Kim Zetter

https://infosec.exchange/@kimzetter

Journalist - cybersecurity/national security. Author COUNTDOWN TO ZERO DAY: Stuxnet and the Launch of the World's First Digital Weapon. Speaker/Signal. Substack publication is called Zero Day. Find it here: https://zetter.substack.com

Book: https://www.amazon.com/Countdown-Zero-Day-Stuxnet-Digital/dp/077043617X/ref=tmm_hrd_swatch_0?_encoding=UTF8&qid=&sr=
Substack: https://zetter.substack.com
Twitter: https://twitter.com/KimZetter

Public Key

npub1gxm0237r4hgj2jj5tsy7prkwdeuz2389fdgxheyl6wp5phytlmxs0yhhnu

NIP-05 Address

kimzetter_at_infosec.exchange@momostr.pink

Profile Code

nprofile1qqsyrdh4glp6m5f9ff29cz0q3m8xu7p9gnj5k5rtuj0a8q6qmj9langnn83df

Author Public Key

npub1gxm0237r4hgj2jj5tsy7prkwdeuz2389fdgxheyl6wp5phytlmxs0yhhnu

Show more details

Last Notes

2024-05-28 16:24:07

My latest for Wired. How researchers hacked time to crack an 11-year-old password protecting $3 million in cryptocurrency. They found a significant flaw in RoboForm's password manager that made its pseudo-random-number generator not so random. The flaw allowed famed hardware hacker Joe Grand to turn back time and cause the RoboForm password manager to believe it was 2013 and spit out the same passwords it generated back then. RoboForm says it fixed the flaw in 2015, but it appears it never told customers about it. This means that if any of RoboForm's current 6 million users are using passwords generated by the password manager prior to 2015, before the company silently fixed the flaw, they may have passwords that can be cracked in the same way .
https://www.wired.com/story/roboform-password-3-million-dollar-crypto-wallet/