-
Listen Now
EPISODE 335
Broadcast Date:
September 29, 202310 minutes
Podcast Sep 29, 2023Root Causes 335: When MFA Is Not MFA
A social engineering attack to steal a one-time password (OTP) to enable unauthorized access is further exploited by a cloud backup feature.
-
Listen Now
EPISODE 334
Broadcast Date:
September 27, 202318 minutes
Podcast Sep 27, 2023Root Causes 334: What Is Attestation on the Web?
Most people hate dealing with CAPTCHA, but it offers benefits for web sites. We discuss alternatives to CAPTCHA, how they work, and their pros and cons.
-
Listen Now
EPISODE 333
Broadcast Date:
September 21, 202317 minutes
Podcast Sep 21, 2023Root Causes 333: Intel Side Channel Attack Steals Private Keys
A newly revealed side channel attack can capture AES encryption keys from Intel chips. We explain this significant and powerful attack.
-
Listen Now
EPISODE 332
Broadcast Date:
September 14, 202311 minutes
Podcast Sep 14, 2023Root Causes 332: Acoustic AI-based Key Logging Attack
An AI model that can interpret keystrokes based on the sound of keyboard use over a phone or video call and steal passwords.
-
Listen Now
EPISODE 331
Broadcast Date:
September 13, 202314 minutes
Podcast Sep 13, 2023Root Causes 331: Microsoft Restores Trust to Code Signing Root
Recent erroneous behavior on Windows indicates that Microsoft removed - and then re-added - a legacy VeriSign root in its trusted roots list.
-
Listen Now
EPISODE 330
Broadcast Date:
September 5, 202322 minutes
Podcast Sep 05, 2023Root Causes 330: End-to-end PQC in Use Today
Our hosts are joined by IronCap CEO Andrew Cheung as he discusses commercially available PQC solutions today, including VPN, email, and crypto currency.
-
Listen Now
EPISODE 329
Broadcast Date:
August 29, 202311 minutes
Podcast Aug 29, 2023Root Causes 329: What Is Messaging Layer Security?
The recently published Messaging Layer Security (MLS) protocol establishes key exchange protocols for simultaneous communication with 3+ participants.
-
Listen Now
EPISODE 328
Broadcast Date:
August 23, 20237 minutes
Podcast Aug 23, 2023Root Causes 328: What Is the Debian Weak Key Flaw?
In 2008 the world of SSL was shocked by a flaw in a popular operating system that limited the set of possible private keys on this OS to about 32,000.
-
Listen Now
EPISODE 327
Broadcast Date:
August 18, 202317 minutes
Podcast Aug 18, 2023Root Causes 327: What Is Multi-perspective Domain Validation?
In this episode we explain Border Gateway Protocol (BGP) attacks and how multi-perspective domain validation (MPDV) can defeat them.
-
Listen Now
EPISODE 326
Broadcast Date:
August 15, 202312 minutes
Podcast Aug 15, 2023Root Causes 326: The Difference Between .ml and .mil
Mistyped email addresses aimed at the US military frequently are sent to email addresses in Mali instead, to the tune of hundreds of thousands per year.
-
Listen Now
EPISODE 325
Broadcast Date:
August 11, 202310 minutes
Podcast Aug 11, 2023Root Causes 325: Certificate Error Causes Sharepoint Outage
A recent outage in Microsoft Sharepoint was caused by an error in certificate installation. We explain what happened and the lessons to be learned.
-
Listen Now
EPISODE 324
Broadcast Date:
August 7, 202316 minutes
Podcast Aug 07, 2023Root Causes 324: Apple Vs New UK Surveillance Bill
The UK is attempting to build secret back doors into end-to-end encrypted services. Apple shot back by threatening to remove services from the UK.