#security #fail: https://www.wired.com/story/tetra-radio-encryption-backdoor/

#encryption #police #tetra #backdoor #hack #hacker #CyberSecurity #news #technology

Code Kept Secret for Years Reveals Its Flaw—a Backdoor

A secret encryption cipher baked into radio systems used by critical infrastructure workers, police, and others around the world is finally seeing sunlight. Researchers say it isn’t pretty.

"A group of cybersecurity researchers has uncovered what they believe is an intentional backdoor in encrypted radios used by police, military, and critical infrastructure entities around the world. The backdoor may have existed for decades, potentially exposing a wealth of sensitive information transmitted across them, according to the researchers.

While the researchers frame their discovery as a backdoor, the organization responsible for maintaining the standard pushes back against that specific term, and says the standard was designed for export controls which determine the strength of encryption. The end result, however, are radios with traffic that can be decrypted using consumer hardware like an ordinary laptop in under a minute. "There's no other way in which this can function than that this is an intentional backdoor," Jos Wetzels, one of the researchers from cybersecurity firm Midnight Blue, told Motherboard in a phone call."

https://www.vice.com/en/article/4a3n3j/backdoor-in-police-radios-tetra-burst

#USA #militarygrade #morons #crypto #defectivebydesign #backdoor

Researchers Find ‘Backdoor’ in Encrypted Police and Military Radios

The TETRA standard is used in radios worldwide. Security researchers have found multiple vulnerabilities in the underlying cryptography and its implementation, including issues that allow for the decryption of traffic.

"They found the analytics control and other privacy settings had no obvious effect on Apple’s data collection—the tracking remained the same whether iPhone Analytics was switched on or off.

“The level of detail is shocking for a company like Apple,” Mysk told Gizmodo."

WTF!?

"An independent test suggests Apple collects data about you and your phone when its own settings promise to “disable the sharing of Device Analytics altogether.”"

New Research Says

Apple Is Tracking You Even When Its Own Privacy Settings Say It’s Not

"For all of Apple’s talk about how private your iPhone is, the company vacuums up a lot of data about you. iPhones do have a privacy setting that is supposed to turn off that tracking. According to a new report by independent researchers, though, Apple collects extremely detailed information on you with its own apps even when you turn off tracking, an apparent direct contradiction of Apple’s own description of how the privacy protection works."

https://gizmodo.com/apple-iphone-analytics-tracking-even-when-off-app-store-1849757558

#tracking #apple #iphone #surveillance #prism #linux #bsd #gnulinux #safari #gizmodo #security #hackernews #analytics #privacy #computer #smartphones #phones #phone #spying #backdoor

Apple Tracks You Even With Its Own Privacy Protections on, Study Says

An independent test suggests Apple collects data about you and your phone when its own settings promise to “disable the sharing of Device Analytics altogether.”

#WordPress installer #attack race

source: https://smitka.me/2022/07/01/wordpress-installer-attack-race/

The attacker uses the #Certificate Transparency Log to find new WordPress #installations. It works because you usually generate the #SSL certificate when you set up a hosting space. When the certificate is issued, the record appears in the public log.

...

It takes only 4 minutes from the certificate issue to abuse the installer (but in some cases, the attacker managed to do it in under 1 minute).

#internet #blog #security #backdoor #problem #www #web #software #install #news

WordPress installer attack race

“The Famous WordPress 5-Minute Install” was great. Unfortunately, today it can cause serious security problems. The typical scenario is to upload core files to your host, open the insta…

Exclusive: At least $1 billion of client funds missing at #FTX

source: https://www.reuters.com/markets/currencies/exclusive-least-1-billion-client-funds-missing-failed-crypto-firm-ftx-sources-2022-11-12/

They said the "backdoor" allowed Bankman-Fried to execute commands that could alter the #company's financial records without alerting other people, including external auditors. This set-up meant that the movement of the $10 billion in funds to #Alameda did not trigger internal #compliance or accounting red flags at #FTX, they said.

#money #finance #crypto #backdoor #crime #cybercrime #news #fail #cryptocurrency #insolvency

Exclusive: At least $1 billion of client funds missing at FTX

While it is known that FTX moved customer funds to Sam Bankman-Fried's Alameda trading desk, the missing funds are reported here for the first time. The financial hole was revealed in records that 'SBF' shared with other senior executives a week ago.

High‑impact UEFI vulnerabilities discovered (again) in over a hundred of models of Lenovo consumer laptops

Yes, two of the drivers immediately caught attention by their very unfortunate (but surprisingly honest) names: SecureBackDoor and SecureBackDoorPeim. I also seem to recall Lenovo had a similar issue about 5 or 6 years ago, so not a first time.

Altogether, the list of affected devices contains more than one hundred different consumer laptop models with millions of users worldwide, from affordable models like Ideapad-3 to more advanced ones like Legion 5 Pro-16ACH6 H or Yoga Slim 9-14ITL05. The full list of affected models with active development support is published in the Lenovo Advisory.

Bottom line though is, if you have a consumer Lenovo device, you really want to check if there is a firmware update.

See https://www.welivesecurity.com/2022/04/19/when-secure-isnt-secure-uefi-vulnerabilities-lenovo-consumer-laptops/

#technology #security #vulnerability #lenovo #backdoor
#Blog, ##backdoor, ##lenovo, ##security, ##technology, ##vulnerabilty

● NEWS ● #ThreatPost ☞ Roaming Mantis #Expands #Android #Backdoor to Europe https://threatpost.com/roaming-mantis-android-backdoor-europe/178247/

Roaming Mantis Expands Android Backdoor to Europe

The 'smishing' group lives up to its name, expanding globally and adding image exfiltration to the Wroba RAT it uses to infect mobile victims.

● NEWS ● #ITWire #ProprietarySoftware ☞ #Avast claims to have found #backdoor in US Govt commission network https://itwire.com/security/avast-claims-to-have-found-backdoor-in-us-govt-commission-network.html

iTWire - Avast claims to have found backdoor in US Govt commission network

Security provider Avast claims to have found a backdoor on the Windows network of a US Government commission that is associated with international rights, but has been unable to get the body to engage in order to resolve the problem. In a blog...

Don't listen to what they say follow the #money going out the #backdoor

They have the peoples money and they are investing in #Bitcoin and #cryptocurrency dont let them take you for a #sucker

bitcoin-hater-warren-buffett-invests-500-million-in-digital-bank-offering-crypto-products/

#news #politics #plandemic #inflation #economy #Biden #democrats #bankers #globalists #bitcoin #Ethereum #gold #zionism #communism #globalism #economy #currency #economics #frauds #liars #deceivers #inflation #deflation #goldmansachs #communism #globalism #economy #currency #economics #frauds #liars #deceivers #inflation #deflation #hedgefunds #lockdowns #vaccines #NewNormal #nwo #banksters #rothschild #bildeberg #jpmorgan #rockefeller #warburg #soros #economicslavery #debt #currency #fiat #money #falseflag #plutocracy #plutonomy #oligarchy #europe #refugres #shameofeurope #inhumanity #2nd-amendment, #freedom #mandate #FBI #PoliticalPersecution #tyranny

[Meme] Microsoft: Always Blame the Victim (Failing That, Blame the Governments of Other Nations) http://techrights.org/2021/11/01/security-blame-shifting/ #microsoft #nsa #backdoor #victimBlaming #blameshifting

[Meme] Microsoft: Always Blame the Victim (Failing That, Blame the Governments of Other Nations)

Microsoft habitually uses the dishonest narrative wherein the victims of Microsoft’s own shoddy software (with NSA back doors) are in fact the culprits and it has become casual — not to mention popular in partisan media — to also blame “China” or...

#microsoft is #googlebombing #linux again... that started today. This time fake 'security' (a #backdoor actually) misnamed to mislead, "Microsoft Defender"

● NEWS ● #ITWire #ProprietarySoftware ☞ Researchers find new #backdoor likely linked to #SolarWinds attacker https://itwire.com/security/researchers-find-new-backdoor-likely-linked-to-solarwinds-attacker.html

iTWire - Researchers find new backdoor likely linked to SolarWinds attacker

Global cyber security firm Kaspersky claims to have discovered a new backdoor it has named Tomiris which shows signs of being connected to the same actor behind the attacks on SolarWinds which were revealed last year. Kaspersky's researchers...

#Microsoft #Azure as de facto #backdoor in #Linux https://duo.com/decipher/azure-omigod-flaw-under-attack see http://techrights.org/2021/09/16/microsoft-azure-bug-doors/

Azure OMIGOD Flaw Under Attack

The Azure OMI vulnerability (CVE-2021-38647) is under attack by several threat actors, including the Mirai botnet operators.

#microsoft #backdoor #bugdoor https://searchsecurity.techtarget.com/news/252506756/OMIGOD-vulnerabilities-put-Azure-customers-at-risk see http://techrights.org/2021/09/16/microsoft-azure-bug-doors/

‘OMIGOD’ vulnerabilities put Azure customers at risk

Researchers at Wiz disclosed vulnerabilities in a software agent common in Azure services that exposes Microsoft cloud customers to remote code execution.

● NEWS ● #BruceSchneier #Surveillance #Privacy ☞ More on Apple’s #iPhone #Backdoor https://www.schneier.com/blog/archives/2021/08/more-on-apples-iphone-backdoor.html

● NEWS ● #BruceSchneier #Privacy #Surveillance ☞ #Apple Adds a #Backdoor to iMesssage and iCloud Storage https://www.schneier.com/blog/archives/2021/08/apple-adds-a-backdoor-to-imesssage-and-icloud-storage.html

#Apple builds a universal #backdoor https://www.eff.org/deeplinks/2021/08/apples-plan-think-different-about-encryption-opens-backdoor-your-private-life

Apple's Plan to "Think Different" About Encryption Opens a Backdoor to Your Private Life

Apple has announced impending changes to its operating systems that include new “protections for children” features in iCloud and iMessage. If you’ve spent any time following the Crypto Wars, you know what this means: Apple is planning to build a...

#Apple builds a universal #backdoor into the #iPhone https://baronhk.wordpress.com/2021/08/05/apple-builds-a-universal-backdoor-into-the-iphone/

Apple builds a universal backdoor into the iPhone.

WGN reports that Apple has now announced a universal backdoor into the iPhone for law enforcement. For now, they’re saying they’ll only use it for “child abuse” and have the…

#Microsoft have signed multiple rootkits (which allow #kernel #drivers) and reach out to a remote #IP.

source: https://twitter.com/GossiTheDog/status/1405805536403243009

#Windows #security #backdoor #vulnerability #fail #privacy #problem #news #software #danger #warning #rootkit #malware

#Trojan Shield: How the #FBI Secretly Ran a #Phone #Network for Criminals

Source: https://www.vice.com/en/article/akgkwj/operation-trojan-shield-anom-fbi-secret-phone-network

The FBI, #AFP, and #CHS built the #Anom system in such a way that a master key silently attached itself to every #message set through the app, enabling "law enforcement to decrypt and store the message as it is transmitted," the document reads.

You can only trust end to end #encryption!

#police #surveillance #privacy #crime #law #justice #news #usa #backdoor #messenger

Trojan Shield: How the FBI Secretly Ran a Phone Network for Criminals

New court records detail how the FBI turned encrypted phone company 'Anom' into a honeypot for organized crime.