Navigation

Language Selection

Search

Security: Open Source Security Podcast, Old JavaScript Crypto Flaw and New FUD-based Marketing

Submitted by Roy Schestowitz on Monday 16th of April 2018 09:48:24 AM Filed under

Security

Open Source Security Podcast: Episode 92 - Chat with Rami Saas the CEO of WhiteSource
Old JavaScript Crypto Flaw Puts Bitcoin Funds at Risk

Security researchers are warning that old Bitcoin addresses generated in the browser or through JavaScript-based wallet apps might be affected by a cryptographic flaw that allows attackers to brute-force private keys, take control of users' wallets, and steal funds.

The vulnerability resides in the use of the JavaScript SecureRandom() function for generating a random Bitcoin address and its adjacent private key (equivalent of a password).
Sonatype Survey Reveals Massive Data Breaches are Catalysts for DevSecOps Investments [Ed: When the only feasible way to market your product is saying stuff like "open source breaches jump 55%"?]

Login or register to post comments
Printer-friendly version
1375 reads
PDF version

More in Tux Machines

Type	Title	Author	Last Post
Story	Purism Ships Librem 5 Dev Kits as the Linux Phones Will Arrive in April 2019	Rianne Schestowitz	19/12/2018 - 3:16am
Story	VirtualBox 6.0 Officially Released with Major New Features, Here's What's New	Rianne Schestowitz	19/12/2018 - 3:11am
Story	Radeon Software 18.50 vs. Linux 4.20 + Mesa 19 Benchmarks On The AMD RX 590	Rianne Schestowitz	19/12/2018 - 3:01am
Story	Linux 4.14 vs. 4.20 Performance Benchmarks - The Kernel Speed Difference For 2018	Rianne Schestowitz	19/12/2018 - 2:58am
Story	today's howtos	Roy Schestowitz	19/12/2018 - 2:50am
Story	Ubuntu 18.04 LTS Is Now Available on the Dell Precision 5530 and 3530 Laptops	Rianne Schestowitz	19/12/2018 - 2:50am
Story	LibreOffice 6.1.4 Office Suite Released with More Than 125 Bug Fixes, Update Now	Rianne Schestowitz	19/12/2018 - 2:47am
Story	Meet the New Linux Desktop Champion: System76 Thelio	Rianne Schestowitz	19/12/2018 - 2:41am
Story	Raspberry Pi HAT serves up robotics control smorgasbord	Rianne Schestowitz	19/12/2018 - 2:37am
Story	MIPS ISA to be available under royalty-free license	Rianne Schestowitz	19/12/2018 - 2:32am

Latest News

Purism Ships Librem 5 Dev Kits as the Linux Phones Will Arrive in April 2019

Based on the newer and more powerful i.MX 8M 64-bit ARM boards, upgrading older devs kits based on the generic i.MX6 boards, the Librem 5 dev kits will soon arrive in the hands of early adopters as Purism needs all the help it can get from the community to continue and accelerate the development of its Linux-powered, privacy-focused phones, the Librem 5. Also: Purism's Librem 5 Developer Kits Finally Shipping, Linux Phone Price Going Up To $699

VirtualBox 6.0 Officially Released with Major New Features, Here's What's New

Several months in development, VirtualBox 6.0 is finally here as the most advanced release of the widely used virtualization software that lets users run various operating systems in virtual machines on the same or different hosts. As expected, this is a major release that adds important new features to the application. Highlights of VirtualBox 6.0 include support for exporting virtual machines to Oracle Cloud infrastructure, much-improved HiDPI and scaling support for high-end displays, including better detection of displays, support for surround speaker setups for Windows 10 Build 1809 users, and Hyper-V support on Windows hosts for better performance. VirtualBox 6.0 Released With Better HiDPI Support, VMSVGA 3D Graphics On Linux

Radeon Software 18.50 vs. Linux 4.20 + Mesa 19 Benchmarks On The AMD RX 590

Just days after the NVIDIA 415.23 Linux driver release that was published to fix 4.20 kernel issues, the NVIDIA 415.25 driver is now available with new product support. The NVIDIA 415.25 is out today in order to formally introduce support for the new TITAN RTX and Quadro RTX 8000 graphics cards, the newest Turing-based products. The TITAN RTX is available beginning today from the NVIDIA store at $2499 USD meanwhile the flagship RTX 8000 card will retail for about $10k USD.