Record renewables auction supports 7,000 jobs and £3bn investment - GOV.UK

Two new reports are a must-read of energy-starved governments

Cryptocurrency trading bots and exchange applications may remain exposed to the eMudhra certificate security flaw despite emergency fixes from major technology companies, according to blockchain security company CertiK. By Tuesday, tech giants including Google, Apple and Microsoft had blocked eight vulnerable certificates issued by India’s eMudhra, but the fixes may not protect crypto applications using separate security systems, CertiK’s senior director of digital assets security, Peiyu Wang, told Cointelegraph. “Major browser blocks substantially reduce the risk for clients that receive and enforce them,” Wang said. “Some applications outside the browser ecosystem do not enforce Certificate Transparency or receive the same revocation protections.”Wang stressed that crypto services are not inherently more susceptible to the flaw than other industries, but attackers could exploit compromised certificates to impersonate the HTTPS connections used by exchanges, wallet interfaces and APIs. Attackers could specifically impersonate crypto services and replace deposit addresses or trick users into approving malicious transactions, Wang said.

After more than $200 million dollars worth of crypto was stolen in recent months from tampered Ledgers, and Coldcards where the seed generated wasn’t truly random, faith in hardware wallets has been shaken to the core. These Bitcoin and crypto holders did everything right. They bought the products from official sources, correctly stored their seed phrases and they trusted in the phrase “not your keys, not your coins”, but they lost out any way. The thefts suggest that even the most diligent crypto holder using a hardware wallet faces risks beyond their control. With the number of physical attacks on crypto holders rising — there’s been a $5 wrench attack in France every 2.5 days this year — the drawbacks of storing crypto on a hardware wallet are becoming clearer. And that’s even before you consider how many crypto owners have lost wallets and seed phrases over the years — “boating accidents” for tax purposes excluded. There are plenty of drawbacks with all of the alternative methods of holding crypto however, so spreading your stack across different addresses and via different methods will at least minimize the damage if any one method is compromised.