Signal

Secure communication: Pond

The Pond is asynchronous, encrypted, forward-secure messaging application written by in Go programming language. The Pond’s graphic interface looks like an email client from the early 90s, but under the surface it’s doing a good job protecting end-to-end communication using common hipster state of the art encryption protocol. To be honest, I had some hard time make its source code running so I have created a guide for you. Let’s analyze it a little bit more.

Posted

#Articles

InfoSec Week 50, 2018

According to the New York Times sources, Marriott customers' data were breached by Chinese hackers. Attribution is hard, especially when investigating government related hacks. We have to wait for more information.

Posted

#Weekly-News

InfoSec Week 43, 2018

A zero-day vulnerability in the jQuery File Upload plugin is actively exploited for at least three years. Patch now!

Posted

#Weekly-News

InfoSec Week 18, 2018

Multiple tech giants like Apple, Microsoft, Google and others formed an industry coalition and have joined security experts in criticizing encryption backdoors, after Ray Ozzie's CLEAR key escrow idea was widely derided. He basically proposed a scheme where the users have no control over their own devices, but the devices can be securely forensically analyzed by the government agencies.

Posted

#Weekly-News

InfoSec Week 17, 2018

A loud sound emitted by a gas-based fire suppression system deployed in the data center has destroyed the hard drives of a Swedish data center, downing NASDAQ operations across Northern Europe.

Posted

#Weekly-News

InfoSec Week 8, 2018

Fraudsters are impersonating authors and publishing computer generated books so they can launder money via Amazon.

Posted

#Weekly-News

InfoSec Week 2, 2018

New research has found a flaw in a group messaging part of a Signal protocol used by Signal, WhatsApp and Threema. It’s hardly exploitable, but the server (attacker) could be, in some theoretical scenario, able to silently join an encrypted group chat.

Posted

#Weekly-News

InfoSec Week 38, 2017

The ZNIU Android malware is exploiting Linux kernel 'Dirty COW' vulnerability to install itself on a device and collect money through the SMS-enabled payment service.

Posted

#Weekly-News

InfoSec Week 34 - 35, 2017

Autodesk A360 cloud-based online storage misused as a delivery platform for multiple malware families.

Posted

#Weekly-News