Canard

The fledgling Fediverse discovery hub takes a big step today, showcasing deeper integrations with Mastodon, and a developer API for communities.

William Lai Ching-te from the governing Democratic Progressive Party (DPP) has won Taiwan’s presidential election, despite warnings from China – which claims Taiwan as part of its territory – not to vote for him.

Webauthn (Passkeys) are only going to become more important in the future and as this grows, deployments with higher security risks and criticality are going to need to start to understand and embrace attestation of their keys.

In their current form, almost all software products and IDM's today allow you to enroll any cryptographic authenticator. It doesn't matter what make or model it is, it will be allowed.

However, not all authenticators are made equal. They each have different properties, security features, and some even have security issues affecting their hardware or software. Because webauthn is a self contained multiple factor authenticator, this means we need to be even more careful to ensure these devices are secure.

Security researchers developed a new attack, which they named AutoSpill, to steal account credentials on Android during the autofill operation.

Daniel Huigens, the head of Proton’s cryptography team, explains how the latest crypto refresh makes PGP more secure.