I generated recovery codes for my PyPI account today.
They make you immediately enter one (using it up), to make sure you actually saved them instead of just clicking through. Smart move!
3 Likes
Yikes, new timing attack sounds pretty bad:
In the worst case, these attacks can allow an attacker to extract cryptographic keys from remote servers that were previously believed to be secure.
Am I affected by Hertzbleed?
Likely, yes.
Intel’s security advisory states that all Intel processors are affected. We experimentally confirmed that several Intel processors are affected, including desktop and laptop models from the 8th to the 11th generation Core microarchitecture.
My CPU is only 6th gen =P
6 Likes
Does anyone use “enhanced safe browsing” on gmail. I read the description and I don’t understand anymore clearly how it helps…