Hello, welcome to the Friday, March 15th, 2019 edition of the Sansonet Storm Center's Stormcast.

My name is Johannes Ulrich, and today, well, I'm not going to tell you where I am recording from,

because this will be this month's challenge.

So if you can figure out where I am at this week starting Sunday, then send a message via the Internet

Storm Center contact form and mention podcast contest in the subject.

The winner being the person that gets closest, the first will win a Raspberry Pi if I can get it delivered in the country

you reside in. DDA today took yet another look at Hydra, the reverse analysis tool

that the NSA released last week. In this diary, he took a look at SIP files

and how Hydra deals with it.

Seems like it's dealing with them quite well,

but it doesn't yet do any encrypted SIP files.

DDA is promising to fix that

once the source code for this tool is released.

Well, and certificate authorities are in the news again.

It all started with Dark Matter applying to become a trusted certificate authority.

Now, if you have been following the news around Dark Matter, they also have been accused

of being actively involved in

writing government matter for some Middle Eastern governments.

And so there was a lot of pressure to not have them approved as to authority and people

look closely at the certificates that Dark Matter had issued so far.

And one thing they found is that the serial numbers always started with two cleared bits.

So the first two bits were always zero zero, which wouldn't be a big problem in itself.

...