Cybersecurity

6391 readers

143 users here now

c/cybersecurity is a community centered on the cybersecurity and information security profession. You can come here to discuss news, post something interesting, or just chat with others.

THE RULES

Instance Rules

Be respectful. Everyone should feel welcome here.
No bigotry - including racism, sexism, ableism, homophobia, transphobia, or xenophobia.
No Ads / Spamming.
No pornography.

Community Rules

Idk, keep it semi-professional?
Nothing illegal. We're all ethical here.
Rules will be added/redefined as necessary.

If you ask someone to hack your "friends" socials you're just going to get banned so don't do that.

Learn about hacking

Hack the Box

Try Hack Me

Pico Capture the flag

Other security-related communities !databreaches@lemmy.zip !netsec@lemmy.world !securitynews@infosec.pub !cybersecurity@infosec.pub !pulse_of_truth@infosec.pub

Notable mention to !cybersecuritymemes@lemmy.world

founded 2 years ago

MODERATORS

kid@sh.itjust.works

Lanky_Pomegranate530@midwest.social

WeChat modified TLS encryption protocol exposes users to security risks (www.techspot.com)

submitted 4 months ago by BrikoX@lemmy.zip to c/cybersecurity@sh.itjust.works

6 comments fedilink hide all child comments

A recent investigation by the University of Toronto's Citizen Lab has uncovered potential security weaknesses in WeChat's custom encryption protocol. These weaknesses arise because the developers of WeChat, which boasts over a billion monthly active users, have modified the Transport Layer Security (TLS) 1.3 protocol, creating a version called MMTLS.

top 6 comments

sorted by: hot top controversial new old

[–] sylver_dragon@lemmy.world 29 points 4 months ago (1 children)

WeChat's software has security issues? Color me shocked. Shocked, I tell you.
Well, not that shocked.

Also:

WeChat's custom encryption protocol

Don't do that

[–] stoy@lemmy.zip 8 points 4 months ago

I thought we all agreed that WeChat is a security vulnerabilliy

[–] August27th@lemmy.ca 18 points 4 months ago

the developers of WeChat [...] have modified the Transport Layer Security (TLS) 1.3 protocol, creating a version called MMTLS.

Man in the Middle TLS

[–] praise_idleness@sh.itjust.works 6 points 4 months ago* (last edited 3 months ago)

nothing to see here :)

[–] AnUnusualRelic@lemmy.world 3 points 4 months ago

Next you're going to tell me that ROT13 is a problem?

[–] mindbleach@sh.itjust.works 2 points 4 months ago

Don't roll your own crypto.