1
No More Deceptive Download Buttons
Posted by Lucas Ballard, Safe Browsing Team In November , we announced that Safe Browsing would protect you from social engineering attack...
Google Online Security Blog
- Popular posts
- 26
- Total points
- 6,791
- HN comments
- 3,300
- Rank
- #153 company
Visit googleonlinesecurity.blogspot.com → On Hacker News Aug 2011 – Feb 2016
Security & Privacy 26Web & Frontend 14Society, Policy & Culture 3Software Engineering 2Networking & Internet 2Tools & Productivity 1
2
Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”
Posted by Vinay Shet, Product Manager, reCAPTCHA reCAPTCHA protects the websites you love from spam and abuse. So, when you go online—say...
3
Glibc getaddrinfo stack-based buffer overflow
Posted by Fermin J. Serna, Staff Security Engineer and Kevin Stadmeyer, Technical Program Manager Have you ever been deep in the mines of ...
4
Google pulling China CNNIC CA from its products
Posted by Adam Langley, Security Engineer On Friday, March 20th, we became aware of unauthorized digital certificates for several Google ...
5
This POODLE bites: exploiting the SSL 3.0 fallback
Today we are publishing details of a vulnerability in the design of SSL version 3.0. This vulnerability allows the plaintext of secure conn...
6
Announcing Project Zero
Posted by Chris Evans, Researcher Herder Security is a top priority for Google. We've invested a lot in making our products secure, incl...
7
Google's Street View computer vision can beat reCAPTCHA with 99% accuracy
Posted by Vinay Shet, Product Manager, reCAPTCHA Have you ever wondered how Google Maps knows the exact location of your neighborhood cof...
8
Maintaining digital certificate security
Posted by Adam Langley, Security Engineer On Wednesday, July 2, we became aware of unauthorized digital certificates for several Google ...
9
FFmpeg and a thousand fixes
Posted by Mateusz Jurczyk and Gynvael Coldwind, Information Security Engineers At Google, security is a top priority - not only for our ow...
10
Sustaining Digital Certificate Security
Posted by Ryan Sleevi, Software Engineer This post updates our previous notification of a misissued certificate for google.com Followin...
11
Gmail security warnings for suspected state-sponsored attacks
Posted by Eric Grosse, VP Security Engineering We are constantly on the lookout for malicious activity on our systems, in particular attem...
12
Strengthening 2-Step Verification with Security Key
2-Step Verification offers a strong extra layer of protection for Google Accounts. Once enabled, you’re asked for a verification code from...
13
HTTPS as a ranking signal
Cross-posted from the Webmaster Central Blog Security is a top priority for Google. We invest a lot in making sure that our services us...
14
Further improving digital certificate security
Posted by Adam Langley, Security Engineer Late on December 3rd, we became aware of unauthorized digital certificates for several Google do...
15
Enhancing digital certificate security (Fake *.Google.com cert issued)
Posted by Adam Langley, Software Engineer Late on December 24, Chrome detected and blocked an unauthorized digital certificate for the "*....
16
Comparing how security experts and non-experts stay safe online
Posted by Iulia Ion, Software Engineer - Rob Reeder, Research Scientist - Sunny Consolvo, User Experience Researcher Today, you can find...
17
An update on attempted man-in-the-middle attacks
Posted by Heather Adkins, Information Security Manager Today we received reports of attempted SSL man-in-the-middle (MITM) attacks again...
18
Gradually sunsetting SHA-1
Cross-posted on the Chromium Blog The SHA-1 cryptographic hash algorithm has been known to be considerably weaker than it was designed t...
19
Disabling SSLv3 and RC4
Posted by Adam Langley, Security Engineer As the previously announced transition to SHA-256 certificates is nearing completion, we are p...
20
An Update to End-To-End
Posted by Stephan Somogyi, Product Manager, Security and Privacy In June, we announced and launched End-To-End , a tool for those who need...
21
Improved Digital Certificate Security
Posted by Stephan Somogyi, Security & Privacy PM, and Adam Eijdenberg, Certificate Transparency PM On September 14, around 19:20 GMT, Syma...
22
Disclosure timeline for vulnerabilities under active attack
Posted by Chris Evans and Drew Hintz, Security Engineers We recently discovered that attackers are actively targeting a previously unknown...
23
Google, the Wassenaar arrangement, and vulnerability research
Posted by Neil Martin, Export Compliance Counsel, Google Legal Tim Willis, Hacker Philanthropist, Chrome Security Team Cross-posted on...
24
Speeding up and strengthening HTTPS connections for Chrome on Android
Posted by Elie Bursztein, Anti-Abuse Research Lead Earlier this year, we deployed a new TLS cipher suite in Chrome that operates three tim...
25
Maintaining Digital Certificate Security
Posted by Adam Langley, Security Engineer On Friday, March 20th, we became aware of unauthorized digital certificates for several Google ...
26
Going Beyond Vulnerability Rewards
Posted by Michal Zalewski, Google Security Team We all benefit from the amazing volunteer work done by the open source community. That’s w...