Open letter signed by ~70 security experts calls for The Guardian to retract story about alleged WhatsApp backdoor vulnerability
the scope & implications of a threat; what options people have—shouldn't report on security. Filippo Valsorda / @filosottile : In our little bubble we can afford to quibble about imperfect crypto. Out...
How WoSign, a Chinese CA, issued a valid SSL cert for GitHub's primary domain to a subdomain user, and didn't revoke it even after vulnerability was reported
Stephen Schrauger / Schrauger.com : Tweets: @filosottile , @returnstring , @kennwhite and @juliocesarfort Tweets: Filippo Valsorda / @filosottile : I untrusted the WoSign root, well prepared to some ...
Microsoft updates Windows Defender, its onboard anti-virus software, to remove the Superfish software that was pre-installed on many Lenovo computers
While Lenovo Stumbles And Superfish Remains Silent Center for Democracy & Technology : Is Breaking Web Encryption Legal? Simon Phipps / InfoWorld : Lenovo: ‘We were as surprised as you’ — In an excl...