News

After January’s deluge, a calmer update volume returns

Introducing the powerful new AI Assistant in Sophos XDR. Crafted by experts, created for everyone.

Really good—and detailed—survey of Trusted Encryption Environments (TEEs.)

Trend Micro uncovers BadIIS malware exploiting IIS servers for SEO fraud and malicious redirects

Memorial Hospital and Manor, located in Bainbridge, Georgia, has alerted 120,000 individuals that their data was breached following a ransomware attack last November

A US resident based in Indiana was charged with cyber intrusion and cryptocurrency theft conspiracies

The UK MoD has announced it is fast-tracking the recruitment of specialist cybersecurity roles, with recruits offered a starting salary of above £40,000

Security and privacy experts have questioned a new demand from the UK Home Office on Apple’s encrypted iCloud service

Europol has urged the financial sector to prioritize quantum-safe cryptography

Here’s an easy system for two humans to remotely authenticate to each other, so they can be sure that neither are digital impersonations.

To mitigate that risk, I have developed this simple solution where you can setup a unique time-based one-time passcode (TOTP) between any pair of persons.

This is how it works:

1. Two people, Person A and Person B, sit in front of the same computer and open this page;
2. They input their respective names (e.g. Alice and Bob) onto the same page, and click “Generate”;
3. The page will generate two TOTP QR codes, one for Alice and one for Bob;
4. Alice and Bob scan the respective QR code into a TOTP mobile app (such as Authy or Google Authenticator) on their respective mobile phones;
5. In the future, when Alice speaks with Bob over the phone or over video call, and wants to verify the identity of Bob, Alice asks Bob to provide the 6-digit TOTP code from the mobile app. If the code matches what Alice has on her own phone, then Alice has more confidence that she is speaking with the real Bob.

Simple, and clever.