#cyb — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #cyb, aggregated by home.social.
-
Anthropic’s Mythos AI Model Dramatically Improves Firefox Bug Detection
📰 Original title: How Anthropic’s Mythos has rewritten Firefox’s approach to cybersecurity
🤖 IA: It's not clickbait ✅
👥 Usuarios: It's not clickbait ✅ -
AUCyber Limited ( #CYB ) has released " Quarterly Activities/Appendix 4C Cash Flow Report " on Wed 30 Apr at 08:43 AEST #tax #government #Australia #Dividends #ASX
https://grafa.com/asset/aucyber-limited-29468-cyb.asx?utm_source=asxmktsensitive&utm_medium=mastodon&utm_campaign=cyb.asx -
#LLRX #Cyb erSecurity @bespacific
Pete Recommends – Weekly highlights on cyber security issues, January 4, 2025
Five highlights from this week: The biggest cybersecurity and cyberattack stories of 2024; It's a Risk of #Driverless Taxis That May Come as a Surprise; #Apple to pay $95 million to settle #Siri privacy lawsuit; iOS 18's Photos app sends data to Apple without your consent; and Modern cars have sensors, cameras, GPS for location tracking, and more, all collecting data.
Posted in: #ai Cybersecurity, #healthcare #privacy Travel
-
🆕 blog! “Some thoughts on the YubiKey EUCLEAK Vulnerability”
It looks like everyone's favourite FIDO token provider might have an unpatchable vulnerability! Much Sturm und Drang from the usual sources. But how bad is it really? Not so bad - but it does expose some weaknesses in the very idea of having physical tokens. First up, as the research paper's abstract …
👀 Read more: https://shkspr.mobi/blog/2024/09/some-thoughts-on-the-yubikey-eucleak-vulnerability/
⸻
#cyb #hacking #yubikey -
Some thoughts on the YubiKey EUCLEAK Vulnerability
https://shkspr.mobi/blog/2024/09/some-thoughts-on-the-yubikey-eucleak-vulnerability/It looks like everyone's favourite FIDO token provider might have an unpatchable vulnerability! Much Sturm und Drang from the usual sources. But how bad is it really? Not so bad - but it does expose some weaknesses in the very idea of having physical tokens.
First up, as the research paper's abstract says:
The attack requires physical access to the secure element
So, straight off the bat, this reduces the likelihood of attack. Someone would need to actively target you. Of course, if you're the sort of person who secures all their secrets and cryptowallets with a FIDO token, you may be a juicy target!
Secondly, the attack relies on:
the adversary steal[ing] the login and password of a victim’s application account protected with FIDO
So, you need to lose your username, password, and token for this attack to be successful. Again, this is unlikely to happen as a "drive-by" attack.
Once the attacker gets your FIDO token, they need to analyse it using "expensive equipment". A cost of approximately $11,000 according to Ars.
That moves the attack away from the hands of casual criminals. It isn't an insurmountable barrier for organised crime or nation states.
Finally, Appendix A discusses how difficult it is to actually get the equipment close enough to the circuitry:
[…] capturing the EM signal with a small EM probe would not work if this probe is too far from the chip. We hence have to open the YubiKey plastic case to access its logic board. […] In both cases however, the device needs to be re-packaged if the adversary wants to give it back to legitimate user without him noticing. We did not study further this issue.
Here's what it looks like when that probe is placed next to the circuitry:
If you suddenly find your Yubikey smashed or cracked, then you may have been a victim of this attack!
A reasonable way to defend against this is to get some glittery nail polish. No, seriously! Put a blob of glitter polish on the seam of your device. Something like this:
Take a photo. If the baddies grab your YubiKey and crack it open, they won't easily be able to get the pattern correct when they re-seal it. Regularly compare your photo to your device.
The Real Issue With FIDO Tokens
Physical tokens require physical security. I've moved to a an Encrypter Ring. I literally wear my FIDO token. I am extremely likely to notice someone removing my ring (or my finger).
Is your token on your keyring? Where is your keyring right now? In your pocket or hanging up somewhere? Most people either leave their FIDO token laying around out of sight or have it permanently plugged in to their machine. I'm not sure which is worse.
The other major issue is that it is impossible to revoke a FIDO token from all your accounts at once!
You've used your token to register with a few dozen sites, you either lose your key or discover it has been tampered with. What do you do?
There is no way to tell which sites you have used a FIDO token with. You have to remember (or keep a list somewhere). You will need to manually go to each site and revoke the stolen token. If you've forgotten one, you can't revoke it from your key, which means attackers could have unfettered access to that account.
What should I do?
The discoverers of this vulnerability take great pains to say:
it is still safer to use your YubiKey or other impacted products as FIDO hardware authentication token to sign in to applications rather than not using one.
I think they are correct. But there are still a few things you should do to secure yourself against this class of attack.
- Ensure the physical security of your token. Either wear it as jewellery, implant it in your skin, or reduce the likelihood of it being taken.
- Ensure the physical integrity of your token. Use nail-varnish or something similar to help you detect if it has been physically compromised.
- Ensure that you know which sites have been secured with a Yubikey. Make a note of it in your password manager or other secure vault.
- Ensure that you are less of a target. Don't brag about your security. Certainly don't post on the Internet about which security products you use and the countermeasures you take. Oh shit.
https://shkspr.mobi/blog/2024/09/some-thoughts-on-the-yubikey-eucleak-vulnerability/
-
Terms Of UBS Acquisition Wipe Out Additional Tier 1 Capital And Spur Fresh Concerns
https://seekingalpha.com/article/4588700-ubs-acquisition-terms-wipe-out-additional-tier-1-capital-spur-fresh-concerns?source=feed_tag_forex
#MarcChandler #USDOLLAR #EROTF #JYNFF #GBBEF #JEMTF #PGDDF #USDU #FXA #FXC #CYB #FXF #ULE #EUO #FXE #FXY #YCL #YCS #FXB #UUP #UDN #CEW -
Terms Of UBS Acquisition Wipe Out Additional Tier 1 Capital And Spur Fresh Concerns
https://seekingalpha.com/article/4588700-ubs-acquisition-terms-wipe-out-additional-tier-1-capital-spur-fresh-concerns?source=feed_tag_forex
#MarcChandler #USDOLLAR #EROTF #JYNFF #GBBEF #JEMTF #PGDDF #USDU #FXA #FXC #CYB #FXF #ULE #EUO #FXE #FXY #YCL #YCS #FXB #UUP #UDN #CEW -
Terms Of UBS Acquisition Wipe Out Additional Tier 1 Capital And Spur Fresh Concerns
https://seekingalpha.com/article/4588700-ubs-acquisition-terms-wipe-out-additional-tier-1-capital-spur-fresh-concerns?source=feed_tag_forex
#MarcChandler #USDOLLAR #EROTF #JYNFF #GBBEF #JEMTF #PGDDF #USDU #FXA #FXC #CYB #FXF #ULE #EUO #FXE #FXY #YCL #YCS #FXB #UUP #UDN #CEW -
Fragile Calm To End The Volatile Week Even With The Quadruple Expirations
https://seekingalpha.com/article/4588233-fragile-calm-to-end-volatile-week-quadruple-expirations?source=feed_tag_forex
#MarcChandler #USDOLLAR #SP500 #EROTF #JYNFF #GBBEF #USDU #SIVB #SPX #FXA #FXC #CYB #ULE #EUO #FXE #FXY #YCL #YCS #FXB #UUP #UDN #CS -
Fragile Calm To End The Volatile Week Even With The Quadruple Expirations
https://seekingalpha.com/article/4588233-fragile-calm-to-end-volatile-week-quadruple-expirations?source=feed_tag_forex
#MarcChandler #USDOLLAR #SP500 #EROTF #JYNFF #GBBEF #USDU #SIVB #SPX #FXA #FXC #CYB #ULE #EUO #FXE #FXY #YCL #YCS #FXB #UUP #UDN #CS -
Fragile Calm To End The Volatile Week Even With The Quadruple Expirations
https://seekingalpha.com/article/4588233-fragile-calm-to-end-volatile-week-quadruple-expirations?source=feed_tag_forex
#MarcChandler #USDOLLAR #SP500 #EROTF #JYNFF #GBBEF #USDU #SIVB #SPX #FXA #FXC #CYB #ULE #EUO #FXE #FXY #YCL #YCS #FXB #UUP #UDN #CS -
Swiss National Bank Support Steadies Market As ECB Faces Difficult Choice
https://seekingalpha.com/article/4587863-swiss-national-bank-support-steadies-market-ecb-difficult-choice?source=feed_tag_forex
#MarcChandler #USDOLLAR #EROTF #JYNFF #GBBEF #USDU #FXA #FXC #CYB #ULE #EUO #FXE #FXF #FXY #YCL #YCS #FXB #UUP #UDN -
Swiss National Bank Support Steadies Market As ECB Faces Difficult Choice
https://seekingalpha.com/article/4587863-swiss-national-bank-support-steadies-market-ecb-difficult-choice?source=feed_tag_forex
#MarcChandler #USDOLLAR #EROTF #JYNFF #GBBEF #USDU #FXA #FXC #CYB #ULE #EUO #FXE #FXF #FXY #YCL #YCS #FXB #UUP #UDN -
Swiss National Bank Support Steadies Market As ECB Faces Difficult Choice
https://seekingalpha.com/article/4587863-swiss-national-bank-support-steadies-market-ecb-difficult-choice?source=feed_tag_forex
#MarcChandler #USDOLLAR #EROTF #JYNFF #GBBEF #USDU #FXA #FXC #CYB #ULE #EUO #FXE #FXF #FXY #YCL #YCS #FXB #UUP #UDN -
Does The U.S. Inflation Report Matter, Or Has It Been Superseded By Deflationary Forces Of A Financial Crisis?
https://seekingalpha.com/article/4587241-us-inflation-report-deflationary-forces-financial-crisis?source=feed_tag_forex
#MarcChandler #USDOLLAR #EROTF #JYNFF #GBBEF #USDU #FXA #FXC #CYB #ULE #EUO #FXE #FXY #YCL #YCS #FXB #UUP #UDN -
Does The U.S. Inflation Report Matter, Or Has It Been Superseded By Deflationary Forces Of A Financial Crisis?
https://seekingalpha.com/article/4587241-us-inflation-report-deflationary-forces-financial-crisis?source=feed_tag_forex
#MarcChandler #USDOLLAR #EROTF #JYNFF #GBBEF #USDU #FXA #FXC #CYB #ULE #EUO #FXE #FXY #YCL #YCS #FXB #UUP #UDN -
Does The U.S. Inflation Report Matter, Or Has It Been Superseded By Deflationary Forces Of A Financial Crisis?
https://seekingalpha.com/article/4587241-us-inflation-report-deflationary-forces-financial-crisis?source=feed_tag_forex
#MarcChandler #USDOLLAR #EROTF #JYNFF #GBBEF #USDU #FXA #FXC #CYB #ULE #EUO #FXE #FXY #YCL #YCS #FXB #UUP #UDN -
Market Prices In A Fed Cut In Q4 Ahead Of CPI, While ECB To May Deliver A 50 BP Hawkish Hike
https://seekingalpha.com/article/4586755-market-prices-in-a-fed-cut-in-q4-ahead-of-cpi-while-ecb-to-may-deliver-a-50-bp-hawkish-hike?source=feed_tag_forex
#MarcChandler #EROTF #JYNFF #GBBEF #USDU #FXA #FXC #CYB #ULE #EUO #FXE #FXY #YCL #YCS #FXB #UUP #UDN -
Market Prices In A Fed Cut In Q4 Ahead Of CPI, While ECB To May Deliver A 50 BP Hawkish Hike
https://seekingalpha.com/article/4586755-market-prices-in-a-fed-cut-in-q4-ahead-of-cpi-while-ecb-to-may-deliver-a-50-bp-hawkish-hike?source=feed_tag_forex
#MarcChandler #EROTF #JYNFF #GBBEF #USDU #FXA #FXC #CYB #ULE #EUO #FXE #FXY #YCL #YCS #FXB #UUP #UDN -
Market Prices In A Fed Cut In Q4 Ahead Of CPI, While ECB To May Deliver A 50 BP Hawkish Hike
https://seekingalpha.com/article/4586755-market-prices-in-a-fed-cut-in-q4-ahead-of-cpi-while-ecb-to-may-deliver-a-50-bp-hawkish-hike?source=feed_tag_forex
#MarcChandler #EROTF #JYNFF #GBBEF #USDU #FXA #FXC #CYB #ULE #EUO #FXE #FXY #YCL #YCS #FXB #UUP #UDN -
Powell Sends 2-Year Yield Above 5% And Ignites Powerful Dollar Rally
https://seekingalpha.com/article/4585569-powell-sends-2-year-yield-above-5-percent-ignites-powerful-dollar-rally?source=feed_tag_forex
#MarcChandler #USDOLLAR #EROTF #JYNFF #GBBEF #JEMTF #PGDDF #USDU #FXA #FXC #CYB #ULE #EUO #FXE #FXY #YCL #YCS #FXB #UUP #UDN #CEW -
Powell Sends 2-Year Yield Above 5% And Ignites Powerful Dollar Rally
https://seekingalpha.com/article/4585569-powell-sends-2-year-yield-above-5-percent-ignites-powerful-dollar-rally?source=feed_tag_forex
#MarcChandler #USDOLLAR #EROTF #JYNFF #GBBEF #JEMTF #PGDDF #USDU #FXA #FXC #CYB #ULE #EUO #FXE #FXY #YCL #YCS #FXB #UUP #UDN #CEW -
Powell Sends 2-Year Yield Above 5% And Ignites Powerful Dollar Rally
https://seekingalpha.com/article/4585569-powell-sends-2-year-yield-above-5-percent-ignites-powerful-dollar-rally?source=feed_tag_forex
#MarcChandler #USDOLLAR #EROTF #JYNFF #GBBEF #JEMTF #PGDDF #USDU #FXA #FXC #CYB #ULE #EUO #FXE #FXY #YCL #YCS #FXB #UUP #UDN #CEW -
U.S. Dollar Is Better Bid Ahead Of Powell, While Aussie Sells Off On Dovish Hike By The RBA
https://seekingalpha.com/article/4585153-us-dollar-better-bid-powell-aussie-sells-off-dovish-hike-rba?source=feed_tag_forex
#MarcChandler #USDOLLAR #EROTF #JYNFF #GBBEF #JEMTF #PGDDF #USDU #FXA #FXC #CYB #ULE #EUO #FXE #FXY #YCL #YCS #FXB #UDN #UUP #CEW -
U.S. Dollar Is Better Bid Ahead Of Powell, While Aussie Sells Off On Dovish Hike By The RBA
https://seekingalpha.com/article/4585153-us-dollar-better-bid-powell-aussie-sells-off-dovish-hike-rba?source=feed_tag_forex
#MarcChandler #USDOLLAR #EROTF #JYNFF #GBBEF #JEMTF #PGDDF #USDU #FXA #FXC #CYB #ULE #EUO #FXE #FXY #YCL #YCS #FXB #UDN #UUP #CEW -
U.S. Dollar Is Better Bid Ahead Of Powell, While Aussie Sells Off On Dovish Hike By The RBA
https://seekingalpha.com/article/4585153-us-dollar-better-bid-powell-aussie-sells-off-dovish-hike-rba?source=feed_tag_forex
#MarcChandler #USDOLLAR #EROTF #JYNFF #GBBEF #JEMTF #PGDDF #USDU #FXA #FXC #CYB #ULE #EUO #FXE #FXY #YCL #YCS #FXB #UDN #UUP #CEW