Slashdot Mirror

← Back to Domains

Domain: duosecurity.com

Stories and comments across the archive that link to duosecurity.com.

Comments · 5

  1. Re:Wait, they shipped the private key? by Thumper_SVX · · Score: 1 · on Second Root Cert-Private Key Pair Found On Dell Computer (threatpost.com)

    And then Dell's software re-enables it, or reinstalls it if you delete it. And if you remove the software that does the reinstall and ever factory-reset your PC, it in turn gets reinstalled. It's like malware, except that it's from a commercial vendor.

    Unless you... you know... follow the instructions Dell provided to remove it properly or get the update that fixes this bug.

    Definitely a real dumbass move on Dell's part, but this happens in all big companies; someone thinks they're doing a really great thing by simplifying some process without giving any thought to the security ramifications.

  2. Re:Wait, they shipped the private key? by arglebargle_xiv · · Score: 1 · on Second Root Cert-Private Key Pair Found On Dell Computer (threatpost.com)

    I found the eDellRoot certificate on my machine (Which I promptly disabled)

    And then Dell's software re-enables it, or reinstalls it if you delete it. And if you remove the software that does the reinstall and ever factory-reset your PC, it in turn gets reinstalled. It's like malware, except that it's from a commercial vendor.

  3. Blame browsers for security lapses .. by nickweller · · Score: 1 · on Latest EMET Bypass Targets WoW64 Windows Subsystem (threatpost.com)

    "80 percent of browsers in the researchers’ sample size were 32-bit processes executing on a 64-bit host running WOW64, putting them all at risk. ref

    What were the names of these browsers with no 64-bit versions?

    "Duo Security, a cloud-based access security provider" ref

  4. Re:password manager by Wootery · · Score: 1 · on Ask Slashdot: How To Keep Students' Passwords Secure?

    Google turned up this incident.

    I still don't really get what happened. Their system is supposed to be architected such that stealing all the data on their servers shouldn't get you much - everything is encrypted.

  5. Re:Silly and inflammatory by whosdat · · Score: 2 · on Meet Two Security Researchers Apple Hates (Video)

    Ah, missed it at 50 seconds in the video, but still can't find any details. Their blog post on Bouncer hack mentions they've "been in touch with the Android security team and will be working with them to address some of the problems weâ(TM)ve discovered" and their NFC hack didn't need any Google account at all. May be someone can find more?