In the month since network security giant Juniper Networks was forced to admit that its products had NSA-linked backdoors, the company's tried a lot of different strategies: minimizing assurances, apologies, firmware updates -- everything, that is, except for removing th Dual_EC random number generator that is widely understood to have been compromised by the NSA.
Now, having exhausted all other potential strategies, Juniper has announced that it will retire Dual_EC -- which was shown to be insecure years before they inserted it into their codebase -- from its products, "in the first half of this year."
The 2014 back door was straightforward, said researcher Hovav Shacham of the University of California, San Diego, allowing anyone with the right password to see everything.
The 2012 code changed a mathematical constant in Juniper's Netscreen products that should have allowed its author to eavesdrop, according to Shacham and his fellow investigators.
Juniper's initial patch had gotten rid of that constant in Dual Elliptic Curve and replaced it with the version it had been using since 2008.
But the academics who studied the code said that while Juniper had not disavowed the 2008 code, it had not explained how that constant was picked or why it was using the widely faulted Dual Elliptic Curve at all.
Still another curve constant, quietly provided by the NSA and required for some federal certification, was exposed in documents leaked by former NSA contractor Edward Snowden as a key to the back door.
Juniper Networks will drop code tied to National Security Agency
(via Naked Capitalism)
Legalist is a startup founded by Thiel Fellow Eva Shang and Christian Haigh, backed by Y Combinator: it will use data-mining to identify people who have been legally wronged by deep-pocketed aggressors and offer to finance their litigation in return for a share of the winnings.
The new Ikea Catalog is making a big bet on very small living spaces — the kind of place that costs more than half your monthly salary but is too small for a dinner-table, let alone a separate room for your kids, who are supposed to sleep in a bunk-bed in the living room (“Why […]
Retired Brigadier General John Adams served for 30 years, including a stint as a military intelligence officer: in an op-ed in The Hill, he says that while he supports trade deals, the secretive Trans Pacific Partnership has almost nothing to do with trade, and will hasten America’s de-industrialization, making it harder for the US military […]
The Lytro Illum is our all-time best-selling camera and here’s our best deal yet. Apply the code “Lytro10” to save an extra 10% off on this camera’s mind-blowing functionality in this exclusive one day only sale.
If you’re looking to earn a top salary in the tech industry, there’s no better career than coding. However, sometimes the hardest part of entering this career path is knowing where to begin.We took the Complete Web Developer Course because it took that decision out of our hands. This course teaches beginner-friendly coding languages that will also help land an immediate […]
To be a Pokémon master, you’ll need a phone that won’t constantly die on you. Because nothing is worse than seeing the screen go black right as you’ve finally found the Charizard of your dreams.That’s why we’re so excited about the LinearFlux PokeCharger Portable Battery ($39.99). With its 3.0 Amp HyperCharging technology, this slim battery will […]