Featured articles
Archive
Category: Security
OAuth PKCE Published as RFC7636
OAuth PKCE (pronounced “pixy”), for which John Bradley (Ping), Naveen Agarwal (Google), and I are credited as co-authors, has been published as [RFC 7636]. It was originally called…
JSON Web Key (JWK) Thumbprint Has Been Published as RFC 7638
“JSON Web Key (JWK) Thumbprint,” for which Mike Jones and I are credited as co-authors, has been published as [RFC 7638]. This specification defines a method for calculating a stab…
A New Method for Rapidly Detecting Malware Uploaded to the Play Store and Elsewhere
Researchers at Indiana University and Penn State University have announced a simple and fast method capable of detecting much of the malware used in zero-day attacks. Their method…
Corporate Big Data Is Leaking Everywhere
Apparently, many companies’ “big data” is leaking everywhere. According to BinaryEdge[1], a security company in Zurich, Switzerland, the results of its study[2] show that vas…
HTC Smartphone Vulnerability Allows Anyone to Read Fingerprint Images, Sending Share Price Plunging
According to an article in The Guardian, it appears that an HTC smartphone stored users’ fingerprint images in a form that anyone could read. The issue was discovered by 4 FireEye…
The WebSocket Unauthenticated Vulnerability in 1Password
In The XARA Vulnerabilities in MacOS X and iOS[1], I wondered why the original article[2] said that AgileBits, the maker of 1Password, also considered the issue difficult to addres…
The XARA Vulnerabilities in MacOS X and iOS
This afternoon (June 18), GigaZine published a sensational article titled “Vulnerability Found That Allows iCloud, Email, and Browser-Saved Passwords to Be Stolen on iOS and OS X;…
International Cybersecurity Conference to Be Held in Okinawa on 11/7 and 8
TBSNews i reports that the government will hold an international conference on cybersecurity in Okinawa Prefecture in 11 this year. The conference will take place on 11/7 and 8 at…
〔Today’s Data Leak〕 Up to 10,0002000 TCCI Member Records Leaked After PC Virus Infection; Metropolitan Police to Investigate
Data leaks have accelerated lately and become almost a daily occurrence. According to a Jiji Press report[1], on the 10th the Tokyo Chamber of Commerce and Industry announced that…
How “Numbers” Should Be Designed: Reflections on the Pension Number Leak
Regarding the pension number leak, apparently “all leaked numbers will be changed”. Personally, all I can think is, “Oh dear.” As I wrote in yesterday’s article, if operated approp…