http://www.secuobs.com L'observatoire de la securite Internet fr webmaster@secuobs.com ESRT @thierryzoller - Updated BEAST blog post with Proof of Concept code and the whitepaper http://www.secuobs.com/twitter/news/252228.shtml http://www.secuobs.com/news/comments831122008-md5_pki_cluster_ps3_25c3_certificat.shtml#11047 http://www.secuobs.com/news/comments831122008-md5_pki_cluster_ps3_25c3_certificat.shtml#11047 ESRT @AVGFree - Google, Microsoft Mozilla all working on SSL changes in response to BEAST attack tool TheRegister http://www.secuobs.com/twitter/news/251744.shtml http://www.secuobs.com/news/comments831122008-md5_pki_cluster_ps3_25c3_certificat.shtml#11024 http://www.secuobs.com/news/comments831122008-md5_pki_cluster_ps3_25c3_certificat.shtml#11024 Microsoft Pushes FixIt Tool to Enable Support for Newer TLS Version http://www.secuobs.com/revue/news/331306.shtml http://www.secuobs.com/news/comments831122008-md5_pki_cluster_ps3_25c3_certificat.shtml#11016 http://www.secuobs.com/news/comments831122008-md5_pki_cluster_ps3_25c3_certificat.shtml#11016 Man-in-the-Middle Attack Against SSL 3.0 TLS 1.0 http://www.secuobs.com/revue/news/330696.shtml http://www.secuobs.com/news/comments831122008-md5_pki_cluster_ps3_25c3_certificat.shtml#10971 http://www.secuobs.com/news/comments831122008-md5_pki_cluster_ps3_25c3_certificat.shtml#10971 ESRT @mikkohypponen - EFF HTTPS Everywhere built-in feature to detect rogue certificates - Would've stopped Diginotar http://www.secuobs.com/twitter/news/250238.shtml http://www.secuobs.com/news/comments831122008-md5_pki_cluster_ps3_25c3_certificat.shtml#10960 http://www.secuobs.com/news/comments831122008-md5_pki_cluster_ps3_25c3_certificat.shtml#10960 ESRT @CiscoSecurity - Interesting speculation on the BEAST SSL TLS exploit http://www.secuobs.com/twitter/news/250257.shtml http://www.secuobs.com/news/comments831122008-md5_pki_cluster_ps3_25c3_certificat.shtml#10957 http://www.secuobs.com/news/comments831122008-md5_pki_cluster_ps3_25c3_certificat.shtml#10957 TLS 1.2 - Look before you Leap , Thu, Sep 22nd http://www.secuobs.com/revue/news/330392.shtml http://www.secuobs.com/news/comments831122008-md5_pki_cluster_ps3_25c3_certificat.shtml#10956 http://www.secuobs.com/news/comments831122008-md5_pki_cluster_ps3_25c3_certificat.shtml#10956 Fixes in the Works For SSL Attack, But Support Lacking for Newer Versions of Protocol http://www.secuobs.com/revue/news/330448.shtml http://www.secuobs.com/news/comments831122008-md5_pki_cluster_ps3_25c3_certificat.shtml#10955 http://www.secuobs.com/news/comments831122008-md5_pki_cluster_ps3_25c3_certificat.shtml#10955 ESRT @eEye - Microsoft fixes SSL kill switch blooper Via @gkeizer @Computerworld http://www.secuobs.com/twitter/news/249238.shtml http://www.secuobs.com/news/comments831122008-md5_pki_cluster_ps3_25c3_certificat.shtml#10937 http://www.secuobs.com/news/comments831122008-md5_pki_cluster_ps3_25c3_certificat.shtml#10937 ESRT @ekoparty @DennisF - New attack by @julianor and @thaidn breaks the confidentiality model of SSL http://www.secuobs.com/twitter/news/249233.shtml http://www.secuobs.com/news/comments731122008-md5_pki_cluster_ps3_25c3_certificat.shtml#10926 http://www.secuobs.com/news/comments731122008-md5_pki_cluster_ps3_25c3_certificat.shtml#10926 GlobalSign plans to reopen Tuesday despite web server hack http://www.secuobs.com/revue/news/328333.shtml http://www.secuobs.com/news/comments731122008-md5_pki_cluster_ps3_25c3_certificat.shtml#10825 http://www.secuobs.com/news/comments731122008-md5_pki_cluster_ps3_25c3_certificat.shtml#10825 ESRT @phenrycissp - Researcher raps Apple for not blocking stolen SSL certificates http://www.secuobs.com/twitter/news/246424.shtml http://www.secuobs.com/news/comments731122008-md5_pki_cluster_ps3_25c3_certificat.shtml#10810 http://www.secuobs.com/news/comments731122008-md5_pki_cluster_ps3_25c3_certificat.shtml#10810 Mozilla Asks All Firefox CAs to Audit Security Systems in Wake of DigiNotar Hack http://www.secuobs.com/revue/news/327833.shtml http://www.secuobs.com/news/comments731122008-md5_pki_cluster_ps3_25c3_certificat.shtml#10808 http://www.secuobs.com/news/comments731122008-md5_pki_cluster_ps3_25c3_certificat.shtml#10808 DigiNotar Hacker Says He Has GlobalSign Database Backups, Other Data http://www.secuobs.com/revue/news/327578.shtml http://www.secuobs.com/news/comments731122008-md5_pki_cluster_ps3_25c3_certificat.shtml#10788 http://www.secuobs.com/news/comments731122008-md5_pki_cluster_ps3_25c3_certificat.shtml#10788 Microsoft Stolen SSL certs can't be used to install malware via Windows Update http://www.secuobs.com/revue/news/327308.shtml http://www.secuobs.com/news/comments731122008-md5_pki_cluster_ps3_25c3_certificat.shtml#10773 http://www.secuobs.com/news/comments731122008-md5_pki_cluster_ps3_25c3_certificat.shtml#10773 ESRT @Ivanlef0u @virusbtn - Microsoft: how to protect yourself from attacks using the rogue Diginotar-signed CA http://www.secuobs.com/twitter/news/245388.shtml http://www.secuobs.com/news/comments731122008-md5_pki_cluster_ps3_25c3_certificat.shtml#10766 http://www.secuobs.com/news/comments731122008-md5_pki_cluster_ps3_25c3_certificat.shtml#10766 ESRT @mikkohypponen - funny co-incidence 3 months ago Iran gov introduced new DNS servers for Iranians via @nima_bagheri http://www.secuobs.com/twitter/news/245184.shtml http://www.secuobs.com/news/comments731122008-md5_pki_cluster_ps3_25c3_certificat.shtml#10765 http://www.secuobs.com/news/comments731122008-md5_pki_cluster_ps3_25c3_certificat.shtml#10765 ESRT @mikkohypponen - Visualisation of OCSP requests for the rogue *.google.com certificate - youtube Fox-IT - Diginotar http://www.secuobs.com/twitter/news/245451.shtml http://www.secuobs.com/news/comments731122008-md5_pki_cluster_ps3_25c3_certificat.shtml#10764 http://www.secuobs.com/news/comments731122008-md5_pki_cluster_ps3_25c3_certificat.shtml#10764 ESRT @wikileaks @vRRitti - Dutch govt lets Jacob Appelbaum publish list of 531 compromised DigiNotar SSL-certificates http://www.secuobs.com/twitter/news/245025.shtml http://www.secuobs.com/news/comments731122008-md5_pki_cluster_ps3_25c3_certificat.shtml#10752 http://www.secuobs.com/news/comments731122008-md5_pki_cluster_ps3_25c3_certificat.shtml#10752 ESRT @ivanristic @tqbf - Colin noticed a much better certificate to forge ssl.google-analytics.com http://www.secuobs.com/twitter/news/244236.shtml http://www.secuobs.com/news/comments731122008-md5_pki_cluster_ps3_25c3_certificat.shtml#10733 http://www.secuobs.com/news/comments731122008-md5_pki_cluster_ps3_25c3_certificat.shtml#10733 ESRT @JGamblin @InfowarMonitor - 200 SSL certificates including Yahoo, Tor, Mozilla may have been stolen http://www.secuobs.com/twitter/news/243929.shtml http://www.secuobs.com/news/comments631122008-md5_pki_cluster_ps3_25c3_certificat.shtml#10712 http://www.secuobs.com/news/comments631122008-md5_pki_cluster_ps3_25c3_certificat.shtml#10712 ESRT @teamcymru - Bro: extract+log SSL certificate details - next best thing to proxy MITM SSL inspection http://www.secuobs.com/twitter/news/241442.shtml http://www.secuobs.com/news/comments631122008-md5_pki_cluster_ps3_25c3_certificat.shtml#10636 http://www.secuobs.com/news/comments631122008-md5_pki_cluster_ps3_25c3_certificat.shtml#10636 ESRT @ioerror @moxie__ - Today I released Convergence, an agile authenticity replacement for SSL http://www.secuobs.com/twitter/news/235149.shtml http://www.secuobs.com/news/comments631122008-md5_pki_cluster_ps3_25c3_certificat.shtml#10388 http://www.secuobs.com/news/comments631122008-md5_pki_cluster_ps3_25c3_certificat.shtml#10388 ESRT @stalkr_ @taddong - New TLSSLed version, v1.1 http://www.secuobs.com/twitter/news/226286.shtml http://www.secuobs.com/news/comments631122008-md5_pki_cluster_ps3_25c3_certificat.shtml#10111 http://www.secuobs.com/news/comments631122008-md5_pki_cluster_ps3_25c3_certificat.shtml#10111 ESRT @gcouprie @digdns - A bad year for SSL: CAcert fixes potential security problem http://www.secuobs.com/twitter/news/222180.shtml http://www.secuobs.com/news/comments631122008-md5_pki_cluster_ps3_25c3_certificat.shtml#9994 http://www.secuobs.com/news/comments631122008-md5_pki_cluster_ps3_25c3_certificat.shtml#9994 ESRT @xanda - HashClash - collision generation for the MD5 and SHA-1 hash functions http://www.secuobs.com/twitter/news/215250.shtml http://www.secuobs.com/news/comments631122008-md5_pki_cluster_ps3_25c3_certificat.shtml#9866 http://www.secuobs.com/news/comments631122008-md5_pki_cluster_ps3_25c3_certificat.shtml#9866 ESRT @packet_storm - SSLDiagnos 0.8.1b http://www.secuobs.com/twitter/news/206818.shtml http://www.secuobs.com/news/comments631122008-md5_pki_cluster_ps3_25c3_certificat.shtml#9630 http://www.secuobs.com/news/comments631122008-md5_pki_cluster_ps3_25c3_certificat.shtml#9630 ESRT @mikkohypponen @moxie__ - My thoughts about SSL, DANE, and the future of authenticity on the web http://www.secuobs.com/twitter/news/194440.shtml http://www.secuobs.com/news/comments631122008-md5_pki_cluster_ps3_25c3_certificat.shtml#9351 http://www.secuobs.com/news/comments631122008-md5_pki_cluster_ps3_25c3_certificat.shtml#9351 ESRT @grecs - Comodo admits 2 more resellers pwned in SSL cert hack - via @regsecurity - It's getting worse http://www.secuobs.com/twitter/news/190652.shtml http://www.secuobs.com/news/comments631122008-md5_pki_cluster_ps3_25c3_certificat.shtml#9273 http://www.secuobs.com/news/comments631122008-md5_pki_cluster_ps3_25c3_certificat.shtml#9273 ESRT @bojanz - Looks like Comodo hard coded username password in a DLL - Sigh, they should have known better http://www.secuobs.com/twitter/news/189381.shtml http://www.secuobs.com/news/comments631122008-md5_pki_cluster_ps3_25c3_certificat.shtml#9250 http://www.secuobs.com/news/comments631122008-md5_pki_cluster_ps3_25c3_certificat.shtml#9250 ESRT @singe - What you can do to improve SSL TLS security in your browser a little, including some preconfigured confs http://www.secuobs.com/twitter/news/189185.shtml http://www.secuobs.com/news/comments631122008-md5_pki_cluster_ps3_25c3_certificat.shtml#9246 http://www.secuobs.com/news/comments631122008-md5_pki_cluster_ps3_25c3_certificat.shtml#9246 Released New Tool Download Hash Verifier http://www.secuobs.com/revue/news/294415.shtml http://www.secuobs.com/news/comments531122008-md5_pki_cluster_ps3_25c3_certificat.shtml#9240 http://www.secuobs.com/news/comments531122008-md5_pki_cluster_ps3_25c3_certificat.shtml#9240 Vulnerabilities in STARTTLS implementations http://www.secuobs.com/revue/news/290233.shtml http://www.secuobs.com/news/comments531122008-md5_pki_cluster_ps3_25c3_certificat.shtml#9066 http://www.secuobs.com/news/comments531122008-md5_pki_cluster_ps3_25c3_certificat.shtml#9066 ESRT @revskills @dragosr - Overclocking SSL http://www.secuobs.com/twitter/news/174966.shtml http://www.secuobs.com/news/comments531122008-md5_pki_cluster_ps3_25c3_certificat.shtml#8916 http://www.secuobs.com/news/comments531122008-md5_pki_cluster_ps3_25c3_certificat.shtml#8916 ESRT @achillean - Awesome, looks like the raw HTTPS data from DefCon's SSL Observatory talk has been released http://www.secuobs.com/twitter/news/164302.shtml http://www.secuobs.com/news/comments531122008-md5_pki_cluster_ps3_25c3_certificat.shtml#8686 http://www.secuobs.com/news/comments531122008-md5_pki_cluster_ps3_25c3_certificat.shtml#8686 ESRT @ivanristic - Debian fixes the SSL renegotiation flaw http://www.secuobs.com/twitter/news/160857.shtml http://www.secuobs.com/news/comments531122008-md5_pki_cluster_ps3_25c3_certificat.shtml#8571 http://www.secuobs.com/news/comments531122008-md5_pki_cluster_ps3_25c3_certificat.shtml#8571 ESRT @WebSecurityNews - Hackers obtain PS3 private cryptography key due to epic programming fail video http://www.secuobs.com/twitter/news/158512.shtml http://www.secuobs.com/news/comments531122008-md5_pki_cluster_ps3_25c3_certificat.shtml#8491 http://www.secuobs.com/news/comments531122008-md5_pki_cluster_ps3_25c3_certificat.shtml#8491 New Tool HashGenerator FREE universal hash generator which automates the generation of 14 types of hashes or checksums http://www.secuobs.com/revue/news/265308.shtml http://www.secuobs.com/news/comments531122008-md5_pki_cluster_ps3_25c3_certificat.shtml#8037 http://www.secuobs.com/news/comments531122008-md5_pki_cluster_ps3_25c3_certificat.shtml#8037 hashkill 0.2.0 http://www.secuobs.com/revue/news/223486.shtml http://www.secuobs.com/news/comments531122008-md5_pki_cluster_ps3_25c3_certificat.shtml#6230 http://www.secuobs.com/news/comments531122008-md5_pki_cluster_ps3_25c3_certificat.shtml#6230 ESRT @komeilipour - SSLCertScanner 1.0 released: New Tool to Scan for SSL Certificates on Network http://www.secuobs.com/twitter/news/92637.shtml http://www.secuobs.com/news/comments531122008-md5_pki_cluster_ps3_25c3_certificat.shtml#6165 http://www.secuobs.com/news/comments531122008-md5_pki_cluster_ps3_25c3_certificat.shtml#6165 New browser reports over half of SSL sites may be unsafe http://www.secuobs.com/revue/news/198986.shtml http://www.secuobs.com/news/comments531122008-md5_pki_cluster_ps3_25c3_certificat.shtml#5305 http://www.secuobs.com/news/comments531122008-md5_pki_cluster_ps3_25c3_certificat.shtml#5305 unhash 1.1 a brute force attack tool against a given hash http://www.secuobs.com/revue/news/194545.shtml http://www.secuobs.com/news/comments531122008-md5_pki_cluster_ps3_25c3_certificat.shtml#5173 http://www.secuobs.com/news/comments531122008-md5_pki_cluster_ps3_25c3_certificat.shtml#5173 PS3 hypervisor exploit reproduced http://www.secuobs.com/revue/news/189722.shtml http://www.secuobs.com/news/comments431122008-md5_pki_cluster_ps3_25c3_certificat.shtml#4936 http://www.secuobs.com/news/comments431122008-md5_pki_cluster_ps3_25c3_certificat.shtml#4936 Chrome Supports Strict Transport Security STS http://www.secuobs.com/revue/news/186927.shtml http://www.secuobs.com/news/comments431122008-md5_pki_cluster_ps3_25c3_certificat.shtml#4761 http://www.secuobs.com/news/comments431122008-md5_pki_cluster_ps3_25c3_certificat.shtml#4761 geohot reveals his ps3 exploit http://secuobs.com/revue/news/185669.shtml http://www.secuobs.com/news/comments431122008-md5_pki_cluster_ps3_25c3_certificat.shtml#4706 http://www.secuobs.com/news/comments431122008-md5_pki_cluster_ps3_25c3_certificat.shtml#4706 NetCrack 1.0 a cluster software to distribute a hashing algorithm's cracking process using brute force http://www.secuobs.com/revue/news/178157.shtml http://www.secuobs.com/news/comments431122008-md5_pki_cluster_ps3_25c3_certificat.shtml#4343 http://www.secuobs.com/news/comments431122008-md5_pki_cluster_ps3_25c3_certificat.shtml#4343 Videos : 26c3 streaming and streamdumps http://events.ccc.de/congress/2009/wiki/Streaming http://www.secuobs.com/news/comments431122008-md5_pki_cluster_ps3_25c3_certificat.shtml#4272 http://www.secuobs.com/news/comments431122008-md5_pki_cluster_ps3_25c3_certificat.shtml#4272 Video : Attacking SSL PKI, Louisville Metro Infosec conference http://www.secuobs.com/videos/news/10612.shtml http://www.secuobs.com/news/comments431122008-md5_pki_cluster_ps3_25c3_certificat.shtml#3546 http://www.secuobs.com/news/comments431122008-md5_pki_cluster_ps3_25c3_certificat.shtml#3546 Researcher Publishes Valid Wildcard SSL Certificate http://www.secuobs.com/revue/news/146126.shtml http://www.secuobs.com/news/comments431122008-md5_pki_cluster_ps3_25c3_certificat.shtml#3217 http://www.secuobs.com/news/comments431122008-md5_pki_cluster_ps3_25c3_certificat.shtml#3217 ESRT @julianor flickr_api_signature_forgery.pdf http://netifera.com/research/flickr_api_signature_forgery.pdf http://www.secuobs.com/news/comments431122008-md5_pki_cluster_ps3_25c3_certificat.shtml#3200 http://www.secuobs.com/news/comments431122008-md5_pki_cluster_ps3_25c3_certificat.shtml#3200 CCC SIGINT 2009 audio and video recordings available http://www.secuobs.com/revue/news/142509.shtml http://www.secuobs.com/news/comments431122008-md5_pki_cluster_ps3_25c3_certificat.shtml#3076 http://www.secuobs.com/news/comments431122008-md5_pki_cluster_ps3_25c3_certificat.shtml#3076 Vidéo : x509 is considered harmful HAR 2009 http://har2009.blinkenarea.org/HAR-Streamdumps/html/saal3/Tag2-Room3-Slot20:00--ID175-dakami-Main-2009-08-14T20:00:04+0200.wmv http://www.secuobs.com/news/comments431122008-md5_pki_cluster_ps3_25c3_certificat.shtml#2783 http://www.secuobs.com/news/comments431122008-md5_pki_cluster_ps3_25c3_certificat.shtml#2783 ESRT @Shpantzer @GeorgeVHulme Callan's blog post on BlackHat SSL issues http://www.secuobs.com/twitter/news/14319.shtml http://www.secuobs.com/news/comments431122008-md5_pki_cluster_ps3_25c3_certificat.shtml#2600 http://www.secuobs.com/news/comments431122008-md5_pki_cluster_ps3_25c3_certificat.shtml#2600 Vidéo : ESRT @schmoilito MITM EV SSL, blackhat and defcon demo http://www.secuobs.com/twitter/news/14332.shtml http://www.secuobs.com/news/comments331122008-md5_pki_cluster_ps3_25c3_certificat.shtml#2599 http://www.secuobs.com/news/comments331122008-md5_pki_cluster_ps3_25c3_certificat.shtml#2599 ESRT @security4all @slashdot New Sslsniff updated with Null-Prefix SSL Atttacks http://www.secuobs.com/twitter/news/14301.shtml http://www.secuobs.com/news/comments331122008-md5_pki_cluster_ps3_25c3_certificat.shtml#2596 http://www.secuobs.com/news/comments331122008-md5_pki_cluster_ps3_25c3_certificat.shtml#2596 ESRT @opexxx @slashdot Fast MD5 Collisions With ATI Video Cards http://www.secuobs.com/twitter/news/13695.shtml http://www.secuobs.com/news/comments331122008-md5_pki_cluster_ps3_25c3_certificat.shtml#2567 http://www.secuobs.com/news/comments331122008-md5_pki_cluster_ps3_25c3_certificat.shtml#2567 Vidéo : Dan Kaminsky - Something about Network Security - Black Hat USA 09 http://www.blackhat.com/html/bh-usa-09/bh-usa-09-archives.html#Kaminsky http://www.secuobs.com/news/comments331122008-md5_pki_cluster_ps3_25c3_certificat.shtml#2546 http://www.secuobs.com/news/comments331122008-md5_pki_cluster_ps3_25c3_certificat.shtml#2546 Vidéo : ESRT @quine @hackadaydotcom Moxie's SSL talk from Black Hat http://www.secuobs.com/twitter/news/13155.shtml http://www.secuobs.com/news/comments331122008-md5_pki_cluster_ps3_25c3_certificat.shtml#2544 http://www.secuobs.com/news/comments331122008-md5_pki_cluster_ps3_25c3_certificat.shtml#2544 Moxie Marlinspike - More Tricks For Defeating SSL - Black Hat USA 09 http://www.blackhat.com/html/bh-usa-09/bh-usa-09-archives.html#Marlinspike http://www.secuobs.com/news/comments331122008-md5_pki_cluster_ps3_25c3_certificat.shtml#2538 http://www.secuobs.com/news/comments331122008-md5_pki_cluster_ps3_25c3_certificat.shtml#2538 Kaminsky reveals critical flaws in X.509 certificates http://www.secuobs.com/revue/news/126445.shtml http://www.secuobs.com/news/comments331122008-md5_pki_cluster_ps3_25c3_certificat.shtml#2525 http://www.secuobs.com/news/comments331122008-md5_pki_cluster_ps3_25c3_certificat.shtml#2525 Sub-Prime PKI Attacking Extended Validation SSL - Black Hat USA 2009 http://www.blackhat.com/html/bh-usa-09/bh-usa-09-archives.html#Sotirov http://www.secuobs.com/news/comments331122008-md5_pki_cluster_ps3_25c3_certificat.shtml#2512 http://www.secuobs.com/news/comments331122008-md5_pki_cluster_ps3_25c3_certificat.shtml#2512 Public SSL Server Database Released http://www.secuobs.com/revue/news/125233.shtml http://www.secuobs.com/news/comments331122008-md5_pki_cluster_ps3_25c3_certificat.shtml#2474 http://www.secuobs.com/news/comments331122008-md5_pki_cluster_ps3_25c3_certificat.shtml#2474 PS 3 computing breaks 2^60 barrier, 112-bit prime ECDLP solved, by LACAL EPFL http://www.zataz.com/forum/index.php?showtopic=11215 http://www.secuobs.com/news/comments331122008-md5_pki_cluster_ps3_25c3_certificat.shtml#2423 http://www.secuobs.com/news/comments331122008-md5_pki_cluster_ps3_25c3_certificat.shtml#2423 ESRT @devilok Researchers to demonstrate new EV SSL MITM hacks http://www.secuobs.com/twitter/news/7234.shtml http://www.secuobs.com/news/comments331122008-md5_pki_cluster_ps3_25c3_certificat.shtml#2273 http://www.secuobs.com/news/comments331122008-md5_pki_cluster_ps3_25c3_certificat.shtml#2273 MD6 Withdrawn from SHA-3 Competition http://www.secuobs.com/revue/news/116041.shtml http://www.secuobs.com/news/comments231122008-md5_pki_cluster_ps3_25c3_certificat.shtml#2178 http://www.secuobs.com/news/comments231122008-md5_pki_cluster_ps3_25c3_certificat.shtml#2178 Entropy Broker for distributing cryptographically secure random numbers http://www.secuobs.com/revue/news/112970.shtml http://www.secuobs.com/news/comments231122008-md5_pki_cluster_ps3_25c3_certificat.shtml#2061 http://www.secuobs.com/news/comments231122008-md5_pki_cluster_ps3_25c3_certificat.shtml#2061 ESRT @alexsotirov - M. Stevens released the MD5 collision code for rogue CA attack http://www.secuobs.com/twitter/news/3816.shtml http://www.secuobs.com/news/comments231122008-md5_pki_cluster_ps3_25c3_certificat.shtml#1972 http://www.secuobs.com/news/comments231122008-md5_pki_cluster_ps3_25c3_certificat.shtml#1972 FPGA MD5 Cracker http://www.secuobs.com/revue/news/110519.shtml http://www.secuobs.com/news/comments231122008-md5_pki_cluster_ps3_25c3_certificat.shtml#1953 http://www.secuobs.com/news/comments231122008-md5_pki_cluster_ps3_25c3_certificat.shtml#1953 ESRT @thierryzoller: New prefix collision for MD5 http://twitter.com/DidierStevens/statuses/2115467350 http://www.secuobs.com/news/comments231122008-md5_pki_cluster_ps3_25c3_certificat.shtml#1894 http://www.secuobs.com/news/comments231122008-md5_pki_cluster_ps3_25c3_certificat.shtml#1894 Paper Now Available : SHA-1 Collisions reduced to 2^{52} http://www.secuobs.com/revue/news/107894.shtml http://www.secuobs.com/news/comments231122008-md5_pki_cluster_ps3_25c3_certificat.shtml#1874 http://www.secuobs.com/news/comments231122008-md5_pki_cluster_ps3_25c3_certificat.shtml#1874 Update: Disitool V0.3 http://www.secuobs.com/revue/news/106749.shtml http://www.secuobs.com/news/comments231122008-md5_pki_cluster_ps3_25c3_certificat.shtml#1837 http://www.secuobs.com/news/comments231122008-md5_pki_cluster_ps3_25c3_certificat.shtml#1837 SSL Site Check Tool http://www.secuobs.com/revue/news/105851.shtml http://www.secuobs.com/news/comments231122008-md5_pki_cluster_ps3_25c3_certificat.shtml#1792 http://www.secuobs.com/news/comments231122008-md5_pki_cluster_ps3_25c3_certificat.shtml#1792 Conf : Breaking the security myths of EV SSL Certificates https://www.blackhat.com/html/bh-usa-09/bh-usa-09-speakers.html#Sotirov http://www.secuobs.com/news/comments231122008-md5_pki_cluster_ps3_25c3_certificat.shtml#1428 http://www.secuobs.com/news/comments231122008-md5_pki_cluster_ps3_25c3_certificat.shtml#1428 The cost of SHA-1 collisions reduced to 2^{52} http://www.secuobs.com/revue/news/91442.shtml http://www.secuobs.com/news/comments231122008-md5_pki_cluster_ps3_25c3_certificat.shtml#1307 http://www.secuobs.com/news/comments231122008-md5_pki_cluster_ps3_25c3_certificat.shtml#1307 Flaw in https blows hole in ecommerce security http://www.secuobs.com/revue/news/89578.shtml http://www.secuobs.com/news/comments231122008-md5_pki_cluster_ps3_25c3_certificat.shtml#1263 http://www.secuobs.com/news/comments231122008-md5_pki_cluster_ps3_25c3_certificat.shtml#1263 Web security services for PlayStation 3 and PSP http://www.secuobs.com/revue/news/89259.shtml http://www.secuobs.com/news/comments131122008-md5_pki_cluster_ps3_25c3_certificat.shtml#1249 http://www.secuobs.com/news/comments131122008-md5_pki_cluster_ps3_25c3_certificat.shtml#1249 Researchers poke holes in super duper SSL http://www.secuobs.com/revue/news/76297.shtml http://www.secuobs.com/news/comments131122008-md5_pki_cluster_ps3_25c3_certificat.shtml#885 http://www.secuobs.com/news/comments131122008-md5_pki_cluster_ps3_25c3_certificat.shtml#885 Amazon unveils EC2 plug-in for Eclipse http://www.secuobs.com/revue/news/75144.shtml http://www.secuobs.com/news/comments131122008-md5_pki_cluster_ps3_25c3_certificat.shtml#850 http://www.secuobs.com/news/comments131122008-md5_pki_cluster_ps3_25c3_certificat.shtml#850 The right way to handle encryption with Firefox 3 http://www.secuobs.com/revue/news/70318.shtml http://www.secuobs.com/news/comments131122008-md5_pki_cluster_ps3_25c3_certificat.shtml#728 http://www.secuobs.com/news/comments131122008-md5_pki_cluster_ps3_25c3_certificat.shtml#728 Only 1 Percent of SSL-Secured Sites Use Extended Validation SSL http://www.secuobs.com/revue/news/67178.shtml http://www.secuobs.com/news/comments131122008-md5_pki_cluster_ps3_25c3_certificat.shtml#634 http://www.secuobs.com/news/comments131122008-md5_pki_cluster_ps3_25c3_certificat.shtml#634 Verisign will support DNS security in 2011 http://www.secuobs.com/revue/news/65346.shtml http://www.secuobs.com/news/comments131122008-md5_pki_cluster_ps3_25c3_certificat.shtml#597 http://www.secuobs.com/news/comments131122008-md5_pki_cluster_ps3_25c3_certificat.shtml#597 Moxie Marlinspike New Techniques for Defeating SSL/TLS http://blackhat.com/presentations/bh-dc-09/Marlinspike/BlackHat-DC-09-Marlinspike-Defeating-SSL.pdf http://www.secuobs.com/news/comments131122008-md5_pki_cluster_ps3_25c3_certificat.shtml#547 http://www.secuobs.com/news/comments131122008-md5_pki_cluster_ps3_25c3_certificat.shtml#547 Potentially 219K Expired SSL Certs? http://www.secuobs.com/revue/news/59135.shtml http://www.secuobs.com/news/comments131122008-md5_pki_cluster_ps3_25c3_certificat.shtml#516 http://www.secuobs.com/news/comments131122008-md5_pki_cluster_ps3_25c3_certificat.shtml#516 Browser secrets of secure connections http://www.secuobs.com/revue/news/57944.shtml http://www.secuobs.com/news/comments131122008-md5_pki_cluster_ps3_25c3_certificat.shtml#488 http://www.secuobs.com/news/comments131122008-md5_pki_cluster_ps3_25c3_certificat.shtml#488 Netcraft: One Million SSL Sites on the Web http://www.secuobs.com/revue/news/57349.shtml http://www.secuobs.com/news/comments131122008-md5_pki_cluster_ps3_25c3_certificat.shtml#475 http://www.secuobs.com/news/comments131122008-md5_pki_cluster_ps3_25c3_certificat.shtml#475 PS3 Ubuntu install for emulation http://www.secuobs.com/revue/news/57175.shtml http://www.secuobs.com/news/comments131122008-md5_pki_cluster_ps3_25c3_certificat.shtml#469 http://www.secuobs.com/news/comments131122008-md5_pki_cluster_ps3_25c3_certificat.shtml#469 MD5 attack on Microsoft's Authenticode "A security expert has managed to transfer the digital signature of one Windows program to another, without invalidating the signature" http://www.secuobs.com/revue/news/54823.shtml http://www.secuobs.com/news/comments31122008-md5_pki_cluster_ps3_25c3_certificat.shtml#461 http://www.secuobs.com/news/comments31122008-md5_pki_cluster_ps3_25c3_certificat.shtml#461 SSLFail.com http://www.secuobs.com/revue/news/50988.shtml http://www.secuobs.com/news/comments31122008-md5_pki_cluster_ps3_25c3_certificat.shtml#448 http://www.secuobs.com/news/comments31122008-md5_pki_cluster_ps3_25c3_certificat.shtml#448 Update on the update http://www.secuobs.com/revue/news/49561.shtml http://www.secuobs.com/news/comments31122008-md5_pki_cluster_ps3_25c3_certificat.shtml#437 http://www.secuobs.com/news/comments31122008-md5_pki_cluster_ps3_25c3_certificat.shtml#437 Update from Alexander Sotirov http://www.secuobs.com/revue/news/49201.shtml http://www.secuobs.com/news/comments31122008-md5_pki_cluster_ps3_25c3_certificat.shtml#435 http://www.secuobs.com/news/comments31122008-md5_pki_cluster_ps3_25c3_certificat.shtml#435 VeriSign switches to new hash function to secure SSL certs http://www.secuobs.com/revue/news/48803.shtml http://www.secuobs.com/news/comments31122008-md5_pki_cluster_ps3_25c3_certificat.shtml#428 http://www.secuobs.com/news/comments31122008-md5_pki_cluster_ps3_25c3_certificat.shtml#428 Versign's Bad Response to the MD5-SSL Crisis http://www.secuobs.com/revue/news/48254.shtml http://www.secuobs.com/news/comments31122008-md5_pki_cluster_ps3_25c3_certificat.shtml#422 http://www.secuobs.com/news/comments31122008-md5_pki_cluster_ps3_25c3_certificat.shtml#422 Netcraft: 14% of SSL Certificates signed using Vulnerable MD5 Algorithm http://www.secuobs.com/revue/news/48346.shtml http://www.secuobs.com/news/comments31122008-md5_pki_cluster_ps3_25c3_certificat.shtml#421 http://www.secuobs.com/news/comments31122008-md5_pki_cluster_ps3_25c3_certificat.shtml#421 SSL Blacklist now detects and warns about certificate chains that use the MD5 algorithm for RSA signatures. http://www.codefromthe70s.org/sslblacklist.aspx http://www.secuobs.com/news/comments31122008-md5_pki_cluster_ps3_25c3_certificat.shtml#419 http://www.secuobs.com/news/comments31122008-md5_pki_cluster_ps3_25c3_certificat.shtml#419 Mozilla, Microsoft Move to Nix Web Security Flaw http://www.secuobs.com/revue/news/48010.shtml http://www.secuobs.com/news/comments31122008-md5_pki_cluster_ps3_25c3_certificat.shtml#418 http://www.secuobs.com/news/comments31122008-md5_pki_cluster_ps3_25c3_certificat.shtml#418 Most adults who bank online believe the security threat has increased since they signed up to the service http://www.secuobs.com/revue/news/47945.shtml http://www.secuobs.com/news/comments31122008-md5_pki_cluster_ps3_25c3_certificat.shtml#417 http://www.secuobs.com/news/comments31122008-md5_pki_cluster_ps3_25c3_certificat.shtml#417 Verisign's RapidSSL MD5 Collision Vulnerability Fixed? http://www.secuobs.com/revue/news/47745.shtml http://www.secuobs.com/news/comments31122008-md5_pki_cluster_ps3_25c3_certificat.shtml#416 http://www.secuobs.com/news/comments31122008-md5_pki_cluster_ps3_25c3_certificat.shtml#416