Skip to: Content
Skip to: Site Navigation
Skip to: Search

November 22, 2008 2:03:33 CST

Learn about Newser Points »

« Back to the grid | Next story »

Open-Source Security Flaw Exposes Millions

Posted May 22, 08 6:16 PM CDT in Technology 

(Newser) – A programming error discovered last week makes at least four open-source operating systems and 25 applications vulnerable to hacking, and a patch distributed to fix it doesn’t solve the problem. Worse, the vulnerability can extend to computers not even running the deficient code, reports Technology Review. The mistake went unnoticed for almost 2 years.

Programmers accidentally restricted the number of encryption keys the affected computers could use to protect information sent over networks to just 32,767, making it possible for hackers to crack the encryption by trying all possible keys. Furthermore, the keys are portable, meaning they could be installed on computers that weren’t running the vulnerable code in the first place.

Source MIT Technology Review

0 comments | Print E-mail | Digg Seed this on Newsvine Add this link to Del.icio.us StumbleUpon

Related Newser Stories

  • Accused Palin Hacker Pleads Not Guilty

    Oct 8, 08 2:15 PM CDT
    Accused Palin Hacker Pleads Not Guilty A Tennessee college student has been indicted on charges of hacking into Sarah Palin's email account and posting private info online, the Knoxville News Sentinel reports. David Kernell, the 20-year-old son of state Democratic Rep. Michael Kernell, pleaded not guilty. His trial is set for Dec. 16; he's free until then as long as he restricts his computer use to school work, doesn't leave Eastern Tennessee, and doesn't contact Palin.
    More »

  • Patients' Info Swiped Along With Laptop

    Mar 25, 08 3:57 PM CDT
    Patients' Info Swiped Along With Laptop A government laptop loaded with personal medical info on thousands of patients just “fell through the cracks,” a top exec with an NIH subsidiary says. The National Heart, Lung and Blood Institute machine was stolen Feb. 23, apparently at random, from an employee’s car trunk. None of the 2,500 records on the machine was encrypted, a violation of federal guidelines, CNN reports. More »

  • Data Encryption Isn't So Secure, After All

    Feb 22, 08 1:29 PM CST
    Data Encryption Isn't So Secure, After All Accessing encrypted data can be as simple as chilling a computer memory chip, according to a Princeton research group. The researchers were able to break through encryption in Windows, Macintosh, and Linux operating systems, reports the New York Times, calling into question the security methods that companies, government agencies, and individuals use to protect data. More »

  • Brits Accuse China of Web Espionage

    Dec 1, 07 1:30 PM CST
    Brits Accuse China of Web Espionage UK spy agency MI5 has sent an unprecedented letter to 300 British business leaders, warning them that vital sectors of the country's economy are under attack from Chinese state-sponsored electronic espionage. The Chinese "use every means at their disposal" to dig up information about British companies, a letter recipient told the Times of London. More »

  • Stores Expose Customer Credit Card, Personal Data to Hackers

    Nov 16, 07 1:36 PM CST
    Stores Expose Customer Credit Card, Personal Data to Hackers Major US and European retailers routinely transmit sensitive data, including customer credit card and Social Security numbers, over wireless networks wide open to hackers. A recent undercover study by a wireless data security firm found half of stores in major shopping areas either exchanged data without anti-hacking encryption or used obsolete encryption easily foiled by thieves. More »

Hewlett Packard laptop on display at Best Buy in Mountain View, Calif., Monday, May 13, 2008.   (AP Photo/Paul Sakuma)
The EeePC, a $400, fully functioning 2 pound notebook computer that uses the Linux operating system, is seen in New York in this Dec. 27, 2007 file photo.   (AP Photo/Mary Altaffer, file)
Mark DeLong monitors a laptop computer connected to devices which measure heat end energy levels along a railroad track in Urbana, Ohio on Tuesday, April 29, 2008.   (AP Photo)
« Prev« Prev | Next »Next » Slideshow
Our editors also recommend:

Threads (
1
 of 2)

Tags

computer security • hacking • encryption • cyberwarfare


Loading...

Premium Articles from HighBeam

Find more articles like this

Today's Most Popular

Loading...

Other Technology Stories

What is Newser?

2008 Codie Finalist

Face it: there's too much news. At Newser a team of editors and writers culls the most important stories from hundreds of U.S. and international sources and reduces them to a headline, picture, and two paragraphs. It's the Newser guarantee: we can take any report or column or video and pack what you need to know into 120 words or less. Newser's short-form aggregation, visual format, and unique information tools help you get more of the kind of news you want, in a quicker and more entertaining way. And we do it 24/7—you can come back morning, noon, night (and in between) for something new that matters. Read less, know more.

Learn more »