No, not exactly. The SHA-1 hashing algorithm still does what it is supposed to do. SHA-1 creates an unpredictable 20 byte “fingerprint” of the data input into the function, in this case a web server certificate. It is the unpredictability of the output that makes cryptographic hash functions so useful. … Continue reading
Yes, it is possible in theory to forge the Web Server Certificate that is used in SSL/TLS communication. This is because the certificate is signed by a certificate authority that your browser trusts using a cryptographic hashing algorithm of a specific length. The hashing algorithms that have been used to… Continue reading
Always enjoy teaching in EMEA, can't wait to return in person after COVID.
Are you following our SANS Faculty? They share some amazing resources, tips & tricks!
@KennethGHartman worked for a variety of #Cloud Service Providers in architecture, engineering, compliance, and security product management roles.
#followfriday
Is your security team learning to work with DevOps and Cloud as code? Take the 2021 Survey | Rethinking the Sec in DevSecOps: Security as Code Survey.
@jimrbird and I will be publishing the results this summer. Let's find out if security is learning to code! https://twitter.com/SANSCloudSec/status/1364236230280544257
The #DevSecOps Survey is now open! Take a few minutes to take our survey by @jimrbird & @emjohn20 and enter to win a $250 Amazon gift card! https://sans.org/u/1bgF
I, for one will truly miss Fry's Electronics stores. One of the very convenient things about living in Silicon Valley. You had to see one to believe how cool they were.
BREAKING Scoop: Fry’s Electronics is closing business nationwide effective tonight. Source: Wilsonville, OR store employee. http://Frys.com website will go down at 12am #Frys #FrysElectronics
Eerything that can be used as a C&C Cannel will be: https://arstechnica.com/information-technology/2021/02/crooks-use-the-bitcoin-blockchain-to-protect-their-botnets-from-takedown/
