Tor: DigiNotar Debacle, and what you should do about it

Xeni Jardin 8:14 am Tue Sep 6, 2011

Security researcher and Tor Project member Jake Appelbaum has been writing about the DigiNotar hack I blogged about yesterday. He's been on it for some time now, and has a couple of posts up on the Tor blog addressing how this affects the Tor anonymity/privacy proxy system. Here's a snip:

This incident doesn't affect the functionality of Tor clients or the Tor Network itself, since Tor doesn't use the flawed CA system. The Tor network uses a much simpler and flatter trust design that protects us from many of these CA issues. Further, Tor's distributed-trust design limits the damage from compromise of any given network component.

But the incident does affect users that are attempting to reach The Tor Project's infrastructure: with one of these bogus certificates, an attacker could convince your browser that you were talking to The Tor Project website, when really you were talking to the attacker.

We have taken direct action in an attempt to stop this kind of attack in the future with two major browser vendors and we hope to integrate a fix with all other willing browsers. Please contact us if you ship a browser and you'd like to help your users to be proactively secure when visiting our sites

Read the whole thing: "The DigiNotar Debacle, and what you should do about it." And, "DigiNotar Damage Disclosure."

Amazon used a China firm on U.S. blacklist for thermal cameras to monitor workers for COVID-19 fever

• Amazon's new Chinese thermal spycam vendor was blacklisted by U.S. over allegations it helped China detain and monitor Uighurs and other Muslim minorities READ THE REST
Financial Times journalist Mark Di Stefano accused of accessing private Zoom meetings, then publishing the information

Mark Di Stefano of the Financial Times is accused by The Independent of accessing private Zoom meetings held by The Independent and The Evening Standard as journalists were learning how… READ THE REST
Hackers tried to break into WHO, which faces more than two-fold increase in cyberattacks

Hackers tried to break into the World Health Organization earlier in March, as the COVID-19 pandemic spread, Reuters reports. Security experts blame an advanced cyber-espionage hacker group known as DarkHotel.… READ THE REST
Short Post, just one paragraph

Dessert cheesecake wafer bear claw fruitcake. Fruitcake chupa chups donut candy canes marzipan. Apple pie sweet roll tart chocolate cake macaroon marshmallow carrot cake gummi bears sweet. Pastry sugar plum… READ THE REST
Save 50% on a 1-year subscription to Dashlane's premium password manager

We all know vital information about ourselves and our private digital accounts can be compromised by cybercriminals. However, many would be frightened to know just how compromised they and their… READ THE REST
The Bite Helper removes the itch of a mosquito bite in seconds

While mosquitoes have certainly earned their title as the deadliest animal on earth, their impact on most of our lives is usually a lot less consequential. But even though they… READ THE REST