OpenSSH Patches Information Leak Flaw
OpenSSH patched a vulnerability that affects all versions of OpenSSH prior to 7.2p2 with X11Forwarding enabled, and could expose files to theft and manipulation.
Privacy
Threatpost News Wrap, March 11, 2016
Mike Mimoso and Chris Brook discuss the week in news, including how Amazon is backtracking on encryption when it comes to their devices, a new set of alleged passcode bypasses for iOS, and the new OS X ransomware KeRanger.
DOJ Calls Apple’s Rhetoric ‘Corrosive’ and ‘False’
The Justice Department took off the gloves in its latest volley against Apple and its refusal to comply with a court order to unlock a terrorist’s iPhone.
21st Century Oncology is warning 2.2 million of its current and former patients of a breach where social security numbers and health data were swiped.
Amazon reversed course on a decision to remove device-level encryption from its Fire OS 5 tablets and said the feature will return this spring.
Mike Mimoso and Chris Brook recap RSA 2016, the pervasiveness of the FBI vs. Apple debate, OpenSSL two years after Heartbleed, and why hacking back is always a bad idea.
The massive DROWN vulnerability resurrects fears over lingering export-grade cryptography
NSA Director Admiral Michael Rogers spoke at RSA Conference about public-private cooperation and sharing, but failed to touch on the agency’s silence around the Apple-FBI debate.
The annual Cryptographers’ Panel at RSA Conference took on the FBI-Apple debate head-on, and could not arrive at a unified conclusion.
Mike Mimoso and Chris Brook discuss the news of the week including the ongoing FBiOS battle, a court ruling re: Tor, and Operation Blockbuster.
