SSH gets protection against side channel attacks

SSH gets protection against side channel attacks

Add protection for private keys at rest in RAM against speculation and memory sidechannel attacks like Spectre, Meltdown, Rowhammer and Rambleed. This change encrypts private keys when they are not in use with a symmetic key that is derived from a relatively large “prekey” consisting of random data (currently 16KB). Attackers must recover the entire prekey with high accuracy before they can attempt to decrypt the shielded private key, but the current generation of attacks have bit error rates that, when applied cumulatively to the entire prekey, make this keys are encrypted “shielded” when loaded and then automatically and transparently unshielded when used for signatures or when being saved/serialised.

Source: www.undeadly.org

Conservative Rep. Will Hurd ‘Disinvited’ to Black Hat Conference

Conservative Rep. Will Hurd ‘Disinvited’ to Black Hat Conference

REP. WILL HURD DISINVITED TO CYBERSECURITY CONFERENCE AFTER VOTING RECORD ON WOMEN’S ISSUES SPARKS OUTRAGE
If I have learned anything from my time in Congress, it is that the only way we are going to solve the big problems our country faces is by working together. We must have real debates where disagreements exist, listen to each other, not shy away from ideas different from our own and treat people with respect. I hope this day comes sooner rather than later because I was really looking forward to getting feedback from some of our nation’s most brilliant minds in cybersecurity on my ideas for adapting a hacker mindset to solve our most pressing national and international information security threats.

Source: www.foxnews.com

Exthouse – Analyze the impact of a browser extension on web performance

Exthouse – Analyze the impact of a browser extension on web performance

Analyze the impact of a browser extension on web performance. Exthouse is a tool powered by Lighthouse that provides a report about web extension impact on web performance. Exthouse performs several steps to do analysis:

Most of the extensions add tasks to the main thread and affect interactivity metrics:

This analysis evaluates the top 10 extensions from Chrome Web Store by users count.

Source: github.com

India has the highest data usage per smartphone

India has the highest data usage per smartphone

India has the highest average data usage per smartphone, reaching 9.8 GB per month at the end of 2018, according to a new study by Swedish telecom equipment maker Ericsson. “Increased numbers of LTE subscriptions, attractive data plans being offered by service providers, and young people’s changing video viewing habits have driven monthly usage growth,” Nitin Bansal, head of Ericsson India and head of network solutions, southeast Asia, Oceania and India, said. This is expected to continue, as video is embedded in all types of online content… we see monthly data usage per smartphone increasing from 9.8 GB in 2018 to 18 GB by 2024 [in India], growing at 11% CAGR,” Mr. Bansal added.

Source: www.thehindu.com

OpenSSH gets protection against side channel attacks like Spectre, Rambleed

OpenSSH gets protection against side channel attacks like Spectre, Rambleed

Add protection for private keys at rest in RAM against speculation and memory sidechannel attacks like Spectre, Meltdown, Rowhammer and Rambleed. This change encrypts private keys when they are not in use with a symmetic key that is derived from a relatively large “prekey” consisting of random data (currently 16KB). Attackers must recover the entire prekey with high accuracy before they can attempt to decrypt the shielded private key, but the current generation of attacks have bit error rates that, when applied cumulatively to the entire prekey, make this keys are encrypted “shielded” when loaded and then automatically and transparently unshielded when used for signatures or when being saved/serialised.

Source: www.undeadly.org

Wootz’s Steel

Wootz’s Steel

Wootz steel originated in South India, in Tamilakam present day Tamil Nadu and Kerala, and ancient Sri Lanka (Tamraparni). [6][7] The Chinese and locals in Sri Lanka adopted the production methods of creating wootz steel from the Chera Tamils by the 5th century BC. J.D Verhoeven and Alfred Pendray reconstructed methods of production, proved the role of impurities of ore in the pattern creation, and reproduced Wootz steel with patterns microscopically and visually identical to one of the ancient blade patterns.

Source: en.wikipedia.org

Ask HN: Is tiktok reading and uploading user contact as it is doing in China?

Ask HN: Is tiktok reading and uploading user contact as it is doing in China?

A China user prosecuted Tiktok for it read and uploaded users contact without permission and it is not mentioned in its privacy statement. The Tiktok claimed in the court that contact is not private. I have heard that Tiktok has been unexpectedly successful abroad so I am wondering whether its terrifying claim is a result of China’s poor protection of privacy or it is just such a terrible company.

Source: news.ycombinator.com

Thoughts on Man’s Purpose in Life (1977)

Thoughts on Man’s Purpose in Life (1977)

Responsibility implies a commitment to self which many are not willing to make; they are strongly attracted to accepting a course of action or direction for their lives imposed by an external source. Another important principle of existence which gives purpose and meaning to life is excellence. These principles of existence—responsibility, perseverance, excellence, creativity, courage—must be wedded with intellectual growth and development if we are to find meaning and purpose in our lives.

Source: govleaders.org

My MacBook Pro exploded and burst into flames

My MacBook Pro exploded and burst into flames

They understood the severity of the situation but said nothing could be done until it spent 24 hours in a fire-proof safe and that they’d call me with a plan/update. I produce music for a living – FIVE days without my computer is unacceptable. EDIT: the explosion was yesterday afternoon.

Source: www.reddit.com