23,000 HTTPS certificates axed after CEO emails private keys

Enlarge (credit: unrequited life) A major dust-up on an Internet discussion forum is touching off troubling questions about the security of some browser-trusted HTTPS certificates when it revealed the CEO of a certificate reseller emailed a partner the sensitive private keys for 23,000 TLS certificates. The email was sent on Tuesday by the CEO of […]

Apple will store China’s iCloud keys on local servers

Apple has already bent over backwards in a bid to keep doing business in China, but it’ll have to bend a little further. As of the end of February, the company will host mainland Chinese users’ iCloud keys on servers located within the country — and they’ll be jointly run by a state-backed company, Guizhou […]

‘51 minutes of torture’ Kerber destroys Keys

Video Image Rafa: ‘Too many people getting injured’1:16 Tennis: Rafa Nadal Hurt Rafa sends stern message January 24th 2018 4 hours ago /display/newscorpaustralia.com/Web/NewsNetwork/Sport news and galleries/Tennis news and galleries/ Spain’s Rafael Nadal receives medical attention during their men’s singles quarter-finals match against Croatia’s Marin Cilic on day nine of the Australian Open tennis tournament in […]

1998 attack that messes with sites’ secret crypto keys is back in a big way

(credit: Yuri Samoilov/Flickr) A surprisingly big number of top-name websites—Facebook and PayPal among them—recently tested positive for a critical, 19-year-old vulnerability that allowed attackers to decrypt encrypted data and sign communications using the sites’ secret encryption key. The vulnerability in the transport layer security protocol for Web encryption was disclosed in 1998 when researcher Daniel […]

Helen Skelton: Flash balm, spare keys, wet wipes – Five things I can’t live without

1 – Flash balm Even before I had children I was always a bit last minute and would end up getting changed in the back of the car before a posh event. Now that I’m a mum I don’t have the time to do a full face of make-up in the morning and if I […]

DJI left private keys for SSL, cloud storage in public view and exposed customers

Enlarge / A security researcher says he was trying to play fair with DJI’s bug bounty program. DJI calls him a hacker who exposed customer data. DJI, the Chinese company that manufactures the popular Phantom brand of consumer quadcopter drones, was informed in September that developers had left the private keys for both the “wildcard” […]

With Amazon Key’s launch, customers and lawyers have lots of questions

Enlarge / IoT products like Amazon Key come with a whole set of risks that consumers aren’t equipped to assess themselves. (credit: Amazon) Last week, Amazon announced a new voluntary service that allows its own contracted delivery personnel to temporarily access customers’ homes through a new service dubbed “Amazon Key,” which begins Wednesday, November 8. […]