#keys
4 découvertes · Découvertes choisies sur le web ouvert, des plus récentes aux plus anciennes.
-
Railway Says Stolen Customer AI Keys Led to $740,000 in Estimated Unauthorized Usage Charges
AI provider keys that customers stored on Railway were stolen in an October breach and used to commit an estimated $740,000 in unauthorized spending, the platform-as-a-service provider said yesterday. It has promised to pay those charges itself when an AI provider will not refund them. The company builds and runs apps for its customers and stores their secrets, such as API keys and database
The Hacker News · EN
-
YubiGPG: Hardware-Backed GPG Keys for Everyone
GPG has protected sensitive communication for decades. YubiGPG is an open-source toolkit that makes hardware-backed key setup reliable enough for everyone to do it right.
CodeNSolder · EN
-
Compromised TLS Certificates
The Indian CA eMudhra Limited has eight TLS certificates with laughably weak private keys : The compromised eMudhra keys were defective at a level that’s challenging the imagination of many of the engineers studying the incident. A normal size for a NIST P-384 elliptic curve cryptography private key contains roughly 384 bits of entropy, a size allowing almost 2 384 , or a number with 116 digits, different possibilities. The private key sizes of the compromised keys ranged from 3 to 8 bits. Astonishingly, the private keys were 4, 56, 66, 115, 155, 156, 230, 237...
Schneier on Security · EN