-
Listen Now
EPISODE 336
Broadcast Date:
October 3, 202314 minutes
Podcast Oct 03, 2023Root Causes 336: Digitally Signing Images on Cameras
A recent press release discusses efforts of camera manufacturers and the digital imagery supply chain to create an ecosystem for digitally signed images.
-
Listen Now
EPISODE 335
Broadcast Date:
September 29, 202310 minutes
Podcast Sep 29, 2023Root Causes 335: When MFA Is Not MFA
A social engineering attack to steal a one-time password (OTP) to enable unauthorized access is further exploited by a cloud backup feature.
-
Watch Now
60 minutes
Webinar Sep 28, 2023Why effective certificate management relies on enhanced discovery
Certificate discovery is the most important pillar of CLM. Without it you simply cannot effectively manage and automate the other steps.
-
Listen Now
EPISODE 334
Broadcast Date:
September 27, 202318 minutes
Podcast Sep 27, 2023Root Causes 334: What Is Attestation on the Web?
Most people hate dealing with CAPTCHA, but it offers benefits for web sites. We discuss alternatives to CAPTCHA, how they work, and their pros and cons.
-
Listen Now
EPISODE 333
Broadcast Date:
September 21, 202317 minutes
Podcast Sep 21, 2023Root Causes 333: Intel Side Channel Attack Steals Private Keys
A newly revealed side channel attack can capture AES encryption keys from Intel chips. We explain this significant and powerful attack.
-
Listen Now
EPISODE 332
Broadcast Date:
September 14, 202311 minutes
Podcast Sep 14, 2023Root Causes 332: Acoustic AI-based Key Logging Attack
An AI model that can interpret keystrokes based on the sound of keyboard use over a phone or video call and steal passwords.
-
Listen Now
EPISODE 331
Broadcast Date:
September 13, 202314 minutes
Podcast Sep 13, 2023Root Causes 331: Microsoft Restores Trust to Code Signing Root
Recent erroneous behavior on Windows indicates that Microsoft removed - and then re-added - a legacy VeriSign root in its trusted roots list.
-
Listen Now
EPISODE 330
Broadcast Date:
September 5, 202322 minutes
Podcast Sep 05, 2023Root Causes 330: End-to-end PQC in Use Today
Our hosts are joined by IronCap CEO Andrew Cheung as he discusses commercially available PQC solutions today, including VPN, email, and crypto currency.
-
Listen Now
EPISODE 329
Broadcast Date:
August 29, 202311 minutes
Podcast Aug 29, 2023Root Causes 329: What Is Messaging Layer Security?
The recently published Messaging Layer Security (MLS) protocol establishes key exchange protocols for simultaneous communication with 3+ participants.
-
Listen Now
EPISODE 328
Broadcast Date:
August 23, 20237 minutes
Podcast Aug 23, 2023Root Causes 328: What Is the Debian Weak Key Flaw?
In 2008 the world of SSL was shocked by a flaw in a popular operating system that limited the set of possible private keys on this OS to about 32,000.
-
Listen Now
EPISODE 327
Broadcast Date:
August 18, 202317 minutes
Podcast Aug 18, 2023Root Causes 327: What Is Multi-perspective Domain Validation?
In this episode we explain Border Gateway Protocol (BGP) attacks and how multi-perspective domain validation (MPDV) can defeat them.
-
Listen Now
EPISODE 326
Broadcast Date:
August 15, 202312 minutes
Podcast Aug 15, 2023Root Causes 326: The Difference Between .ml and .mil
Mistyped email addresses aimed at the US military frequently are sent to email addresses in Mali instead, to the tune of hundreds of thousands per year.