Archiv: Technik / Techniker / Programmierer / technicians / technics / programmers


08.02.2025 - 15:42 [ Netzpolitik.org ]

Drohnenprogramm-Whistleblowerin: „Wie ein Internet der höllischen Dinge“

Die Entscheidung wurde wahrscheinlich mit Hilfe von Daten getroffen, von denen einige aus sozialen Netzwerken und dem Internet stammen oder die von Datenmaklern verkauft wurden. Offensichtlich spiegeln viele der gesammelten Daten Vorurteile wieder.

Max Freitag: OpenAI, das Unternehmen hinter ChatGPT, arbeitet jetzt mit dem Militärdienstleister Anduril zusammen, um „defensive“ Drohnentechnologie zu entwickeln. Könnte es sein, dass ich eines Tages einen Chat-Bot nutze und meine Daten dazu verwendet werden, Algorithmen zu trainieren, die dann zum Töten von Menschen eingesetzt werden?

Lisa Ling: Sicherlich ist es möglich, sogar wahrscheinlich, dass alles, was von einem vernetzten Gerät an die Cloud gesendet wird, sei es eine Kredittransaktion oder eine Uber-Fahrt, letztendlich als Waffe eingesetzt werden könnte.

01.02.2025 - 22:09 [ start.njump.me ]

WELCOME TO NOSTR

To join Nostr you need a profile, but it is not the usual one that a company generates and manages for you. You create it yourself, no permissions are required.

Nostr is a different experience from the beginning: because there is no central authority taking care of who is who, each user is identified by a cryptographic keypair; don’t worry about the tech slang, it is just a strong password that you will have to keep safe.

This wizard is one of the many ways to bootstrap a Nostr profile that you can later use in other apps. We help you to create your keypair and safely manage it in a few steps. Are you ready?

01.02.2025 - 21:27 [ Roland / Pareto ]

What is Nostr? ELI5

The aim of ELI5 (explain me like I‘m 5) is to explain difficult things simply. This is urgently needed in our high-tech world, because only by understanding the technologies can we use them properly and develop them further.

I‘m starting my series with Nostr, a relatively new internet protocol.

01.02.2025 - 21:21 [ Roland / Pareto ]

Was ist Nostr? ELI5

Schwierige Dinge einfach zu erklären ist der Anspruch von ELI5 (explain me like I‘m 5). Das ist in unserer hoch technisierten Welt dringend erforderlich, denn nur mit dem Verständnis der Technologien können wir sie richtig einsetzen und weiter entwickeln.

Ich starte meine Serie mit Nostr, einem relativ neuen Internet-Protokoll.

11.01.2025 - 20:56 [ Small-Tech.org ]

SmallTechnology Foundation: About

We’re Laura Kalbag and Aral Balkan (and Oskar the huskamute). We live and work in Bray, Ireland.

Since 2014, we’ve been advocating for regulation of surveillance capitalism, investment in ethical alternatives, and carrying out research and development on ethical alternatives.

After leaving the UK and moving to Ireland, we set up the Small Technology Foundation with the mission to evolve the Internet so each one of us can own and control our own place on it.

We strive to follow the principles of Small Technology in our work.

We don’t take money from surveillance capitalists and we exist thanks to the support of individuals like you.

11.01.2025 - 20:34 [ Aral Balkan ]

What is the Small Web?

The Small Web is for people (not startups, enterprises, or governments). It is also made by people and small, independent organisations (not startups, enterprises, or governments).

On the Small Web, you (and only you) own and control your own home (or homes).

Small Web applications and sites are single tenant. That means that one server hosts one application that serves just one person: you. On the Small Web, we do not have the concept of “users”. When we refer to people, we call them people.

Another fundamental difference between the Big Web and Small Web is that on the Big Web we trust servers and distrust clients whereas on the Small Web, we distrust servers and trust clients. We treat servers as dumb delivery mechanisms. The client – under the control of the person who owns the site or app – is the only trusted environment.

05.01.2025 - 12:19 [ ssllabs.com ]

SSL Report: unmissions.org (85.159.207.65)

TLS 1.3 No
TLS 1.2 Yes
TLS 1.1 Yes
TLS 1.0 Yes

19.12.2024 - 23:55 [ Ran Bar-Zik / Twitter ]

> וודאו שיש לכם TLS 1.3 או TLS 1.2 תחת הסעיף Protocols. עדיף שלא יהיה לכם TLS 1.0\1.1 בכלל. מספר השרתים הפגיעים בישראל: 100,000+ לא פשוט לכתוב אייטם כזה לאנשים לא מקצועיים, אבל הוא חשוב והתפרסם ב @Haaretz

(10 Dec 2019)

אני מודה ל @noamr ו- @GilBahat על ה-peer review

05.12.2024 - 11:20 [ DNSSEC-Deployment.org ]

DNSSEC History Project

DNS Security Prehistory

Few technologies are more critical to the operation of the Internet than the Domain Name System (DNS). The initial design of DNS did not take security into consideration, which was not unusual for protocols designed in the early 1980s. At the time of its development, and for many years there after, DNS had functioned without many formal security mechanisms, thereby making it vulnerable to DNS spoofing and other malicious attacks.

Determining the Need for DNSSEC

[What drove the work? Big picture issues. Surely this includes the demonstrations of cache poisoning by Steve Bellovin and Tsutomu Shimomura in the early 1990s and the similar work by Dan Kaminsky in 2008, but it may include much other activity.]

(…)

Cache Poisoning

The earliest known security problem with DNS was DNS cache poisoning, also sometimes called DNS spoofing. DNS cache poisoning happens when a DNS server downstream from the authoritative one returns incorrect data to queries for names or IP addresses. This occurs because an attacker has ‘poisoned’ the cache of the downstream DNS server to return the malicious response. DNS cache poisoning is a subset of a group of problems computer scientists often classify as cache invalidation.

This problem, known to the Computer Science Research Group(CSRG) at U.C. Berkeley since 1989, was finally described in a paper by Steve Bellovin in 1993. Bellovin initially put off publishing the paper out of fear the information would be exploited.

(…)

Concern over DNS cache poisoning, specifically that the leak would become publicly known, existed from 1989 to 1995.

05.12.2024 - 10:59 [ Harvard.edu ]

Brief History of the Domain Name System

Jan. 7, 1958 – President Eisenhower requested funds to start ARPA.

(…)

– Early 1967 – Meeting of ARPA’s principal investigators in Ann Arbor, Michigan. Roberts (the director of the IPTO) put forward the idea of a computer network. Wes Clark introduced the idea of a subnetwork: small, identical computers all interconnected – “interface message processors (IMPs).” Engelbert volunteered to the Network Information Center (NIC).

– 1967 – Roberts published paper on ARPANET.

– End of 1967 – The Association for Computing Machinery’s computer conference in Gatliburg, Tennessee. Roberts presented his first paper on ARPANET and heard of work done by Donald Davies’ team at NPL and Paul Baran at RAND.

(…)

Summer 1975 – The Defense Communications Agency (DCA) took over the management of ARPANET.

(…)

– November 1983 – The rapid growth of the internet caused massive problems in bookkeeping. To deal with this problem a group including Jon Postel, Paul Mockapetris and Craig Partrige published RFC 882 which created the domain name system (DNS) to make Internet navigation easier. With DNS, users can type host names such as “USC-ISIF” instead of “10.2.0.52.” Every Address would have information from specific to general.

17.11.2024 - 22:44 [ Computerwoche.de ]

Neuer Open-Source-DNS-Server: Unbound soll BIND Konkurrenz machen

(21 Mai 2008)

Eine Gruppe von Experten hat eine quelloffene Alternative zum DNS-Server (Domain Name System) „BIND“ vorgestellt, die leistungsfähiger und sicherer sein soll.

Der neue DNS-Server heißt “Unbound“, steht unter einer BSD-Lizenz und liegt jetzt in Version 1.0.0 vor. Die C-Implementierung wird von der nicht gewinnorientierten niederländischen Firma NL Labs gepflegt.

17.11.2024 - 18:31 [ DNSSEC-Deployment.org ]

DNSSEC History Project

DNS Security Prehistory

Few technologies are more critical to the operation of the Internet than the Domain Name System (DNS). The initial design of DNS did not take security into consideration, which was not unusual for protocols designed in the early 1980s. At the time of its development, and for many years there after, DNS had functioned without many formal security mechanisms, thereby making it vulnerable to DNS spoofing and other malicious attacks.

Determining the Need for DNSSEC

[What drove the work? Big picture issues. Surely this includes the demonstrations of cache poisoning by Steve Bellovin and Tsutomu Shimomura in the early 1990s and the similar work by Dan Kaminsky in 2008, but it may include much other activity.]

(…)

Cache Poisoning

The earliest known security problem with DNS was DNS cache poisoning, also sometimes called DNS spoofing. DNS cache poisoning happens when a DNS server downstream from the authoritative one returns incorrect data to queries for names or IP addresses. This occurs because an attacker has ‘poisoned’ the cache of the downstream DNS server to return the malicious response. DNS cache poisoning is a subset of a group of problems computer scientists often classify as cache invalidation.

This problem, known to the Computer Science Research Group(CSRG) at U.C. Berkeley since 1989, was finally described in a paper by Steve Bellovin in 1993. Bellovin initially put off publishing the paper out of fear the information would be exploited.

(…)

Concern over DNS cache poisoning, specifically that the leak would become publicly known, existed from 1989 to 1995.

17.11.2024 - 17:28 [ Harvard.edu ]

Brief History of the Domain Name System

Jan. 7, 1958 – President Eisenhower requested funds to start ARPA.

(…)

– Early 1967 – Meeting of ARPA’s principal investigators in Ann Arbor, Michigan. Roberts (the director of the IPTO) put forward the idea of a computer network. Wes Clark introduced the idea of a subnetwork: small, identical computers all interconnected – “interface message processors (IMPs).” Engelbert volunteered to the Network Information Center (NIC).

– 1967 – Roberts published paper on ARPANET.

– End of 1967 – The Association for Computing Machinery’s computer conference in Gatliburg, Tennessee. Roberts presented his first paper on ARPANET and heard of work done by Donald Davies’ team at NPL and Paul Baran at RAND.

(…)

Summer 1975 – The Defense Communications Agency (DCA) took over the management of ARPANET.

(…)

– November 1983 – The rapid growth of the internet caused massive problems in bookkeeping. To deal with this problem a group including Jon Postel, Paul Mockapetris and Craig Partrige published RFC 882 which created the domain name system (DNS) to make Internet navigation easier. With DNS, users can type host names such as “USC-ISIF” instead of “10.2.0.52.” Every Address would have information from specific to general.

15.11.2024 - 12:40 [ SSLLabs.com ]

SSL Report: unifil.unmissions.org (85.159.200.174)

Protocols
TLS 1.3 No
TLS 1.2 Yes
TLS 1.1 Yes
TLS 1.0 Yes

(…)

Forward Secrecy With some browsers (more info)

(…)

Strict Transport Security (HSTS) Invalid Server provided more than one HSTS header

16.10.2024 - 22:24 [ ssllabs.com ]

SSL Report: unmissions.org (85.159.207.65)

TLS 1.3 No
TLS 1.2 Yes
TLS 1.1 Yes
TLS 1.0 Yes

11.10.2024 - 01:10 [ ssllabs.com ]

SSL Report: unmissions.org (85.159.207.65)

TLS 1.3 No
TLS 1.2 Yes
TLS 1.1 Yes
TLS 1.0 Yes

04.10.2024 - 12:10 [ Palestinian News and Information Agency – WAFA.ps ]

www.wafa.ps

Verifying you are human. This may take a few seconds………………………………………..

04.10.2024 - 12:10 [ National News Agency (NNA) Lebanon ]

www.nna-leb.gov.lb

Verifying you are human. This may take a few seconds……………………………………………

01.10.2024 - 15:10 [ Nachrichtenagentur Radio Utopie ]

Note for our feed subscribers

– all single feeds for our 10.000+ tags are now deactivated.
– of course, the main news feed stays operational (RSS / Atom).
– you can embed our news feed on your website or into a desktop widget (embed code here).

02.09.2024 - 00:20 [ Small-Tech.org ]

SmallTechnology Foundation

Hello!

We’re a tiny and independent two-person not-for-profit based in Ireland.

We are building the Small Web.

No, it’s not web3, it’s web0.

Learn more about us.

29.04.2024 - 07:07 [ Ran Bar-Zik / Twitter ]

> וודאו שיש לכם TLS 1.3 או TLS 1.2 תחת הסעיף Protocols. עדיף שלא יהיה לכם TLS 1.0\1.1 בכלל. מספר השרתים הפגיעים בישראל: 100,000+ לא פשוט לכתוב אייטם כזה לאנשים לא מקצועיים, אבל הוא חשוב והתפרסם ב @Haaretz

(10 Dec 2019)

אני מודה ל @noamr ו- @GilBahat על ה-peer review

16.03.2024 - 19:04 [ HelpNetSecurity.com ]

TLS 1.3: Slow adoption of stronger web encryption is empowering the bad guys

(April 6, 2020)

Asymmetric encryption is used during the “handshake”, which takes place prior to any data being sent. The handshake determines which cipher suite to use for the session – in other words, the symmetric encryption type – so that both browser and server agree. The TLS 1.2 protocol took multiple round trips between client and server, while TLS 1.3 is a much smoother process that requires only one trip. This latency saving shaves milliseconds off each connection.

15.03.2024 - 15:05 [ SSLLabs.com ]

SSL Report: newrepublic.com (199.232.192.233)

TLS 1.3 No
TLS 1.2 Yes*

12.03.2024 - 15:42 [ SSLLabs,com ]

SSL Report: gdl.de (194.231.14.237)

Subject www.dgvb-hessen.de

(…)

TLS 1.3 No
TLS 1.2 Yes
TLS 1.1 Yes
TLS 1.0 Yes

09.03.2024 - 04:00 [ Harvard.edu ]

Brief History of the Domain Name System

Jan. 7, 1958 – President Eisenhower requested funds to start ARPA.

(…)

Summer 1975 – The Defense Communications Agency (DCA) took over the management of ARPANET.

(…)

· November 1983 – The rapid growth of the internet caused massive problems in bookkeeping. To deal with this problem a group including Jon Postel, Paul Mockapetris and Craig Partrige published RFC 882 which created the domain name system (DNS) to make Internet navigation easier. With DNS, users can type host names such as “USC-ISIF” instead of “10.2.0.52.” Every Address would have information from specific to general.

 

22.02.2024 - 04:47 [ Nachrichtenagentur Radio Utopie ]

Nachrichtenagentur Radio Utopie status: temporary RSS feed malfunction fixed

– main RSS and atom feed of this news agency were malfunctional for some time
– problem has been fixed, feeds are operational again.

21.02.2024 - 20:45 [ SSLLabs.com ]

servers.opennic.org (161.97.219.84)

TLS 1.3 No
TLS 1.2 Yes*
TLS 1.1 Yes
TLS 1.0 Yes*

12.02.2024 - 17:41 [ HelpNetSecurity.com ]

TLS 1.3: Slow adoption of stronger web encryption is empowering the bad guys

(April 6, 2020)

Asymmetric encryption is used during the “handshake”, which takes place prior to any data being sent. The handshake determines which cipher suite to use for the session – in other words, the symmetric encryption type – so that both browser and server agree. The TLS 1.2 protocol took multiple round trips between client and server, while TLS 1.3 is a much smoother process that requires only one trip. This latency saving shaves milliseconds off each connection.

12.02.2024 - 17:30 [ SSLLabs.com ]

SSL Report: oxfamnovib.nl (195.72.120.60)

TLS 1.3 No
TLS 1.2 Yes
TLS 1.1 No
TLS 1.0 No

11.02.2024 - 21:25 [ SSLLabs.com ]

SSL Report: achgut.com (217.160.0.21)

TLS 1.3 No
TLS 1.2 Yes
TLS 1.1 No
TLS 1.0 N

11.02.2024 - 21:10 [ SSLLabs.com ]

SSL Report: rubikon.news (94.130.169.230)

TLS 1.3 No
TLS 1.2 Yes
TLS 1.1 Yes
TLS 1.0 Yes

01.02.2024 - 11:18 [ SSLLabs.com ]

SSL Report: interagencystandingcommittee.org (52.204.127.28)

TLS 1.3 No
TLS 1.2 Yes*

25.01.2024 - 22:54 [ HelpNetSecurity.com ]

TLS 1.3: Slow adoption of stronger web encryption is empowering the bad guys

(April 6, 2020)

Asymmetric encryption is used during the “handshake”, which takes place prior to any data being sent. The handshake determines which cipher suite to use for the session – in other words, the symmetric encryption type – so that both browser and server agree. The TLS 1.2 protocol took multiple round trips between client and server, while TLS 1.3 is a much smoother process that requires only one trip. This latency saving shaves milliseconds off each connection.

23.01.2024 - 10:30 [ SSLLabs,com ]

SSL Report: gdl.de (194.231.14.237)

Subject www.dgvb-hessen.de

(…)

TLS 1.3 No
TLS 1.2 Yes
TLS 1.1 Yes
TLS 1.0 Yes

07.01.2024 - 18:58 [ SSLLabs.com ]

SSL Report: bauernverband.de (116.203.18.111)

TLS 1.3 No
TLS 1.2 Yes*
TLS 1.1 Yes
TLS 1.0 Yes*

07.01.2024 - 18:30 [ SSLLabs.com ]

SSL Report: bayerischerbauernverband.de (88.99.126.15)

Protocols
TLS 1.3 No
TLS 1.2 Yes
TLS 1.1 Yes
TLS 1.0 Yes

10.12.2023 - 12:19 [ Ran Bar-Zik / Twitter ]

> וודאו שיש לכם TLS 1.3 או TLS 1.2 תחת הסעיף Protocols. עדיף שלא יהיה לכם TLS 1.0\1.1 בכלל. מספר השרתים הפגיעים בישראל: 100,000+ לא פשוט לכתוב אייטם כזה לאנשים לא מקצועיים, אבל הוא חשוב והתפרסם ב @Haaretz

(10 Dec 2019)

אני מודה ל @noamr ו- @GilBahat על ה-peer review

04.12.2023 - 22:00 [ ITWelt.at ]

Die 5 großen DNS-Angriffe und wie man sie abwehrt

(9. März 2022)

Die Aufgabe des DNS besteht darin, den Begriff, den Sie in ein Suchfeld eingeben (den so genannten menschenlesbaren Namen), in die entsprechende Zahlenfolge (IP-Adresse) zu übersetzen, die Ihr Gerät benötigt, um auf eine Website zuzugreifen oder eine E-Mail zu senden. Angriffe auf diese unverzichtbaren Systeme können sehr schädlich sein.

10.11.2023 - 05:03 [ Harvard.edu ]

Brief History of the Domain Name System

Jan. 7, 1958 – President Eisenhower requested funds to start ARPA.

(…)

Summer 1975 – The Defense Communications Agency (DCA) took over the management of ARPANET.

(…)

· November 1983 – The rapid growth of the internet caused massive problems in bookkeeping. To deal with this problem a group including Jon Postel, Paul Mockapetris and Craig Partrige published RFC 882 which created the domain name system (DNS) to make Internet navigation easier. With DNS, users can type host names such as “USC-ISIF” instead of “10.2.0.52.” Every Address would have information from specific to general.

 

04.11.2023 - 19:24 [ BreakThroughNews.org/donate/ ]

Become a Member of Breakthrough News

Working-class people deserve better, we deserve media for and by us. We are not funded by billionaires or corporations – we are funded by you. Without you, BreakThrough would not be possible, so become a member and build the media arm of the movement with us.

To send a check to BreakThrough News, please make it out to BreakThrough / BT Media Inc. and send to 320 W. 37th Street, NY, NY 10018. Donations are tax-deductible in accordance with the law.

04.11.2023 - 19:06 [ restream.io ]

How to sound better on live streams

(no specific date)

In this article, we sum up all the key points about audio, how to sound better on live streams, and how to avoid big fails on air.

22.10.2023 - 00:10 [ BreakingDefense.com ]

‘All systems need to be hardened’: Officials, industry sound the alarm on quantum threat to encryption

(September 29, 2023)

Such an all-conquering computer doesn’t actually exist yet. But there lies the paradox of what’s called quantum-resistant or “post-quantum” encryption: You don’t need a quantum computer to start laying the foundations for a quantum-powered hack — or, fortunately, to start building a defense.

The threat is a tactic called “collect now, decrypt later.” Well-heeled foreign intelligence agencies (and the American NSA) already scoop up terabytes of encrypted communication. Whatever they can’t crack today can just go into long-term storage, waiting for quantum computers to get powerful enough to break them.

05.10.2023 - 16:04 [ Netzpolitik.org ]

Warum Bluesky gerade durch die Decke geht – und was Mastodon daraus lernen kann

„In vielen Fällen siegt Usability über hehre Netz-Ideale.“ Viele Menschen seien eben keine Technik-Afficionados, denen Open Source oder eine nicht-kommerzielle Ausrichtung digitaler Angebote ein Herzensanliegen ist. Solche idealistischen, nicht-kommerziellen Angebote fänden zwar viele in der Theorie gut, in der Praxis setzten sich aber oft jene Angebote durch, die besonders leicht zu benutzen sind und die bereits von vielen Bekannten im eigenen Umfeld genutzt würden.

21.09.2023 - 20:59 [ Haaretz ]

Opposition Leader Lapid: Israel Must Not Agree to Saudi Enrichment

Amid reports that Netanyahu directed top Israeli nuclear experts to partake in negotiations over a U.S.-Saudi deal, Lapid says a stance allowing Saudi enrichment is ‚reckless,‘ and warns it will trigger a ‚Middle East nuclear arms race‘

21.09.2023 - 09:51 [ SSLLabs.com ]

SSL Report: techcrunch.com (67.195.231.20)

Protocols
TLS 1.3 Yes
TLS 1.2 Yes
TLS 1.1 Yes
TLS 1.0 Yes

10.09.2023 - 16:00 [ Ran Bar-Zik / Twitter ]

> וודאו שיש לכם TLS 1.3 או TLS 1.2 תחת הסעיף Protocols. עדיף שלא יהיה לכם TLS 1.0\1.1 בכלל. מספר השרתים הפגיעים בישראל: 100,000+ לא פשוט לכתוב אייטם כזה לאנשים לא מקצועיים, אבל הוא חשוב והתפרסם ב @Haaretz

(10 Dec 2019)

אני מודה ל @noamr ו- @GilBahat על ה-peer review

04.09.2023 - 20:41 [ CryptographyEngineering.com ]

Remarks on “Chat Control”

(March 23, 2023)

I am a professor of computer science and a researcher in the field of applied cryptography. On a day-to-day basis this means that I work on the design of encryption systems. Most of what I do involves building things: I design new encryption systems and try to make existing encryption technologies more useful.

Sometimes I and my colleagues also break encryption systems. I wish I could tell you this didn’t happen often, but it happens much more frequently than you’d imagine, and often in systems that have billions of users and that are very hard to fix. Encryption is a very exciting area to work in, but it’s also a young area. We don’t know all the ways we can get things wrong, and we’re still learning.

19.08.2023 - 00:05 [ CNN ]

Homeland Security report details how teen hackers exploited security weaknesses in some of the world’s biggest companies

(August 10, 2023)

Staffed by senior US cybersecurity officials and executives at major technology firms like Google, the board does not have regulatory authority, but its recommendations could shape legislation in Congress and future directives from federal agencies.

03.08.2023 - 10:49 [ HelpNetSecurity.com ]

TLS 1.3: Slow adoption of stronger web encryption is empowering the bad guys

(April 6, 2020)

Asymmetric encryption is used during the “handshake”, which takes place prior to any data being sent. The handshake determines which cipher suite to use for the session – in other words, the symmetric encryption type – so that both browser and server agree. The TLS 1.2 protocol took multiple round trips between client and server, while TLS 1.3 is a much smoother process that requires only one trip. This latency saving shaves milliseconds off each connection.

07.07.2023 - 04:24 [ OERu.org - Free Online Courses For Students Worldwide ]

How do I search Mastodon?

The search box is found about the new Toot box. You can only search for #hashtags and @usernames. You cannot search for plain text contained within Toots. If you enter plain text, search will only return any #hashtags or @usernames that natch the search text.

01.07.2023 - 14:01 [ OERu.org - Free Online Courses For Students Worldwide ]

How do I search Mastodon?

The search box is found about the new Toot box. You can only search for #hashtags and @usernames. You cannot search for plain text contained within Toots. If you enter plain text, search will only return any #hashtags or @usernames that natch the search text.

01.07.2023 - 13:40 [ SearchEngineJournal.com ]

Elon Musk Hires Prolific Hacker George Hotz To Fix Twitter Search

(November 23, 2022)

In the span of a 12-week internship, Hotz promises to “fix” Twitter search and introduce all-new features, such as the ability to search within liked tweets.

As the first person in the world to jailbreak the iPhone, Hotz is no stranger to bringing new capabilities to existing platforms.

23.05.2023 - 21:33 [ Arte ]

Pegasus – Der Feind liest mit

Laut Aussagen des Unternehmens wird die Software allein an Regierungen vertrieben, um sie bei der Bekämpfung von Kriminalität und Terrorismus zu unterstützen. Doch die Recherchen des Mediennetzwerks haben ein Spionagesystem aufgedeckt, mit dem mehr als 65 Länder die Smartphones von Journalisten, Anwälten, Menschenrechtsaktivisten, Staatschefs und politischen Gegnern auf der ganzen Welt ausspähten. Die Autorin des Dokumentarfilms hat die Journalistinnen und Journalisten des Pegasus-Projekts exklusiv über Monate während ihrer Recherchen begleitet. Sie prangern autoritäre Entwicklungen in vielen Staaten sowie Eingriffe in die Privatsphäre der gehackten Personen an.

23.05.2023 - 13:30 [ webopedia.com ]

webopedia – The Online Tech Dictionary for Students, Educators and IT Professionals

type a search term

21.05.2023 - 21:33 [ Nature.com ]

The race to save the Internet from quantum hackers

(08 February 2022)

Rent or buy this article

Get just this article for as long as you need it

$39.95

21.05.2023 - 21:15 [ HelpNetSecurity.com ]

TLS 1.3: Slow adoption of stronger web encryption is empowering the bad guys

(April 6, 2020)

Asymmetric encryption is used during the “handshake”, which takes place prior to any data being sent. The handshake determines which cipher suite to use for the session – in other words, the symmetric encryption type – so that both browser and server agree. The TLS 1.2 protocol took multiple round trips between client and server, while TLS 1.3 is a much smoother process that requires only one trip. This latency saving shaves milliseconds off each connection.

18.05.2023 - 17:50 [ Arte ]

Pegasus – Der Feind liest mit

Laut Aussagen des Unternehmens wird die Software allein an Regierungen vertrieben, um sie bei der Bekämpfung von Kriminalität und Terrorismus zu unterstützen. Doch die Recherchen des Mediennetzwerks haben ein Spionagesystem aufgedeckt, mit dem mehr als 65 Länder die Smartphones von Journalisten, Anwälten, Menschenrechtsaktivisten, Staatschefs und politischen Gegnern auf der ganzen Welt ausspähten. Die Autorin des Dokumentarfilms hat die Journalistinnen und Journalisten des Pegasus-Projekts exklusiv über Monate während ihrer Recherchen begleitet. Sie prangern autoritäre Entwicklungen in vielen Staaten sowie Eingriffe in die Privatsphäre der gehackten Personen an.

04.05.2023 - 11:06 [ Ran Bar-Zik / Nitter ]

> וודאו שיש לכם TLS 1.3 או TLS 1.2 תחת הסעיף Protocols. עדיף שלא יהיה לכם TLS 1.0\1.1 בכלל. מספר השרתים הפגיעים בישראל: 100,000+ לא פשוט לכתוב אייטם כזה לאנשים לא מקצועיים, אבל הוא חשוב והתפרסם ב @Haaretz

(10 Dec 2019)

אני מודה ל @noamr ו- @GilBahat על ה-peer review

12.04.2023 - 01:46 [ Ran Bar-Zik / Nitter ]

> וודאו שיש לכם TLS 1.3 או TLS 1.2 תחת הסעיף Protocols. עדיף שלא יהיה לכם TLS 1.0\1.1 בכלל. מספר השרתים הפגיעים בישראל: 100,000+ לא פשוט לכתוב אייטם כזה לאנשים לא מקצועיים, אבל הוא חשוב והתפרסם ב @Haaretz

(10 Dec 2019)

אני מודה ל @noamr ו- @GilBahat על ה-peer review

12.04.2023 - 01:42 [ Qualys - ssllabs.com ]

SSL Report: haaretz.com

Protocols:

TLS 1.3 No

12.04.2023 - 01:24 [ HelpNetSecurity.com ]

TLS 1.3: Slow adoption of stronger web encryption is empowering the bad guys

(April 6, 2020)

Asymmetric encryption is used during the “handshake”, which takes place prior to any data being sent. The handshake determines which cipher suite to use for the session – in other words, the symmetric encryption type – so that both browser and server agree. The TLS 1.2 protocol took multiple round trips between client and server, while TLS 1.3 is a much smoother process that requires only one trip. This latency saving shaves milliseconds off each connection.

12.04.2023 - 01:20 [ Qualys - ssllabs.com ]

SSL Report: eff.org

Protocols:

TLS 1.3 No

02.04.2023 - 14:42 [ HelpNetSecurity.com ]

TLS 1.3: Slow adoption of stronger web encryption is empowering the bad guys

(April 6, 2020)

Asymmetric encryption is used during the “handshake”, which takes place prior to any data being sent. The handshake determines which cipher suite to use for the session – in other words, the symmetric encryption type – so that both browser and server agree. The TLS 1.2 protocol took multiple round trips between client and server, while TLS 1.3 is a much smoother process that requires only one trip. This latency saving shaves milliseconds off each connection.

02.04.2023 - 14:32 [ Ran Bar-Zik / Nitter ]

> וודאו שיש לכם TLS 1.3 או TLS 1.2 תחת הסעיף Protocols. עדיף שלא יהיה לכם TLS 1.0\1.1 בכלל. מספר השרתים הפגיעים בישראל: 100,000+ לא פשוט לכתוב אייטם כזה לאנשים לא מקצועיים, אבל הוא חשוב והתפרסם ב @Haaretz

(10 Dec 2019)

אני מודה ל @noamr ו- @GilBahat על ה-peer review

15.03.2023 - 21:00 [ Ran Bar-Zik / Nitter ]

> וודאו שיש לכם TLS 1.3 או TLS 1.2 תחת הסעיף Protocols. עדיף שלא יהיה לכם TLS 1.0\1.1 בכלל. מספר השרתים הפגיעים בישראל: 100,000+ לא פשוט לכתוב אייטם כזה לאנשים לא מקצועיים, אבל הוא חשוב והתפרסם ב @Haaretz

(10 Dec 2019)

אני מודה ל @noamr ו- @GilBahat על ה-peer review

11.03.2023 - 15:56 [ Ran Bar-Zik / Nitter ]

> וודאו שיש לכם TLS 1.3 או TLS 1.2 תחת הסעיף Protocols. עדיף שלא יהיה לכם TLS 1.0\1.1 בכלל. מספר השרתים הפגיעים בישראל: 100,000+ לא פשוט לכתוב אייטם כזה לאנשים לא מקצועיים, אבל הוא חשוב והתפרסם ב @Haaretz

(10 Dec 2019)

אני מודה ל @noamr ו- @GilBahat על ה-peer review

08.03.2023 - 17:59 [ United Nations Human Rights Council (UNHRC) / Netzpolitik.org ]

Human rights implications of the development, use and transfer of new technologies in the context of counter-terrorism and countering and preventing violent extremism

The present report illuminates the ways in which counter-terrorism and security are frequently used to provide political and legal justifications for the adoption of high-risk and highly intrusive technologies on the basis of exceptional threats and with the promise of strictly limited application. The report demonstrates that such rationales and limitations rarely hold, and that the claim of exceptional use to respond to security crises is a chimera, when the reality is broad and wholesale use which lacks adequate human rights or rule of law restraints. Such technologies, including biometric, surveillance and drone technology, have serious negative impacts on the enjoyment of human rights across the globe. The Special Rapporteur highlights the human rights risks inherent in the development, deployment and transfer of such technologies internationally. She is also deeply concerned about the discriminatory elements built into the development and deployment of such technologies. Negative consequences include direct violations of non-derogable rights, the integrity of which is being undermined by
new technologies lacking any meaningful legal oversight, and impunity for both State and non-State actors whose use and transfer of such technologies involves systemic rights-violative practice.

05.02.2023 - 11:26 [ Cisco.com ]

Next Generation Cryptography

he following table can help customers migrate from legacy ciphers to current or more secure ciphers. The table explains each cryptographic algorithm that is available, the operations that each algorithm supports, and whether an algorithm is Cisco‘s best recommendation. Customers should pay particular attention to algorithms designated as Avoid or Legacy. The status labels are explained following the table.