Security flaw from the ‘90s is still a problem today

Security flaw from the '90s is still a problem today

The flaw leaves Apple and Android users vulnerable

According to reports, a security flaw from the ‘90s has recently been discovered that leaves users vulnerable to cyberattacks today. A team of cryptographers has named the weakness “Factoring attack on RSA-EXPORT Key” or FREAK for short. It leaves everyone who uses Safari on Mac and iOS devices as well as Android’s stock browser vulnerable to hacking when they visit secure websites, such as those of the U.S. government.

This stems from a decision made in the ‘90s when the government required weaker encryption on websites for those who were attempting to access them from outside the U.S., thus allowing the NSA to access those communications more easily.

Eventually the government got rid of this requirement, but the encryption was already built from the ground-up into many different software applications which are still used today.

Researchers from Johns Hopkins have proved that this weakness can be used to steal a visitor’s personal information, as well as hack into the website itself. They can’t say whether anyone has already exploited the flaw, but Apple and Google are currently working on a patch regardless.

About the Author

Matt Holden is an Associate Content Editor for 1105 Media, Inc. He received his MFA and BA in journalism from Ball State University in Muncie, Indiana. He currently writes and edits for Occupational Health & Safety magazine, and Security Today.

  • How COVID-19 Has Revolutionized Aviation Security How COVID-19 Has Revolutionized Aviation Security

    In this episode of SecurPod, Ralph C. Jensen and Steve Karoly talk about the COVID-19 pandemic and the changes experienced in the aviation security vertical. The pandemic has changed society and our way of life. It has also brought about seismic changes.

Digital Edition

  • Security Today Magazine - May June 2021

    May June 2021

    Featuring:

    • Tapping into Touch-free Digital
    • Deep Learning
    • Working from Home
    • Body-worn Technology
    • A Tragic Turn of Events

    View This Issue

  • Environmental Protection
  • Occupational Health & Safety
  • Infrastructure Solutions Group
  • Spaces4Learning
  • Campus Security & Life Safety