656 Articles 3 Followers
The previous article in this series has described why passwords which were fully compliant with the NIST recommendations from 2003 turned out to be insecure. This article, which is the third part of the series, will describe how computers are working...
Last days a Swiss cryptographer Jean-Philippe Aumasson has tweeted a post putting TronLink's Android mobile wallet encryption security to a shame. The Co-Founder of Swiss company Taurus has claimed putting only 20 minutes of effort into finding tha...
The new iOS version (14) is finally out and most people seem to have installed it. As I have gotten used to the new functions and features of iOS 14 the one I was really pumped for was being able to set my browser to whatever I wanted as I do not use...
Last month Mozilla has patched and disclosed a serious vulnerability affecting its mobile browser Firefox for Android devices urging their users throughout the end of summer to update to Firefox v79 as soon as possible. The bug was reported to Mozi...
I have recently gotten frustrated when I lost my phone and had to update my 2FA to a new device. I went through to different exchanges and there is a need for me to take a Selfie with my ID and a paper with the date on it. After doing so for a few ex...
The previous article of this series has given an overview of the reasons why human-generated passwords are weak (they're already out there, they're predictable, and they're short) and what was the origin of all those bizarre password creation rules t...
An Iran-based cyber attack group called Rampant Kitten managed to steal Google 2FA codes with a new malware they developed. The software produced by the Rampant Kitten group mostly uses the Trojan model and is integrated into applications that seem h...
Using hardware wallet does not make you invincible against social engineering, physical threats or human errors but it's definitely one level higher protecting your crypto assets especially when it's sizable and most recommended when HODLing coins an...
It simply makes no sense to call for IoT devices to be certified safe-and-secure. Before you get bent out of shape, hear me out. Regulations are unwieldy blunt instruments, best left as a last resort. Cybersecurity regulations are not nimble, tend...
Last month Microsoft has patched one of the most serious vulnerability reported to the company ever, a bug that if abused would easily allow actors to overtake Windows Server running as domain controllers in enterprise networks. The vulnerability rec...
