# spoofing Published articles for spoofing. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## The Machine With Many Faces: Post-Exploitation Identity Misuse in SPIFFE/SPIRE DevFeed: [The Machine With Many Faces: Post-Exploitation Identity Misuse in SPIFFE/SPIRE]() Original publisher: [Read original article]() Author: Eviatar Garzi Published: 2026-09-10T10:00:43Z Content type: article Language: en Sources: [Unit 42]() Topics: [Kubernetes]() Tags: [api](), [containers](), [cryptographic](), [identity](), [json](), [kubernetes](), [linux](), [malware](), [node](), [open-source](), [research](), [secrets](), [spiffe](), [spire](), [spoof](), [spoofing](), [threat-research](), [tool]() ### AI overview Research on a post-exploitation technique in which root access to a Kubernetes node can let an attacker spoof cgroup metadata used by SPIRE workload attestation, impersonate co-located workloads, and obtain SVIDs. ### Source excerpt Learn how root access on a compromised K8s node allows attackers to utilize SPIFFE/SPIRE metadata to spoof and harvest co-located workload identities. The post The Machine With Many Faces: Post-Exploitation Identity Misuse in SPIFFE/SPIRE appeared first on Unit 42. ## 10+ best practices to improve your email deliverability DevFeed: [10+ best practices to improve your email deliverability]() Original publisher: [Read original article]() Author: Jesse Sumrak Published: 2026-09-09T00:00:00Z Content type: tutorial Language: en Sources: [Twilio Blog]() Topics: [email](), [SendGrid](), [API]() Tags: [best-practices](), [deliverability](), [domain](), [email](), [industry-insights](), [marketing](), [sendgrid](), [spam](), [spoofing](), [subscriber]() ### AI overview This tutorial explains email deliverability and presents more than ten practices for improving inbox placement, including domain authentication, double opt-in, non-spammy subject lines, list cleaning, and avoiding spam traps. It also distinguishes delivery from deliverability and discusses sender reputation and subscriber engagement. ### Source excerpt Email deliverability determines whether your messages reach inboxes or spam folders. Follow these 10+ best practices to improve your deliverability rates. ## The day after the zero-days DevFeed: [The day after the zero-days]() Original publisher: [Read original article]() Author: Niels Provos Published: 2026-08-28T04:42:57Z Content type: opinion Language: en Sources: [APNIC Blog]() Topics: [Vulnerabilities](), [Orchestration](), [Security](), [Artificial Intelligence](), [Code](), [spoofing](), [anthropic](), [Open Source](), [Frontier Model]() Tags: [agent](), [ai](), [anthropic](), [guest-post](), [model](), [open-source](), [security](), [spoofing](), [tech-matters](), [vulnerabilities](), [vulnerability](), [workflow]() ### AI overview The article reflects on three decades of vulnerability research, contrasting a historically manual TCP source-routing spoofing discovery with an AI-assisted discovery of a long-standing OpenBSD kernel bug. It argues that vulnerability discovery is primarily an orchestration problem, demonstrates the capability with the open-source IronCurtain framework and several language models, and warns that defenders and attackers should assume capability parity. ### Source excerpt Guest Post: Patching faster cannot keep up with AI-driven discovery. Leverage structural invariants to make bug classes irrelevant. ## Time: The cornerstone of digital sovereignty and independence DevFeed: [Time: The cornerstone of digital sovereignty and independence]() Original publisher: [Read original article]() Author: Luca Cicchelli Published: 2026-08-18T01:45:10Z Content type: article Language: en Sources: [APNIC Blog]() Topics: [digital sovereignty](), [systems](), [1.1.1.1](), [spoofing](), [Cybersecurity](), [5G](), [Cloud](), [Artificial Intelligence]() Tags: [5g](), [ai](), [cloud](), [cybersecurity](), [digital-sovereignty](), [energy](), [gnss](), [guest-post](), [ixps](), [operational](), [spoofing](), [systems](), [tech-matters](), [time]() ### AI overview Time is presented as a foundational requirement for digital sovereignty and independent operation. The article explains how synchronized time supports telecommunications, finance, energy, cloud and AI systems, and transport, while dependence on GNSS introduces risks from interference, jamming, and spoofing. ### Source excerpt Guest Post: Though often overlooked, time underpins telecommunications, finance, energy, cloud, AI, and transport systems. As dependence on GNSS increases, organizations need resilient, traceable time sources to strengthen cybersecurity, improve operational continuity, and support digital sovereignty. ## Kimwolf v7: An Evolution of the Kimwolf Botnet DevFeed: [Kimwolf v7: An Evolution of the Kimwolf Botnet]() Original publisher: [Read original article]() Author: Asher Davila, Chris Navarrete and Doel Santos Published: 2026-08-11T10:00:16Z Content type: article Language: en Sources: [Unit 42]() Topics: [Kimwolf v7](), [Android](), [DDoS](), [Internet of things](), [C2](), [Ethereum Name Service (ENS)](), [Malware](), [Cybercrime](), [Ethereum](), [Blockchain](), [Routing (disambiguation)](), [Threat Hunting & Intel]() Tags: [android](), [android-apk](), [blockchain](), [c2](), [ddos](), [devices](), [ethereum](), [http](), [iot-botnets](), [kimwolf-v7](), [linux](), [malware](), [network](), [networks](), [resilience](), [routing](), [rpc](), [spoofing](), [threat-research]() ### AI overview Kimwolf v7 is an Android and IoT botnet variant that adds HTTP/2-based DDoS flooding with browser fingerprinting, Ethereum Name Service resolution for C2 addresses, and Tor-backed routing to improve infrastructure resilience. The article also describes its targeting of Android TV devices and exploitation of unauthenticated ADB instances. ### Source excerpt Discover how Kimwolf v7 targets Android IoT devices with HTTP/2 DDoS fingerprinting, Ethereum ENS C2 resolution and Tor backup routing. The post Kimwolf v7: An Evolution of the Kimwolf Botnet appeared first on Unit 42. ## Inside an AI coal mine security camera network powered by plaintext passwords DevFeed: [Inside an AI coal mine security camera network powered by plaintext passwords]() Original publisher: [Read original article]() Author: Eaton Published: 2026-07-08T17:07:38Z Content type: opinion Language: en Sources: [Eaton Works Feed]() Topics: [Security](), [Vulnerabilities](), [API](), [passwords](), [spoofing](), [JavaScript]() Tags: [api](), [breach](), [browser](), [chrome](), [javascript](), [passwords](), [security](), [spoofing](), [vulnerabilities]() ### AI overview This security write-up examines Coal India's Project DigiCoal camera-monitoring platform, developed by DeepSight AI Labs and Accenture. It reports that the RPI Dashboard exposed user accounts and plaintext, weak, duplicated passwords through an unauthenticated API. The article also describes bypassing client-side access controls to view camera alerts and feeds across seven coal mines. ### Source excerpt Coal India's intelligent CCTV platform developed by DeepSight AI Labs and Accenture had plaintext passwords and no API authentication. ## What's New in Android Security and Privacy in 2026 DevFeed: [What's New in Android Security and Privacy in 2026]() Original publisher: [Read original article]() Author: Eugene Liderman Published: 2026-05-12T17:00:00Z Content type: article Language: en Sources: [Security]() Topics: [Android](), [Android Security](), [Security](), [spoofing](), [Social engineering](), [threat detection](), [On-device AI](), [Chrome]() Tags: [ai](), [android](), [android-security](), [fraud](), [none](), [on-device-ai](), [security](), [social-engineering](), [spoofing](), [threat-detection]() ### AI overview The article describes planned Android security and privacy enhancements for 2026, including verified financial calls to combat spoofed banking scams. Android can verify incoming calls through participating financial apps and automatically end calls that are not genuine. It also highlights expanded Live Threat Detection, which uses on-device AI to analyze app behavior and warn about suspicious activity. ### Source excerpt New Android security and privacy features ## A cunning predator: How Silver Fox preys on Japanese firms this tax season DevFeed: [A cunning predator: How Silver Fox preys on Japanese firms this tax season]() Original publisher: [Read original article]() Author: Dominik Breitenbacher Takahiro Sajima Published: 2026-03-27T07:00:00Z Content type: article Language: en Sources: [WeLiveSecurity]() Topics: [Cybersecurity](), [Threat Research](), [Social engineering](), [spoofing](), [Business Security]() Tags: [awareness](), [business](), [business-security](), [cybersecurity](), [finance](), [government](), [japan](), [phishing](), [spoofing]() ### AI overview Silver Fox is conducting a targeted spearphishing campaign against Japanese manufacturers and other businesses during tax-filing and organizational-change season. The attackers use convincing tax- and HR-themed emails, links, and attachments to exploit expected business communications and increase the likelihood of compromise. ### Source excerpt Silver Fox is back in Japan, spoofing tax and HR emails timed to the one season when no one thinks twice about opening them ## Taxing times: Top IRS scams to look out for in 2026 DevFeed: [Taxing times: Top IRS scams to look out for in 2026]() Original publisher: [Read original article]() Author: Phil Muncaster Published: 2026-02-10T10:00:00Z Content type: article Language: en Sources: [WeLiveSecurity]() Topics: [spoofing](), [Malware](), [Artificial Intelligence](), [Authentication]() Tags: [ai](), [authentication](), [fraud](), [malware](), [phishing](), [scams](), [spoofing](), [tax](), [tax-return]() ### AI overview The article outlines common IRS and tax-return scams, including impersonation through phone, email, text, and social media; demands for urgent payment; requests for personal or financial information; fraudulent refund claims; and attempts to deliver malware. It also warns that AI-assisted scams can make deceptive messages and calls harder to recognize. ### Source excerpt It's time to file your tax return. And cybercriminals are lurking to make an already stressful period even more edgy. ## Drowning in spam or scam emails? Here's probably why DevFeed: [Drowning in spam or scam emails? Here's probably why]() Original publisher: [Read original article]() Author: Phil Muncaster Published: 2026-01-27T10:00:00Z Content type: article Language: en Sources: [WeLiveSecurity]() Topics: [Security](), [Cybercrime](), [Malware](), [spoofing](), [obfuscation](), [pii](), [data](), [Internet](), [Netflix]() Tags: [cybercrime](), [data](), [digital-security](), [internet](), [malware](), [obfuscation](), [phishing](), [pii](), [scam](), [security](), [spoofing]() ### AI overview This article explains why inboxes can suddenly be flooded with spam and scam emails. It identifies data breaches, leaked personal information, updated phishing kits, spam-filter bypasses, and targeted campaigns as possible causes, and describes risks including credential theft, financial fraud, and malware installation. ### Source excerpt Has your inbox recently been deluged with unwanted and even outright malicious messages? Here are 10 possible reasons - and how to stem the tide. ## Postfix on Kubernetes: A Step-by-Step Email Guide DevFeed: [Postfix on Kubernetes: A Step-by-Step Email Guide]() Original publisher: [Read original article]() Author: RisingStack Engineering Published: 2025-09-25T04:12:00Z Content type: tutorial Language: en Sources: [RisingStack]() Topics: [Kubernetes](), [email](), [Authorization]() Tags: [authentication](), [email](), [guide](), [kubernetes](), [postfix](), [spoofing]() ### AI overview A step-by-step guide to running a Postfix email server on Kubernetes. It explains the infrastructure and email-authentication requirements, including a fixed outbound IP address, a domain, PTR and SPF records, and DKIM and DMARC configuration. ### Source excerpt You are in the process of putting together your application. While designing your authorization solution, you realize you will need to send emails to potential clients.Using a third-party service (like SendGrid or Mailgun) to cover your needs for now looks pretty attractive. After all, you don't have any users yet, they offer free tiers, and [...] The post Postfix on Kubernetes: A Step-by-Step Email Guide appeared first on RisingStack Engineering. ## Types of VoIP Hacking and Countermeasures DevFeed: [Types of VoIP Hacking and Countermeasures]() Original publisher: [Read original article]() Author: Georgios Nanos Published: 2025-08-15T02:31:46Z Content type: tutorial Language: en Sources: [Baeldung - CS]() Topics: [Security Attacks](), [Security](), [Protocol (disambiguation)](), [Networks](), [Authentication](), [Internet]() Tags: [attacks](), [authentication](), [encryption](), [ip](), [monitoring](), [protocol](), [rtp](), [security](), [security-attacks](), [security-security-attacks](), [spoofing](), [voice]() ### AI overview This tutorial explains how Voice over Internet Protocol (VoIP) carries digitized voice as data packets and examines common attacks against VoIP systems, including eavesdropping and SIP registration hijacking. It also discusses risks such as packet interception, identity spoofing, service disruption, and exposure of unencrypted signaling and audio traffic, while outlining the need for encryption, authentication, and monitoring. ### Source excerpt Learn about security attacks and measures regarding the Voice-over-IP technology. The post Types of VoIP Hacking and Countermeasures first appeared on Baeldung on Computer Science. Related Stories Introduction to Differential Privacy in Deep Learning Models What Is CSRF? Network Time Protocol: Security and Authentication ## IBGP Source Interface Selection Still Requires Configuration DevFeed: [IBGP Source Interface Selection Still Requires Configuration]() Original publisher: [Read original article]() Published: 2024-12-10T07:32:00Z Content type: article Language: en Sources: [ipSpace.net blog]() Topics: [BGP](), [networking](), [configuration]() Tags: [bgp](), [configuration](), [ip](), [networking](), [spoofing](), [tcp]() ### AI overview The article explains that FRRouting does not automatically select the correct source interface for IBGP sessions. Because BGP runs over TCP and IBGP commonly uses loopback addresses, the router must be configured to send TCP SYN packets with the appropriate loopback source address. ### Source excerpt A fellow networking engineer recently remarked, "FRRouting automatically selects the correct [IBGP] source interface even when not configured explicitly." TL&DR: No, it does not. You were just lucky. Basics first1. BGP runs over TCP sessions. One of the first things a router does when establishing a BGP session with a configured neighbor is to open a TCP session with the configured neighbor's IP address. Read more ... ## Homographic Spoofing: a new Ruby toolkit DevFeed: [Homographic Spoofing: a new Ruby toolkit]() Original publisher: [Read original article]() Author: Jacopo Beschi Published: 2024-06-25T17:00:00Z Content type: tutorial Language: en Sources: [37signals Dev]() Topics: [spoofing](), [Ruby](), [Security](), [Open Source](), [email](), [domain](), [ASCII]() Tags: [ascii](), [domain](), [email](), [open-source](), [phishing](), [ruby](), [security](), [spoofing]() ### AI overview This article explains homograph attacks, in which visually similar Unicode characters are used to spoof identities in domains or email. It describes browser and email-client protections using Punycode and UTS #39, then introduces an open-source Ruby gem implementing those guidelines for IDNs and email addresses. ### Source excerpt What is a homograph attack and how to protect from it with a new gem. ## How to install dnscrypt-proxy on Debian Linux 11/12 DevFeed: [How to install dnscrypt-proxy on Debian Linux 11/12]() Original publisher: [Read original article]() Author: Vivek Gite Published: 2024-05-13T12:23:14Z Content type: tutorial Language: en Sources: [nixCraft: Linux Tips, Hacks, Tutorials, And Ideas In Blog Format (RSS/FEED)]() Topics: [Debian](), [Linux](), [Security](), [spoofing](), [free software](), [Open Source](), [systemd](), [Virtual Private Network]() Tags: [configuration](), [debian-linux](), [dns](), [dnscrypt-proxy](), [how-to](), [install](), [intermediate](), [ipv4](), [ipv6](), [linux](), [open-source](), [security](), [spoofing]() ### AI overview A tutorial for installing and configuring dnscrypt-proxy on Debian Linux 11 and 12. It covers package installation, systemd service management, socket binding for IPv4 and IPv6 addresses, and verification of the DNS service. ### Source excerpt DNSCrypt-proxy is an open-source and free software designed to encrypt DNS traffic, thus protecting it from eavesdropping and manipulation. This is also useful to evade DNS censorship when DNSCrypt-proxy is configured correctly with Wireguard or OpenVPN. Further, DNSCrypt-proxy can configured to block malware, trackers, and internet ads. In Debian 11 and 12, using DNSCrypt-proxy can enhance privacy and security by preventing DNS spoofing attacks, DNS hijacking, and surveillance of DNS traffic. It ensures that DNS queries are encrypted, authenticated, and secure, thereby safeguarding users' browsing activities and sensitive information. Let us see how to install dnscrypt-proxy on Debian Linux 11 and 12. Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit The post How to install dnscrypt-proxy on Debian Linux 11/12 appeared first on nixCraft. ## Port Scan with Spoofed IP Addresses DevFeed: [Port Scan with Spoofed IP Addresses]() Original publisher: [Read original article]() Published: 2024-03-18T23:00:00Z Content type: opinion Language: en Sources: [Dennis Felsing]() Topics: [spoofing](), [Cybersecurity](), [networking](), [incident]() Tags: [cybersecurity](), [game-servers](), [incident](), [network](), [networking](), [spoofing]() ### AI overview The article describes how spoofed-source port scans can cause abuse reports to be misattributed to a victim's VPS, potentially leading a hoster to suspend or terminate the server. It presents the scenario in a satirical, adversarial tone and discusses defensive traffic-blocking measures. ### Source excerpt Or how to make naïve hosters shut down your victim's server. Do you want to bring down your victim's game servers? Do they host their game servers on cheap VPSes at hosters who are not that experienced with networking? Is running an actual DoS against the server too expensive and illegal for you? Just grab a server for yourself from a questionable hoster with IP address spoofing allowed on their network. Next run a port scan using nmap (man page) with a spoofed source address (-S or -D for multiple decoys) using your victim's IP address(es). As the target of the port scan choose a university with a cybersecurity department that likes to send security incident reports to abuse mail addresses. To the target university of the port scan it will look like the scan came from your victim, since you are spoofing their IP address, so they will send a serious sounding email to the victim's hoster: As a consequence your victim's VPS will most likely be shut down for a few hours or even days. To prevent this your victim will try to block all of their incoming and outgoing TCP traffic on their VPS, and also block the reporting university's IP range entirely: $ iptables -L Chain INPUT (policy ACCEPT) target prot opt source destination DROP all -- 147.251.0.0/16 anywhere DROP tcp -- anywhere anywhere tcp ctstate NEW multiport dports !27685,6546,ssh Chain OUTPUT (policy ACCEPT) target prot opt source destination DROP all -- anywhere 147.251.0.0/16 And yet you can rerun your port scan against the university's network every day, which will trigger automatic abuse mails to the victim's hoster, who will still trust these abuse mails more than the victim, since the hoster is unlikely to be able to monitor the network traffic of the VPS to check if those packets actually originated there. At some point the hoster will be so annoyed that they simply terminate the VPS and throw out the customer, victory! Congratulations, you have brought down some small-fish game servers in the DDNet commu ## Reflecting on Threats: The Frame DevFeed: [Reflecting on Threats: The Frame]() Original publisher: [Read original article]() Author: Adam Published: 2023-04-10T00:00:00Z Content type: opinion Language: en Sources: [Shostack & Friends Blog]() Topics: [systems](), [standard](), [passwords](), [spoofing](), [bug](), [Pull Request](), [YAML]() Tags: [bug](), [code](), [password](), [spoofing](), [standard](), [yaml]() ### AI overview The author reflects on how the framing and subtitle of the Threats book shaped its content. The article discusses the value of shared engineering terminology and argues that common understandings, standards, and available tools can support more consistent threat assessment and evaluation of software flaws. ### Source excerpt Reflecting on the framing of the Threats book ## Threats Book is Complete DevFeed: [Threats Book is Complete]() Original publisher: [Read original article]() Author: Adam Published: 2023-01-17T00:00:00Z Content type: opinion Language: en Sources: [Shostack & Friends Blog]() Topics: [Cybersecurity](), [Security](), [Parser](), [spoofing]() Tags: [cybersecurity](), [parsing](), [security](), [spoofing]() ### AI overview The author announces that Threats Book is complete and explains its serious focus on helping readers understand security threats. The book covers STRIDE, predictability and randomness, parsing and corruption, and kill chains, including a redefinition of the "E" in STRIDE as Expansion of Authority. ### Source excerpt The serious side of the book ## Threats: The Table of Contents DevFeed: [Threats: The Table of Contents]() Original publisher: [Read original article]() Author: Adam Published: 2023-01-16T00:00:00Z Content type: article Language: en Sources: [Shostack & Friends Blog]() Topics: [spoofing]() Tags: [books](), [contents](), [guide](), [spoofing](), [table]() ### AI overview The article presents the table of contents for Threats: What Every Engineer Should Learn From Star Wars. It explains that the book covers threats such as spoofing and authenticity, with each chapter organized around the threat, mechanisms, scenarios or technologies, and defenses. The book is announced as available for preorder and sale on January 25th. ### Source excerpt Like the Force, each threat has a light side, and a dark side. ## GPT-3 DevFeed: [GPT-3]() Original publisher: [Read original article]() Author: Adam Published: 2022-12-09T00:00:00Z Content type: article Language: en Sources: [Shostack & Friends Blog]() Topics: [ChatGPT](), [Library](), [spoofing](), [Back end](), [Kubernetes]() Tags: [backend](), [chatgpt](), [client](), [gpt](), [gpt-3](), [kubernetes](), [libraries](), [library](), [service](), [spoofing]() ### AI overview The article reports that GPT-3 was used to generate sample STRIDE threat libraries for backend-to-backend services in Kubernetes and client-side threats. It notes that the output may be imperfect and requires human judgment. ### Source excerpt Text captured from GPT-3 ## The Threats book is complete DevFeed: [The Threats book is complete]() Original publisher: [Read original article]() Author: Adam Published: 2022-12-08T00:00:00Z Content type: article Language: en Sources: [Shostack & Friends Blog]() Topics: [Security](), [spoofing](), [Authorization](), [Parsing](), [Computing]() Tags: [book](), [complete](), [parsing](), [permissions](), [security](), [spoofing]() ### AI overview The author announces that the Threats book is complete and describes its goal of making security and threat concepts accessible to engineers who are not security specialists. The article discusses topics including privilege, permissions, safe parsing, and STRIDE-related spoofing examples. ### Source excerpt Threats is almost in bookstores ## Update on DoS Attacks against our Online Game DevFeed: [Update on DoS Attacks against our Online Game]() Original publisher: [Read original article]() Published: 2022-05-15T22:00:00Z Content type: article Language: en Sources: [Dennis Felsing]() Topics: [spoofing](), [servers](), [Open Source](), [Protocol (disambiguation)](), [client]() Tags: [attacks](), [https](), [ipv4](), [ipv6](), [open-source](), [server](), [servers](), [spoofing](), [udp]() ### AI overview This update describes ongoing DoS attacks against the open-source DDraceNetwork online game. It explains how spoofed UDP connection attempts overload single-threaded game servers and outlines an HTTPS-based IP whitelist, along with limitations involving capacity, IPv4, IPv6, and ISP address translation. ### Source excerpt In my previous post 8 months ago I described how our open source online game DDraceNetwork has been suffering under DoS attacks for about 8 years, basically since its inception. Recently the attacks have gotten much worse, forcing us to work on further approaches. Since many players made suggestions recently, I'm writing this blog post to summarize what we are attempting and to ask for help again. These traffic graphs are from two of the servers we are running, note the logarithmic x-axis. Each spike represents an incoming DoS attack, as you can see some of them last for nearly a day. Recently the attacks have been relatively weak in terms of incoming bandwidth, using spoofed IP addresses imitating our UDP-based connection process. At first the CPU gets overloaded since the server suddenly has to try and handle hundreds of thousands of connection attempts per second. Since our game servers are mostly running on cheap VPSes and each game server runs single-threaded, it is quite easy to overload a system in this manner. HTTPS-based Whitelist To prevent spoofing we collect all players' IP addresses and whitelist those. Since we also develop the game client, we can modify the client to connect to a server via HTTPs for this whitelisting. The iptables rules and ipset setup on the game servers for this whitelist look something like this: ipset create official iphash ipset create whitelist-ip iphash iptables -N serverinfo iptables -A serverinfo -m hashlimit --hashlimit-above 40/s --hashlimit-mode dstport --hashlimit-name si_dstport -j DROP iptables -N game iptables -A game -m set --match-set official src -j ACCEPT iptables -A game -m set --match-set whitelist-ip src -m u32 --u32 "38=0x67696533" -j serverinfo iptables -A game -m set --match-set whitelist-ip src -m u32 --u32 "38=0x66737464" -j serverinfo iptables -A game -m set --match-set whitelist-ip src -j ACCEPT # Still allow non-whitelisted players when there is no attack iptables -A game -m limit --limit 10000 -j ACCEP ## GNSS Jamming and Spoofing, aka Galileo's Authentication Algorithm Part 3 DevFeed: [GNSS Jamming and Spoofing, aka Galileo's Authentication Algorithm Part 3]() Original publisher: [Read original article]() Published: 2020-09-13T09:49:53Z Content type: tutorial Language: en Sources: [Bert Hubert's writings]() Topics: [spoofing](), [Authentication](), [Protocol (disambiguation)](), [navigation](), [Resilience]() Tags: [aviation](), [gnss](), [gps](), [navigation](), [protocol](), [resilience](), [spoofing]() ### AI overview Part 3 of a series on OSNMA, the proposed Galileo Navigation Message Authentication protocol, explaining GNSS jamming and spoofing, the threat model, and related detection and mitigation concerns. ### Source excerpt Welcome to part 3 of my series on OSNMA, the proposed Galileo Navigation Message Authentication protocol. This part can be read independently from part 1 and part 2, but it might be useful to read the introduction to part 1. This post attempts to explain GPS (GNSS) jamming and spoofing, so it might be a useful read even if you don't care about Galileo or its authentication. As usual, I've been helped tremendously by Daniel Estévez & many other researchers and Galileo professionals, and again I am very greatful for all the links, corrections, suggestions and knowledge you provided. ## Galileo's Proposed Authentication Algorithm: Part 1 DevFeed: [Galileo's Proposed Authentication Algorithm: Part 1]() Original publisher: [Read original article]() Published: 2020-08-13T18:50:09Z Content type: article Language: en Sources: [Bert Hubert's writings]() Topics: [Cryptography](), [Security, Privacy and Abuse Prevention](), [integrity](), [Provable security](), [Network]() Tags: [cryptography](), [gnss](), [receiver](), [rf](), [series](), [spoofing]() ### AI overview This first part of a series explains Galileo's proposed Open Service Navigation Message Authentication (OSNMA), focusing on the TESLA cryptographic scheme and its role in improving trust in GNSS messages. It notes that message authentication cannot by itself prevent sophisticated RF spoofing, but is an important step toward detecting unauthenticated or altered data. ### Source excerpt Position, velocity and time (PVT) information can be a 'nice to have', but in other circumstances knowing place and time has legal or military importance as well. Heavy vehicles for example are typically outfitted with tachographs that track driver speed and/or location. This has importance for rest regulations, but also to check if loads are actually from where they say they are. Our Global Navigation Satellite Systems so far are broadcasting unauthenticated data, at least to civilian users. [Next page]()