EAuthenticator security release v0.1.1
By Nikolas Eller, Posted on Nov 30, 2018 - 08:52 UTC , category: Release, Security
This release v0.1.1 of EAuthenticator is a security update for EAuthenticator v0.1.0. It fixes a vulnerability with the in-memory protection. Due to this vulnerability, an attacker can read the content of the account data (including the account secrets) if the attacker can read the memory and the account data is changed while running EAuthenticator. This happens because the nonce in the stream cipher ChaCha20 was reused. The severity of this vulnerability is low because an attacker needs full control over your computer to read the...
Verify your download
By Nikolas Eller, Posted on Oct 15, 2018 - 08:07 UTC , category: Security
If you downloaded an application you can install it directly. But how can you be sure that you downloaded the file from the developers and not a malicious one from attackers? You can’t be sure if you don’t verify the downloaded file. This blog post shows you how to verify the downloaded EAuthenticator installer.
Why don’t we provide a checksum for our installers?
A lot of websites provide a checksum for their downloadable software. And they recommend you to verify their download with their...