/* ---- Google Analytics Code Below */
Showing posts with label ECB. Show all posts
Showing posts with label ECB. Show all posts

Friday, October 21, 2022

Encountered and Reported Security Issues in MS Office

In the most recent  ' Security Now  'Podcast #893'  by Steve Gibson, he discussed  the fact that Microsoft  has chosen not to fix a well understood security vulnerability currently in their OME (Office Method Encryption), that has existed for years,  a commonly used system, which claims to have a means to encrypt text in  Office, say before sending it or storing it.  

BUT they use ECB  'Electronic Code book' as a 'secure' method, which is well known to leak information.  ECB is well known to be insecure.  Microsoft has refused to fix or patch the Windows Office method.  I have personally examined ECB in the past, and its problems are obvious and well known. Especially for cases like stolen or diverted data. (Ransomware?)   A major issue for assumed security in MS Office.

Much more here   https://www.grc.com/sn/SN-893-Notes.pdf 

More on ECB Here:  https://en.wikipedia.org/wiki/Block_cipher_mode_of_operation#ECB 

Following, but please report any patching of this so I can inform followers. 

Friday, July 16, 2021

Digital Version of the Euro?

Complementing the existing monetary system.   Considering security too.  

ECB Starts Work on Digital Version of the Euro

CNBC,Silvia Amaro, July 14, 2021

The European Central Bank (ECB) has launched an initiative to produce a digital euro currency. The ECB expects the design and investigation stage to take two years, while the currency's actual implementation could add two more years to the project. ECB’s Fabio Panetta said, "Private solutions for digital and online payments bring important benefits such as convenience, speed, and efficiency. But they also pose risks in terms of privacy, safety, and accessibility. And they can be expensive for some users." The digital euro would let consumers make payments electronically, but also would "complement" the existing monetary system rather than supplanting physical cash and eliminating the commercial lending business.