Civil Rights
Movements, leaders, victories and the continuing fight for equality.
q2K BHP
Black History Portal
THE BHP WIRE —
HIDDEN TRUTHS
What's New!
Explore the people, places, events, achievements, struggles and stories that shaped our journey.
Movements, leaders, victories and the continuing fight for equality.
Innovation, patents, science, technology and world-changing contributions.
Pioneers, champions, Negro Leagues, records, activism and excellence.
Meet the people whose lives, choices and achievements shaped the journey.
Black towns, communities, institutions and places where history happened.
Moments that changed communities, movements, institutions and the nation.
In August 1908, a white mob attacked Springfield, Illinois’s Black community, destroying homes and businesses and lynching two Black men. National outrage over the violence helped spur the movement that created the NAACP the following year.
MORE →Reflects the personal views, recollections, and perspective of the author, Mike Davis.
This is a personal recollection on the Move fire on May 13, 1985
 Logo for the Terrapin attack | |
| CVE identifier | CVE-2023-48795 |
|---|---|
| Date discovered | 19 December 2023 |
| Discoverer | Fabian Bäumer, Marcus Brinkmann, Jörg Schwenk (Ruhr University Bochum) |
| Affected software | implementations of the Secure Shell (SSH) protocol including OpenSSH |
| Website | https://terrapin-attack.com/ |
The Terrapin attack is a cryptographic attack on the commonly used SSH protocol that is used for secure command-and-control throughout the Internet. The Terrapin attack can reduce the security of SSH by using a downgrade attack via man-in-the-middle interception.[1][2][3] The attack works by prefix truncation; the injection and deletion of messages during feature negotiation, manipulating sequence numbers in a way that causes other messages to be ignored without an error being detected by either client or server.[4]
According to the attack's discoverers, the majority of SSH implementations were vulnerable at the time of the discovery of the attack (2023).[4] As of January 3, 2024, an estimated 11 million publicly accessible SSH servers are still vulnerable.[5] However, the risk is mitigated by the requirement to intercept a genuine SSH session, and that the attack can only delete messages at the start of a negotiation, fortuitously resulting mostly in failed connections.[4][6] Additionally the attack requires the use of either ChaCha20-Poly1305 or a CBC cipher in combination with Encrypt-then-MAC modes of encryption.[7] The SSH developers have stated that the major impact of the attack is the capability to degrade the keystroke timing obfuscation features of SSH.[6]
The designers of SSH have implemented a fix for the Terrapin attack, but the fix is only fully effective when both client and server implementations have been upgraded to support it.[1] The researchers who discovered the attack have also created a vulnerability scanner to determine whether an SSH server or client is vulnerable.[8]
The attack has been given the CVE ID CVE-2023-48795.[9][3] In addition to the main attack, two other vulnerabilities were found in AsyncSSH, and assigned the CVE IDs CVE-2023-46445 and CVE-2023-46446.[3]
 | This Internet-related article is a stub. You can help Wikipedia by adding missing information. |
 | This cryptography-related article is a stub. You can help Wikipedia by adding missing information. |
Source: Wikipedia. Article content is retrieved live through the MediaWiki API.
In chess, a discovered attack is a direct attack revealed when one piece moves out of the way of another. Discovered attacks can be extremely powerful, as the piece moved can make a threat independently of the piece it reveals. Like many chess tactics, they often succeed because the opponent would be unable to meet two threats at once unless one of the attacked pieces can simultaneously move away from its own attack and either capture the other attacking piece or else pose a threat serious enough to buy a tempo. While typically the consequence of a discovered attack is the gain of material, it does not have to do this to be effective; the tactic itself can be used merely to gain a tempo. If the discovered attack is a check, it is called a discovered check.
In chess, a tactic is a sequence of moves that each makes one or more immediate threats – a check, a material threat, a checkmating sequence threat, or the threat of another tactic or otherwise forcing moves – that culminates in the opponent's being unable to respond to all of the threats without making some kind of concession. Most often, the immediate benefit takes the form of a material advantage or mating attack; however, some tactics are used for defensive purposes and can salvage material that would otherwise be lost, or to induce stalemate in an otherwise lost position. Tactics are usually contrasted with strategy, whereby the individual moves by themselves do not make indefensible threats, and the cumulative advantage of them takes longer to capitalise. The dichotomy can be summarised as tactics concerning short-term play and strategy concerning long-term play. Examples of strategic advantages are weaknesses in, compromised pawn structure in, and sustained pressure on, the opponent's position. Often, to dichotomize strategy and tactics, sequences of moves that make strategic instead of tactical threats or use tactical threats to obtain a strategic advantage are also classified as tactics. Tactics usually follow one of a number of repeating patterns; these include forks, skewers, batteries, discovered attacks, undermining, overloading, deflection, pins, and interference. The Encyclopedia of Chess Middlegames gives the following tactics categories: Annihilation of Defense, Blockade, Decoying, Deflection, Demolition of Pawns, Discovered Attack, Double Attack, Interception, Intermediate Move, Overloading, Passed Pawn, Pawns Breakthrough, Pin, Pursuit (perpetual attack), Space Clearance, Trapping a piece, and X-ray Attack. Often tactics of more than one type are conjoined in a combination.
The Terrapin attack is a cryptographic attack on the commonly used SSH protocol that is used for secure command-and-control throughout the Internet. The Terrapin attack can reduce the security of SSH by using a downgrade attack via man-in-the-middle interception. The attack works by prefix truncation; the injection and deletion of messages during feature negotiation, manipulating sequence numbers in a way that causes other messages to be ignored without an error being detected by either client or server. According to the attack's discoverers, the majority of SSH implementations were vulnerable at the time of the discovery of the attack (2023). As of January 3, 2024, an estimated 11 million publicly accessible SSH servers are still vulnerable. However, the risk is mitigated by the requirement to intercept a genuine SSH session, and that the attack can only delete messages at the start of a negotiation, fortuitously resulting mostly in failed connections. Additionally the attack requires the use of either ChaCha20-Poly1305 or a CBC cipher in combination with Encrypt-then-MAC modes of encryption. The SSH developers have stated that the major impact of the attack is the capability to degrade the keystroke timing obfuscation features of SSH. The designers of SSH have implemented a fix for the Terrapin attack, but the fix is only fully effective when both client and server implementations have been upgraded to support it. The researchers who discovered the attack have also created a vulnerability scanner to determine whether an SSH server or client is vulnerable. The attack has been given the CVE ID CVE-2023-48795. In addition to the main attack, two other vulnerabilities were found in AsyncSSH, and assigned the CVE IDs CVE-2023-46445 and CVE-2023-46446.
In computer science, a cyberattack (or cyber attack) is an attack targeted at computer systems. It occurs when there is an unauthorized action against computer infrastructure that compromises the confidentiality, integrity, or availability of its content. The rising dependence on increasingly complex and interconnected computer systems in most domains of life is the main factor that causes vulnerability to cyberattacks, since virtually all computer systems have bugs that can be exploited by attackers. Although it is impossible or impractical to create a perfectly secure system, there are many defense mechanisms that can make a system more difficult to attack, making information security a field of rapidly increasing importance in the world today. Perpetrators of a cyberattack can be criminals, hacktivists, or states. They attempt to find weaknesses in a system, exploit them and create malware to carry out their goals, and deliver it to the targeted system. Once installed, the malware can have a variety of effects depending on its purpose. Detection of cyberattacks is often absent or delayed, especially when the malware attempts to spy on the system while remaining undiscovered. If it is discovered, the targeted organization may attempt to collect evidence about the attack, remove malware from its systems, and close the vulnerability that enabled the attack. Cyberattacks can cause a variety of harms to targeted individuals, organizations, and governments, including significant financial losses and identity theft. They are usually illegal both as a method of crime and warfare, although correctly attributing the attack is difficult and perpetrators are rarely prosecuted.
Before the 1921 destruction of Tulsa’s Greenwood District, Black residents had created a remarkable center of business and community life. The district included stores, professional offices, entertainment venues and homes owned by Black citizens. Understanding Greenwood means learning what was built—not only what was burned.
MORE →Joe Louis.
