61
Improving the security of your SSH private key files
Update (July 2015): This post is now rather outdated, and the procedure for modifying your private key files is no longer recommended. A better solution is to use ssh-keygen -o .
Most cited
Posts that commenters keep linking to, ranked by how many different people have cited them in Hacker News comments. 103 posts.
62
LG Smart TVs log USB filenames and viewing info to LG servers
Earlier this month I discovered that my new LG Smart TV was displaying ads on the Smart landing screen. After some investigation, I f...
63
Cryptography is a science, not engineering
If we were still in the 1990s, I would agree with Thomas. 1990s cryptography was full of holes, and the best you could hope for was to know how your tools were broken so you could try to work around their deficiencies. This was a time when DES and RC4 were widely used, despite having well-known flaws. This was a time…
64
Malware Hidden Inside JPG EXIF Headers
A few days ago, Peter Gramantik from our research team found a very interesting backdoor on a compromised site. This backdoor didn’t rely on the…
65
66
67
The Linux Backdoor Attempt of 2003
Josh wrote recently about a serious security bug that appeared in Debian Linux back in 2006, and whether it was really a backdoor inserted by the NSA. (He concluded that it probably was not.) Today I want to write about another incident, in 2003, in which someone tried to backdoor the Linux kernel. This one […]
68
Anonymity Is Hard
Anonymity in the real world is very hard In late 2011 Hezbollah rolled up a CIA spy ring in Lebanon. This provides an interesting lesson in CIA …
69
Americans Disapprove of Government Surveillance Programs
More Americans disapprove (53%) than approve (37%) of the government program that obtained telephone call logs and Internet communication records. Americans are split on whether leaker Edward Snowden did the right or wrong thing.
70
71
Insecurities in the Linux /dev/random
New paper: “Security Analysis of Pseudo-Random Number Generators with Input: /dev/random is not Robust, by Yevgeniy Dodis, David Pointcheval, Sylvain Ruhault, Damien Vergnaud, and Daniel Wichs. Abstract: A pseudo-random number generator (PRNG) is a deterministic algorithm that produces numbers whose distribution is…
72
Why I Hacked Apple’s TouchID and Still Think it is Awesome
True cyber security combines advanced technology and best practice. Get tips and read articles on how to take your online security even further.
73
Confirmed: The NSA is Spying on Millions of Americans
Today, the Guardian newspaper confirmed what EFF (and many others) have long claimed: the NSA is conducting widespread, untargeted, domestic surveillance on millions of Americans. This revelation should end, once and for all, the government's long-discredited secrecy claims about its dragnet...
74
75
76
A Hacker's Replacement for Gmail
Note: Since writing this I’ve replaced Exim with Postfix and Courier with Dovecot. This is outlined in the Addendum, but the main text is unchanged. Please read the whole guide before starting, as you can skip some of the steps and go straight to the final system.
77
In the Wake of Aaron Swartz's Death, Let's Fix Draconian Computer Crime Law
Outpourings of grief and calls for change continue to flood the Internet after the suicide of Aaron Swartz, only 26 years old. Aaron was one of our community's best and brightest, and he acheived great things in his short life. He was a coder, a political activist, an entrepreneur, a contributor to...
78
HTML5 localStorage allows sites to fill up users' hard disks
Use HTML5 localStorage to completely fill up Chrome, Safari, and IE users hard disks. Trololo...
79
Mozilla Recognized as Most Trusted Internet Company for Privacy
I’m very happy to share that Mozilla has been named the Most Trusted Internet Company for Privacy in 2012, according to a study performed by the Ponemon
80
81
Hacking Github with Webkit
Previously on Github: XSS , CSRF ( My github followers are real , I gained followers using CSRF on bitbucket ), access bypass, mass assignm...
82
83
84
Google confirms Java and OpenSSL crypto PRNG on Android are broken
News and insights on the Android platform, developer tools, and events.
85
SSL: Intercepted today, decrypted tomorrow
Explore thought leadership, industry insights, and other resources related to cybercrime detection, disruption, and takedowns.
86
Piercing Through WhatsApp’s Encryption
WhatsApp has been plagued by numerous issues in their security: easily stolen passwords, unencrypted messages and even a website that can change anyone’s status. But that streak is not yet over.
87
Firefox getting smarter about third-party cookies
Mozilla has a long running interest in fostering greater transparency, trust and accountability related to privacy and the many cookie-based practices we see today. On Friday, Mozilla released a Firefox ...
88
89
90
Hacking Transcend WiFi SD Cards
UPDATE : This post has been featured in the Hacker News front page! Thanks! I have also updated this post with additional information (at t...