Windows 10: NCC Group to audit OpenSSL for security holes

Brink · Mar 7, 2015

OpenSSL, arguably the world's most important Web security library with its support for Secure Sockets Layer (SSL) and Transport Layer Security (TLS) in such popular Web servers as Apache and Nginx, has had real trouble. First, there was HeartBleed and more recently there is FREAK. It's been one serious security problem after another. Now, the NCC Group, a well-regarded security company, will be auditing OpenSSL's code to catch errors before they appear in the wild.

This is being paid for by the Linux Foundation's Core Infrastructure Initiative (CII). The CII was set up to pay for essential, but woefully underfunded, open-source projects such as OpenSSL, the Network Time Protocol (NTP), and OpenSSH.

Thomas Ritter, a principal security engineer at NCC, told me in an e-mail that, "We're excited to announce that as part of the Linux Foundation's Core Infrastructure Initiative, and organized by the Open Crypto Audit Project, Cryptography Services will be conducting an audit of OpenSSL. This is an amazing opportunity to dive deeply into one of the pieces of software that so much of the world relies on, and we're honored to have been chosen to conduct it."

It's long been known that the OpenSSL code would be audited but there have been no details. In short, no one had answered the question, "Who was going to bell the cat?" Now we know.
Click to expand...

Read more: NCC Group to audit OpenSSL for security holes | ZDNet

:)

ggjkjkjkjkjk · Mar 7, 2015

Event log when windows credential deleted

Often Outlook credentials will just will just delete themselves and I want to understand more why that is happening.

I've turned on all auditing in group policy Computer config>windows settings> security settings > local policies> audit policy

In credential manager I've created a set of credentials and deleted them but can't seem to find the log in event viewer.

JayG500 · Mar 7, 2015

Auditing UAC use in Windows 10

Is there a way to see the program someone is running when they utilize elevated rights through UAC?

I tried setting Group Policy, auditing settings are located within Computer Configuration\Policies\Windows Settings\Security Settings\Local Policies\Audit Policy:

Audit Privilege Use - success/failure

Audit Process Tracking - success/failure

I receive several messages - event IDs: 4611, 4648, 4799, 4624 --- but they don't tell me the program the user is launching. Some of the messages that mention process name, but always mention "consent.exe"
instead of the program the user is requesting.

Additionally -- the UAC "Applications and Services Logs" is empty. Not sure if there is a way to enable this to provide more information?

Thank you.

Windows 10: NCC Group to audit OpenSSL for security holes

NCC Group to audit OpenSSL for security holes

NCC Group to audit OpenSSL for security holes

NCC Group to audit OpenSSL for security holes - Similar Threads - NCC Group audit

Microsoft Account Security Hole

Microsoft Account Security Hole

Microsoft Account Security Hole

Openssl

Openssl

How do I prevent this security hole?

How do I prevent this security hole?

Microsoft Windows security auditing.

Security auditing - how to disable?