Security Boulevard

Carelessness versus craftsmanship in cryptography

Two popular AES libraries, aes-js and pyaes, “helpfully” provide a default IV in their AES-CTR API, leading to a large number of key/IV reuse bugs. These bugs potentially affect thousands of ...
CNET

I’ve Been Testing VPNs for Over a Decade. These Are the 9 VPN Settings I Enable for Optimal Privacy

Your VPN’s default settings might not be giving you all the protection you need, but adjust these settings to get a privacy ...
Ars Technica

How to encrypt your PC’s disk without giving the keys to Microsoft

In early 2025, Forbes reports, investigators at the FBI served Microsoft with a warrant seeking the BitLocker encryption recovery keys for several laptops it believed held evidence of fraud in Guam’s ...
The Verge

Microsoft handed the government encryption keys for customer data

Privacy advocates are worried about the precedent this sets and the potential for abuse. Privacy advocates are worried about the precedent this sets and the potential ...

5 Linux servers that let you ditch the public cloud and reclaim your privacy - for free

5 Linux servers that let you ditch the public cloud and reclaim your privacy - for free ...