#key generation

Coinbase is making strides towards simplifying the onboarding process for web3, bolstering both security and recovery for crypto wallets. The company is deploying a cryptographic technique called Multi-Party Computation (MPC) to eliminate key management hurdles that have long been a barrier to mainstream web3 adoption. (Read More)

It’s astonishing how many game developers have no idea when to send Steam Keys out. Some send them before the game is launched, while others wait until a few months after. And truth is, both approaches are wrong. The thing about Steam keys is that they work, but only to a point. They’re not meant to elevate your Steam score, which actually isn’t even affected by key reviews. As such, they’re…

New Post has been published on http://telea2z.com/concern-mounts-as-google-confirms-android-cryptographic-vulnerability.html

Concern mounts as Google confirms Android cryptographic vulnerability

Google has confirmed reports of a weakness in Android’s Java Cryptography Architecture (JCA) that has left bitcoin wallets generated on Android devices vulnerable to theft. The issue came to light last weekend, with reports that around $5,700 worth of the bitcoin cryptocurrency had been stolen as a result of the vulnerability on Android.

“We have now determined that applications which use the Java Cryptography Architecture (JCA) for key generation, signing, or random number generation may not receive cryptographically strong values on Android devices due to improper initialization of the underlying PRNG,” explained Android security engineer Alex Klyubin in a post on Google’s Android developers blog.

“Applications that directly invoke the system-provided OpenSSL PRNG without explicit initialization on Android are also affected.”

The Bitcoin Foundation, which oversees the bitcoin economy, warned developers of Android wallet apps to update them over the weekend, while also encouraging users to update their apps when possible, or transfer their bitcoins to more secure wallets on their computers when not.

“We recently learned that a component of Android responsible for generating secure random numbers contains critical weaknesses, that render all Android wallets generated to date vulnerable to theft,” explained the Foundation’s blog post.

“Because the problem lies with Android itself, this problem will affect you if you have a wallet generated by any Android app.”

Google’s Klyubin has published instructions for developers on one way to update their applications to fix the vulnerability, and announced that Google’s Android team have developed patches to “ensure that Android’s OpenSSL PRNG is initialized correctly” and provided these to handset partners.

Earlier in the day, security firm Symantec claimed that hundreds of thousands of Android apps – not just bitcoin wallets but games, productivity, music and other categories of apps – may be affected by the vulnerability in Android’s SecureRandom component for generating secure random numbers.

“Looking at Norton Mobile Insight data, we have found over 360,000 applications that make use of SecureRandom and over 320,000 of them use SecureRandom in the same way the bitcoin wallets did,” explained a post on Symantec’s blog.

“We strongly advise users of Android bitcoin wallet apps to check whether their applications are affected and to follow the steps outlined by bitcoin.org to make their funds safe.”

According to the Bitcoin Foundation, the total value of all bitcoins in circulation is more than $1.3bn, with its website boasting that there has been “only one major security incident in the protocol which was fixed in August 2010″.

Key Generation

The Anti-Social Network

Running Into Darkness

Sneak preview of an upcoming album for 2012 (hopefully released by October 2012)

"The Anti-Social Network" ~ Running Into Darkness is a classic and much older track of mine from back in 2007. I had not put it on any albums although I was keen to share this track with others. I just had not found the right fit for it.... this album has been a long time in the making with most tracks being remixed and re-mastered from previous versions attempted, but not fully realized at their conception. I have named this work The Anti-Social Network in jest but also in seriousness...

There are very little taboos and social graces left in the offline world. I wanted to pay tribute to those precious moments in life that inspire my creation by being with and experiencing life with my loved ones and how they effect my new direction in music. Yes, there is intense passion in this album, anger, urgency and a new promise... hope. I share with you this piece, because I feel this particular version of it is finished (since when do i not create mixes and re-masters?!!~)... a vocal version may materialize for the album yet. ;)