The DMZ

« first day (3319 days earlier) ← previous day next day → last day (1859 days later) »

Anders

12:28

@Nzall I think the tricky part with canonical questions is to set the right scope. For exploits, should all the questiosn about the exploit be in one question? Or is "how does the exploit work" one question and "how do I protect myself" one and so on?

And the right way to do it might be different for different issues, depending on how big they are. I don't know what is appropriate here, because I know nil about the issue.

Nzall

@Anders I think in this case, "how do I protect myself" isn't really as relevant because the only correct answer is "update your stuff" and because it's W10 most of it is patched within a week or so anyway. I think the more technical aspects of the exploit like how it works and what can be done with it are more relevant

Anders

@Nzall Sounds like you have thought this through. I would encourage you to post a question, if nothing else because I want to get educated by reading the answers... :-)

Nzall

12:46

Q: How does CVE-2020-0601 (ChainOfFools/CurveBall) work to undermine ECC?

What is the recently patched and disclosed Windows 10 OS family Crypt.dll vulnerability CVE-2020-0601, nicknamed ChainOfFools and/or Curveball? I've read up on it and while I understand the basics (deriving an alternative private key from a public key through manipulating cryptographic algorithms...