31
Chrome's Plan to Distrust Symantec Certificates
Posted by Devon O’Brien, Ryan Sleevi, Andrew Whalley, Chrome Security This post is a broader announcement of plans already finalized on t...
Most cited
Posts that commenters keep linking to, ranked by how many different people have cited them in Hacker News comments. 124 posts.
32
Meet Algo, the VPN that works
I think you’ll agree when I say: there’s no VPN option on the market designed with equal emphasis on security and ease of use. That changes now. Today we’re introducing Algo, a self-hosted personal VPN server designed for ease of deployment and security. Algo automatically deploys an on-demand VPN service in the cloud…
33
Over the Air: Exploiting Broadcom’s Wi-Fi Stack
Posted by Gal Beniamini, Project ZeroIt’s a well understood fact that platform security is ...
34
Phishing with Unicode Domains
Vulnerability in Chrome, Firefox, and Opera makes users susceptible to phishing with Unicode domains
35
Changes to Trusted Certificate Authorities in Android Nougat
News and insights on the Android platform, developer tools, and events.
36
5 Problems with National ID Cards
The terrorist attacks of September 11have revived proposals for a national identity card system as a way to verify the identity of airline passengers and prevent terrorists from entering the country. For example, the Chairman and CEO of Oracle Corp., Larry Ellison, recently called for the creation of a national ID…
37
Purism Librem Laptops Completely Disable Intel’s Management Engine
Purism makes premium phones, laptops, mini PCs and servers running free software on PureOS. Purism products respect people's privacy and freedom while protecting their security.
38
Suicide Linux
You know how sometimes if you mistype a filename in Bash, it corrects your spelling and runs the command anyway?* Such as when changing directory, or opening a file. I have an idea: Suicide Linux. Any time - any time - you type any remotely incorrect command, the interpreter cr...
39
Why TLS 1.3 isn't in browsers yet
Upgrading a security protocol in an ecosystem as complex as the Internet is difficult. You need to update clients and servers and make sure everything in between continues to work correctly. The Internet is in the middle of such an upgrade right now.
40
Formal verification of the WireGuard protocol
WireGuard has undergone all sorts of formal verification, covering aspects of the cryptography, protocol, and implementation. Below details the various efforts.
41
42
Taking control of all .io domains with a targeted registration
A Hacker's Blog of Unintended Use and Insomnia.
43
Get your loved ones off Facebook
I originally wrote this for my friends and family in 2015, to explain why the latest Facebook privacy policy is really harmful. It’s since been read b
44
Obama Expands Surveillance Powers on His Way Out
With mere days left before President-elect Donald Trump takes the White House, President Barack Obama’s administration just finalized rules to make it easier for the nation’s intelligence agencies to share unfiltered information about innocent people. New rules issued by the Obama administration...
45
How Chrome OS, Termux, YubiKey and Duo Mobile make for great usable security
How Chrome OS, Termux, YubiKey & Duo Mobile make for great usable security. A travel Chromebook for modern development, online and offline.
46
AdNauseam Banned from the Google Web Store
For 3 years AdNauseam has been used by tens of thousands of Chrome, Firefox and Opera users, who oppose the unethical surveillance advertising model. Now Google banned it from its Web Store on very dubious charges. Furthermore Google locked AdNauseam users out of their ad data. Today it's your privacy tool, tomorrow…
47
On the Perceived Value of EV Certs, Commercial CAs, Phishing and Let's Encrypt
Last week I wrote about how Life Is About to Get a Whole Lot Harder for Websites Without HTTPS [https://www.troyhunt.com/life-is-about-to-get-harder-for-websites-without-https/]. Somewhere in the comments there, the discussion went off on a tangent about commercial CAs, the threat
48
Attacking machine learning with adversarial examples
Adversarial examples are inputs to machine learning models that an attacker has intentionally designed to cause the model to make a mistake; they’re like optical illusions for machines. In this post we’ll show how adversarial examples work across different mediums, and will discuss why securing systems against them…
49
Who is Anna-Senpai, the Mirai Worm Author?
On September 22, 2016, this site was forced offline for nearly four days after it was hit with “ Mirai ,” a malware strain that enslaves poorly secured Internet of Things (IoT) devices like wireless routers and security cameras into a botnet for use in large cyberattacks. Roughly a week after that assault, the…
50
51
52
Verified cryptography for Firefox 57
Traditionally, software is produced in this way: write some code, maybe do some code review, run unit-tests, and then hope it is correct. Hard experience shows that it is very ...
53
54
Learning with Privacy at Scale
Understanding how people use their devices often helps in improving the user experience. However, accessing the data that provides such…
55
Dangers of CSV Injection
I’ve been doing the local usergroup circuit with this lately and have been asked to write it up.
56
HTTPS on Stack Overflow: The End of a Long Road
Today, we deployed HTTPS by default on Stack Overflow. All traffic is now redirected to https:// and Google links will change over the next few weeks. The ac...
57
Breaking open the Mt. Gox case, part 1
The official blog of WizSec, a group of bitcoin security specialists, and their investigation into MtGox.
58
Why (blank) gets you root
tracking down the cause of a serious authentication flaw
59
60
Australian PM Calls for End-To-End Encryption Ban
"The laws of mathematics are very commendable but the only law that applies in Australia is the law of Australia", said Australian Prime Minister Malcolm Turnbull today. He has been rightly mocked for this nonsense claim, that foreshadows moves to require online messaging providers to provide law...