![Community banner](https://partizle.com/pictrs/image/9d15594e-f385-4f3c-91dd-a0205c46c649.jpeg)
-
Backdoor in TETRA Police Radios
> Seems that there is a deliberate backdoor in the twenty-year-old TErrestrial Trunked RAdio (TETRA) standard used by police forces around the world.
>> Most interestingly is the researchers’ findings of what they describe as the backdoor in TEA1. Ordinarily, radios using TEA1 used a key of 80-bits. But Wetzels said the team found a “secret reduction step” which dramatically lowers the amount of entropy the initial key offered. An attacker who followed this step would then be able to decrypt intercepted traffic with consumer-level hardware and a cheap software defined radio dongle.
Schneier with the obvious take:
> Why aren’t we done with secret, proprietary cryptography? It’s just not a good idea.
- arstechnica.com WordPress plugin installed on 1 million+ sites logged plaintext passwords
AIOS bills itself as an "all-in-one" security solution. A just-fixed bug undermined that.
Another WordPress success story!