A 2nd major crypto vulnerability being disclosed Monday involves millions of 1024- and 2048-bit RSA keys that are practically factorizable.
Show this thread
This is one of two MAJOR crypto vulnerabilities being disclosed Monday. A separate one, also involving multiple vendors, drops at 4 am PT.https://twitter.com/dangoodin001/status/919789886810374144 …
-
-
-
Cryptographers picked the wrong week to quit sniffing glue ;-)
Show this thread
End of conversation
New conversation -
-
-
Mikrotik also not affected (patched a week ago).
-
Thanks for reminding me to update my Mikrotik router.
End of conversation
New conversation -
-
-
Any hints on that second one? Area or scope at least?
New conversation -
-
-
is 2FA which I receive on my wifi connected smartphone still safe? I use google authenticator app, is that https/secure?
-
The Google Authenticator application works entirely offline; the codes are time + key-based, no connectivity involved / required.
-
But there is now a "Google Prompt" feature, which pushes notification to the Google app, allowing single-tap login...
-
Ah, I stand corrected; but the connection to Google for that presumably uses TLS so the security of a WiFi connection still isn't critical.
End of conversation
New conversation -
-
-
Because ‘secure WiFi no longer exists’ isn’t enough for one day.
Thanks. Twitter will use this to make your timeline better. Undo
-
-
-
Wpa2 has been compromised for ages. There are tweens hosting "how to crack wpa2" vids on YouTube for something like 5 years?
-
Don't those rely on brute forcing passwords, which can take a long time with a decent one?
-
Exactly. Is it this flaw about enterprise or personal wpa2? If it’s personal, nothing new, really
-
I don't think this has an enterprise/personal difference, but it's an attack on hubs that opens up the whole network. Big ouch for everyone.
-
I can’t wait to read the paper
End of conversation
New conversation -
-
-
Thanks. Twitter will use this to make your timeline better. Undo
-
-
-
we don't know how loosely coupled the executive and intelligence organs are in China.
Thanks. Twitter will use this to make your timeline better. Undo
-
-
-
Do you expect the main commercial vendors to patch? Or do users need to patch their home routers themselves?
Thanks. Twitter will use this to make your timeline better. Undo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.