey" class="mention hashtag" rel="nofollow noopener" target="_blank">#privatekey</a>

Tarnkappe.info📬 Criminal Assets Bureau: Zugriff auf 378 Mio. USD in Bitcoin-Wallets verwehrt <a href="https://social.tchncs.de/tags/DarkCommerce" class="mention hashtag" rel="nofollow noopener" target="_blank">#DarkCommerce</a> <a href="https://social.tchncs.de/tags/Krypto" class="mention hashtag" rel="nofollow noopener" target="_blank">#Krypto</a> <a href="https://social.tchncs.de/tags/Bitcoin" class="mention hashtag" rel="nofollow noopener" target="_blank">#Bitcoin</a> <a href="https://social.tchncs.de/tags/CliftonCollins" class="mention hashtag" rel="nofollow noopener" target="_blank">#CliftonCollins</a> <a href="https://social.tchncs.de/tags/CriminalAssetsBureau" class="mention hashtag" rel="nofollow noopener" target="_blank">#CriminalAssetsBureau</a> <a href="https://social.tchncs.de/tags/Irland" class="mention hashtag" rel="nofollow noopener" target="_blank">#Irland</a> <a href="https://social.tchncs.de/tags/PrivateKey" class="mention hashtag" rel="nofollow noopener" target="_blank">#PrivateKey</a> <a href="https://social.tchncs.de/tags/Wallet" class="mention hashtag" rel="nofollow noopener" target="_blank">#Wallet</a> <a href="https://sc.tarnkappe.info/84ffe3" rel="nofollow noopener" translate="no" target="_blank">https://sc.tarnkappe.info/84ffe3</a>

Crypto NewsWirex Pay launches non-custodial crypto payments - Wirex Pay introduces its modular chain for payments, enhancing security ... - <a href="https://cointelegraph.com/news/wirex-launches-pay-app-non-custodial-crypto-payments" rel="nofollow noopener" translate="no" target="_blank">https://cointelegraph.com/news/wirex-launches-pay-app-non-custodial-crypto-payments</a> <a href="https://schleuss.online/tags/non" class="mention hashtag" rel="nofollow noopener" target="_blank">#non</a>-custodialwallets <a href="https://schleuss.online/tags/cryptopayments" class="mention hashtag" rel="nofollow noopener" target="_blank">#cryptopayments</a> <a href="https://schleuss.online/tags/blockchain" class="mention hashtag" rel="nofollow noopener" target="_blank">#blockchain</a> <a href="https://schleuss.online/tags/privatekey" class="mention hashtag" rel="nofollow noopener" target="_blank">#privatekey</a> <a href="https://schleuss.online/tags/mastercard" class="mention hashtag" rel="nofollow noopener" target="_blank">#mastercard</a> <a href="https://schleuss.online/tags/wirexpay" class="mention hashtag" rel="nofollow noopener" target="_blank">#wirexpay</a> <a href="https://schleuss.online/tags/ethereum" class="mention hashtag" rel="nofollow noopener" target="_blank">#ethereum</a>

Crypto NewsDefi Platform Delta Prime Loses $4.9 Million in Hack - According to Cyvers, Delta Prime, the decentralized finance (defi) platform, lost ... - <a href="https://news.bitcoin.com/defi-platform-delta-prime-loses-4-9-million-in-hack/" rel="nofollow noopener" translate="no" target="_blank">https://news.bitcoin.com/defi-platform-delta-prime-loses-4-9-million-in-hack/</a> <a href="https://schleuss.online/tags/decentralizedfinance" class="mention hashtag" rel="nofollow noopener" target="_blank">#decentralizedfinance</a> <a href="https://schleuss.online/tags/maliciouscontract" class="mention hashtag" rel="nofollow noopener" target="_blank">#maliciouscontract</a> <a href="https://schleuss.online/tags/newsbyte" class="mention hashtag" rel="nofollow noopener" target="_blank">#newsbyte</a>-3 <a href="https://schleuss.online/tags/privatekey" class="mention hashtag" rel="nofollow noopener" target="_blank">#privatekey</a> <a href="https://schleuss.online/tags/newsbytes" class="mention hashtag" rel="nofollow noopener" target="_blank">#newsbytes</a> <a href="https://schleuss.online/tags/hacking" class="mention hashtag" rel="nofollow noopener" target="_blank">#hacking</a>

Tarnkappe.info📬 Dark Skippy: Angriff kapert Hardware-Wallet-Schlüssel <a href="https://social.tchncs.de/tags/ITSicherheit" class="mention hashtag" rel="nofollow noopener" target="_blank">#ITSicherheit</a> <a href="https://social.tchncs.de/tags/Krypto" class="mention hashtag" rel="nofollow noopener" target="_blank">#Krypto</a> <a href="https://social.tchncs.de/tags/Blockchain" class="mention hashtag" rel="nofollow noopener" target="_blank">#Blockchain</a> <a href="https://social.tchncs.de/tags/DarkSkippy" class="mention hashtag" rel="nofollow noopener" target="_blank">#DarkSkippy</a> <a href="https://social.tchncs.de/tags/HardwareWallet" class="mention hashtag" rel="nofollow noopener" target="_blank">#HardwareWallet</a> <a href="https://social.tchncs.de/tags/Nonce" class="mention hashtag" rel="nofollow noopener" target="_blank">#Nonce</a> <a href="https://social.tchncs.de/tags/PrivateKey" class="mention hashtag" rel="nofollow noopener" target="_blank">#PrivateKey</a> <a href="https://social.tchncs.de/tags/SeedPhrase" class="mention hashtag" rel="nofollow noopener" target="_blank">#SeedPhrase</a> <a href="https://sc.tarnkappe.info/1161e0" rel="nofollow noopener" translate="no" target="_blank">https://sc.tarnkappe.info/1161e0</a>

parvXtl<a href="https://tech.lgbt/tags/SecureBoot" class="mention hashtag" rel="nofollow noopener" target="_blank">#SecureBoot</a> is completely broken on 200+ models from 5 big device makers: Keys were labeled "DO NOT TRUST." Nearly 500 device models use them anyway, 20240725, by Dan G, <a href="https://arstechnica.com/security/2024/07/secure-boot-is-completely-compromised-on-200-models-from-5-big-device-makers/" rel="nofollow noopener" translate="no" target="_blank">https://arstechnica.com/security/2024/07/secure-boot-is-completely-compromised-on-200-models-from-5-big-device-makers/</a>public perpetuation of test platform key <a href="https://tech.lgbt/tags/privateKey" class="mention hashtag" rel="nofollow noopener" target="_blank">#privateKey</a> marked <a href="https://tech.lgbt/tags/DoNotShip" class="mention hashtag" rel="nofollow noopener" target="_blank">#DoNotShip</a> <a href="https://tech.lgbt/tags/DoNotTrust" class="mention hashtag" rel="nofollow noopener" target="_blank">#DoNotTrust</a>, of <a href="https://tech.lgbt/tags/AMI" class="mention hashtag" rel="nofollow noopener" target="_blank">#AMI</a> corp, via centralized source code repository host <a href="https://tech.lgbt/tags/Binarly" class="mention hashtag" rel="nofollow noopener" target="_blank">#Binarly</a> corp <a href="https://tech.lgbt/tags/temporaryIsPermanent" class="mention hashtag" rel="nofollow noopener" target="_blank">#temporaryIsPermanent</a>

Crypto NewsMicroStrategy to launch Bitcoin-based decentralized ID solution - MicroStrategy has already built an application on “MicroStrategy Orange”... - <a href="https://cointelegraph.com/news/microstrategy-bitcoin-decentralized-identity-solution" rel="nofollow noopener" translate="no" target="_blank">https://cointelegraph.com/news/microstrategy-bitcoin-decentralized-identity-solution</a> <a href="https://schleuss.online/tags/bitcoinforcoporationsconference" class="mention hashtag" rel="nofollow noopener" target="_blank">#bitcoinforcoporationsconference</a> <a href="https://schleuss.online/tags/microstrategyorange" class="mention hashtag" rel="nofollow noopener" target="_blank">#microstrategyorange</a> <a href="https://schleuss.online/tags/digitalsignatures" class="mention hashtag" rel="nofollow noopener" target="_blank">#digitalsignatures</a> <a href="https://schleuss.online/tags/orangeforoutlook" class="mention hashtag" rel="nofollow noopener" target="_blank">#orangeforoutlook</a> <a href="https://schleuss.online/tags/microstrategy" class="mention hashtag" rel="nofollow noopener" target="_blank">#microstrategy</a> <a href="https://schleuss.online/tags/michaelsaylor" class="mention hashtag" rel="nofollow noopener" target="_blank">#michaelsaylor</a> <a href="https://schleuss.online/tags/privatekey" class="mention hashtag" rel="nofollow noopener" target="_blank">#privatekey</a> <a href="https://schleuss.online/tags/publickey" class="mention hashtag" rel="nofollow noopener" target="_blank">#publickey</a> <a href="https://schleuss.online/tags/github" class="mention hashtag" rel="nofollow noopener" target="_blank">#github</a>

Isu 🐲<a href="https://mastodon.online/tags/Tagesschau" class="mention hashtag" rel="nofollow noopener" target="_blank">#Tagesschau</a>, 20-Uhr-Ausgabe: Ist da tatsächlich ein nutzbarer privater Schlüssel abgebildet? 🧐 Der ist doch sicher noch mit einem Passwort geschützt, oder?<a href="https://mastodon.online/tags/security" class="mention hashtag" rel="nofollow noopener" target="_blank">#security</a> <a href="https://mastodon.online/tags/privatekey" class="mention hashtag" rel="nofollow noopener" target="_blank">#privatekey</a>

Erik van StratenEvS infosec Myth#0: AuthenticationMYTH:1) Authentication: prove that you are you.Factors: 1 or more (MFA, 2=2FA) of: 2.a) Something you know; 2.b) Something you have; 2.c) Something you are.MAY BE MISUNDERSTOOD AS:1) supplying full name + birth date.2.a) 1 + 1 = 10 (in binary notation); 2.b) Kitchen; 2.c) Nerd.TYPICAL WEAK USE CASE:1) Supplying your SSN to verify your identity: this is IDENTIFICATION, not authentication aka VERIFICATION of identity: typical serving side stupidity, extremely misunderstood, causing lots of misery (identity fraud).———— OR ———— 2.a) Password: 12345 2.b) Phone number + OTP via SMS.———— OR ———— 2.a) Password: qwerty 2.b) TOTP-app with secrets not being backed up, or using insecure / privacy unfriendly cloud backups [5].AUTHENTICATION SHOULD HAVE BEEN COMMUNICATED AS, FROM THE START:1) Authentication: PREVENT IMPERSONATION [1], [2], [3], [4].2) "MFA HAD FAILED" [5] (Microsoft, already in 2019). Reason: an ESSENTIAL REQUIREMENT of EACH FACTOR is that it cannot be easily obtained by an attacker (e.g. intercepted, copied, guessed, stolen etc.).2.a) A strong (not predictable, not guessable, not brute forceable and not deducible via OSINT) secret that only YOU and MAX. 1 OTHER PARTY know, transported only via reliable, CLEARLY IDENTIFIED server-authenticated, E2EE connections. With more than a few accounts, normal humans will be unable to remember strong passwords (preferable solution in [5]);2.b) Physical device with an "HSM" in your possession with strong anti-attacker-access measures in place;2.c) "Neural hash" of biometrics (usually weak because your biometrics are not a secret), stored in (and never leaving) a strongly protected "HSM" (see 2.b), transported from the scanner to the "HSM" in a secure manner.Plus, less often mentioned:2.d) "Passport" / digital certificate issued by TTP: typically strong if the provisioning infrastructure (such as PKI) is highly trustworthy. Theft of passports and unwanted copying of private keys must me made as hard as possible. A scan or photocopy of a passport MUST be considered worthless w.r.t. authentication (as knowledge of PII such as an SSN);2.e) Location: weak (easily spoofable).CONCLUSION A safer internet mandates that we stop oversimplifying complicated matters.EXAMPLES / MORE INFO:[1] <a href="https://english.defensie.nl/topics/travel-documents/identity-fraud-and-safe-airports" rel="nofollow noopener" translate="no" target="_blank">https://english.defensie.nl/topics/travel-documents/identity-fraud-and-safe-airports</a> Note: this page contains a lie, at least in NL: "Making a photocopy of your identity document is prohibited by law". The Dutch government even provides a free app that may obfuscate "sensitive" parts of ID documents in order to create "secure" copies (idiots): <a href="https://www.government.nl/topics/identity-fraud/question-and-answer/how-do-i-make-a-secure-copy-of-my-id-with-the-kopieid-app" rel="nofollow noopener" translate="no" target="_blank">https://www.government.nl/topics/identity-fraud/question-and-answer/how-do-i-make-a-secure-copy-of-my-id-with-the-kopieid-app</a>[2] In Dutch: <a href="https://www.security.nl/posting/792391/Authenticatie+en+impersonatie" rel="nofollow noopener" translate="no" target="_blank">https://www.security.nl/posting/792391/Authenticatie+en+impersonatie</a>[3] <a href="https://infosec.exchange/@ErikvanStraten/111943593509649252" rel="nofollow noopener" translate="no" target="_blank">https://infosec.exchange/@ErikvanStraten/111943593509649252</a>[4] *NOT* Trump: <a href="https://twitter.com/realDonaldTrump/status/890617797956456448" rel="nofollow noopener" translate="no" target="_blank">https://twitter.com/realDonaldTrump/status/890617797956456448</a>[5] <a href="https://infosec.exchange/@ErikvanStraten/111989393380873096" rel="nofollow noopener" translate="no" target="_blank">https://infosec.exchange/@ErikvanStraten/111989393380873096</a><a href="https://infosec.exchange/tags/authentication" class="mention hashtag" rel="nofollow noopener" target="_blank">#authentication</a> <a href="https://infosec.exchange/tags/impersonation" class="mention hashtag" rel="nofollow noopener" target="_blank">#impersonation</a> <a href="https://infosec.exchange/tags/identity" class="mention hashtag" rel="nofollow noopener" target="_blank">#identity</a> <a href="https://infosec.exchange/tags/identityFraud" class="mention hashtag" rel="nofollow noopener" target="_blank">#identityFraud</a> <a href="https://infosec.exchange/tags/2FA" class="mention hashtag" rel="nofollow noopener" target="_blank">#2FA</a> <a href="https://infosec.exchange/tags/MFA" class="mention hashtag" rel="nofollow noopener" target="_blank">#MFA</a> <a href="https://infosec.exchange/tags/factors" class="mention hashtag" rel="nofollow noopener" target="_blank">#factors</a> <a href="https://infosec.exchange/tags/OTP" class="mention hashtag" rel="nofollow noopener" target="_blank">#OTP</a> <a href="https://infosec.exchange/tags/SMS" class="mention hashtag" rel="nofollow noopener" target="_blank">#SMS</a> <a href="https://infosec.exchange/tags/TOTP" class="mention hashtag" rel="nofollow noopener" target="_blank">#TOTP</a> <a href="https://infosec.exchange/tags/Authenticator" class="mention hashtag" rel="nofollow noopener" target="_blank">#Authenticator</a> <a href="https://infosec.exchange/tags/passwords" class="mention hashtag" rel="nofollow noopener" target="_blank">#passwords</a> <a href="https://infosec.exchange/tags/passwordManager" class="mention hashtag" rel="nofollow noopener" target="_blank">#passwordManager</a> <a href="https://infosec.exchange/tags/passwordManagers" class="mention hashtag" rel="nofollow noopener" target="_blank">#passwordManagers</a> <a href="https://infosec.exchange/tags/Microsoft" class="mention hashtag" rel="nofollow noopener" target="_blank">#Microsoft</a> <a href="https://infosec.exchange/tags/SSN" class="mention hashtag" rel="nofollow noopener" target="_blank">#SSN</a> <a href="https://infosec.exchange/tags/BSN" class="mention hashtag" rel="nofollow noopener" target="_blank">#BSN</a> <a href="https://infosec.exchange/tags/passport" class="mention hashtag" rel="nofollow noopener" target="_blank">#passport</a> <a href="https://infosec.exchange/tags/eID" class="mention hashtag" rel="nofollow noopener" target="_blank">#eID</a> <a href="https://infosec.exchange/tags/ElectronicPassport" class="mention hashtag" rel="nofollow noopener" target="_blank">#ElectronicPassport</a> <a href="https://infosec.exchange/tags/rickroll" class="mention hashtag" rel="nofollow noopener" target="_blank">#rickroll</a> <a href="https://infosec.exchange/tags/KopieID" class="mention hashtag" rel="nofollow noopener" target="_blank">#KopieID</a> <a href="https://infosec.exchange/tags/PKI" class="mention hashtag" rel="nofollow noopener" target="_blank">#PKI</a> <a href="https://infosec.exchange/tags/certificates" class="mention hashtag" rel="nofollow noopener" target="_blank">#certificates</a> <a href="https://infosec.exchange/tags/privateKey" class="mention hashtag" rel="nofollow noopener" target="_blank">#privateKey</a> <a href="https://infosec.exchange/tags/publickeycryptography" class="mention hashtag" rel="nofollow noopener" target="_blank">#publickeycryptography</a>

Teri RadichelDo you know where your certificates reside when you use AWS ACM with a “Trusted Enclave”? ~~ I was surprised at what I discovered when digging into the details ~~ <a href="https://infosec.exchange/tags/AWS" class="mention hashtag" rel="nofollow noopener" target="_blank">#AWS</a> <a href="https://infosec.exchange/tags/ACM" class="mention hashtag" rel="nofollow noopener" target="_blank">#ACM</a> <a href="https://infosec.exchange/tags/Certificate" class="mention hashtag" rel="nofollow noopener" target="_blank">#Certificate</a> <a href="https://infosec.exchange/tags/TLS" class="mention hashtag" rel="nofollow noopener" target="_blank">#TLS</a> <a href="https://infosec.exchange/tags/PrivateKey" class="mention hashtag" rel="nofollow noopener" target="_blank">#PrivateKey</a> <a href="https://medium.com/cloud-security/do-you-know-where-your-certificates-reside-when-you-use-aws-acm-with-a-trusted-enclave-e924eb1fdd45" rel="nofollow noopener" translate="no" target="_blank">https://medium.com/cloud-security/do-you-know-where-your-certificates-reside-when-you-use-aws-acm-with-a-trusted-enclave-e924eb1fdd45</a>

Crypto NewsEthereum Wallet Drainer Steals $60M in Six Months - Hackers that stole more than $60 million worth of crypto in six months are using a piece ... - <a href="https://www.coindesk.com/business/2023/11/13/ethereum-wallet-drainer-steals-60m-in-six-months/?utm_medium=referral&utm_source=rss&utm_campaign=headlines" rel="nofollow noopener" translate="no" target="_blank">https://www.coindesk.com/business/2023/11/13/ethereum-wallet-drainer-steals-60m-in-six-months/?utm_medium=referral&utm_source=rss&utm_campaign=headlines</a> <a href="https://schleuss.online/tags/privatekey" class="mention hashtag" rel="nofollow noopener" target="_blank">#privatekey</a> <a href="https://schleuss.online/tags/finance" class="mention hashtag" rel="nofollow noopener" target="_blank">#finance</a> <a href="https://schleuss.online/tags/exploit" class="mention hashtag" rel="nofollow noopener" target="_blank">#exploit</a> <a href="https://schleuss.online/tags/wallet" class="mention hashtag" rel="nofollow noopener" target="_blank">#wallet</a> <a href="https://schleuss.online/tags/news" class="mention hashtag" rel="nofollow noopener" target="_blank">#news</a> <a href="https://schleuss.online/tags/hack" class="mention hashtag" rel="nofollow noopener" target="_blank">#hack</a>

Recent searches

Search options

Administered by:

Server stats:

#privatekey