91
How Dropbox securely stores your passwords
Dash knows your context, your team, and your work, so your team can stay organized, easily find and share knowledge, and keep projects secure, all from one place.
Most cited
Posts that commenters keep linking to, ranked by how many different people have cited them in Hacker News comments. 113 posts.
92
Keybase chooses Zcash
You're reading the Keybase blog. There are more posts . When you're done, you can install Keybase .
93
94
95
96
How to Crash Systemd in One Command
After running this command, PID 1 is hung in the pause system call. You can no longer start and stop daemons. inetd-style services no longer accept connections. You cannot cleanly reboot the system. The system feels generally unstable (e.g. ssh and su hang for 30 seconds since systemd is now integrated with the login…
97
The limitations of Android N Encryption
Over the past few years we’ve heard more about smartphone encryption than, quite frankly, most of us expected to hear in a lifetime. We learned that proper encryption can slow down even sophi…
98
8M GitHub profiles were leaked from GeekedIn's MongoDB
Let me make it crystal clear in the opening paragraph: this incident is not about any sort of security vulnerability on GitHub's behalf, rather it relates to a trove of data from their site which was inappropriately scraped and then inadvertently exposed due to a vulnerability in another service.
99
A Technical Perspective on the Apple iPhone Case
The legal dispute between Apple and the FBI might prove pivotal in the long-running battle to protect users' privacy and right to use uncompromised encryption. The case has captured the public imagination. Of course, EFF supports Apple's efforts to protect its users. The case is complicated...
100
Playpen: The Story of the FBI’s Unprecedented and Illegal Hacking Operation
In December 2014, the FBI received a tip from a foreign law enforcement agency that a Tor Hidden Service site called “Playpen” was hosting child pornography. That tip would ultimately lead to the largest known hacking operation in U.S. law enforcement history. The Playpen investigation—driven by...
101
Pwncloud – Bad crypto in the Owncloud encryption module
This blog is written by Hanno Böck. Unless noted otherwise, its content is licensed as CC0 .
102
103
Rules for Writing Safety Critical Code (2006)
Ten rules for writing safety critical code, to facilitate analysis and increase software reliability
104
Phishing attack against Lastpass
Updated 2016-02-04 : LastPass has removed the button from notifications and now requires email confirmation for all logins from new IPs . This substantially mitigates LostPass, but does not eliminate it.
105
Thinking About Smart Contract Security
Over the last day with the community's help we have crowdsourced a list of all of the major bugs with smart contracts on Ethereum so far, including both the...
106
Usenet Tradecraft: Survival in an Extremely Adversarial Environment (2013)
Survival in an Extremely Adversarial Environment If your secure communications platform isn’t being used by terrorists and pedophiles, you&# …
107
Roughtime: a protocol for secure, auditable time synchronisation
Security protocols often assume an accurate, local clock (e.g. TLS, Kerberos, DNSSEC and more). It's a widely accepted assumption when designing protocols but, for a lot of people, it just isn't true. We find good evidence that at least 25% of all certificate errors in Chrome are due to a bad local clock.
108
109
Doodles, stickers, and censorship circumvention for Signal Android
The latest Signal for Android release includes support for adding doodles, stickers, and text to images. This release also includes support for censorship circumvention in Egypt and the United Arab Emirates.
110
The Million-Key Question: Investigating the Origins of RSA Public Keys
Petr Švenda, Matúš Nemec, Peter Sekan, Rudolf Kvašňovský, David Formánek, David Komárek, and Vashek Matyáš, Masaryk University
111
Insecure by design: protocols for encrypted phone calls
The MIKEY-SAKKE protocol is being promoted by the UK government as a better way to secure phone calls. The reality is that MIKEY-SAKKE is designed to offer minimal security while allowing undetectable mass surveillance, through the introduction a backdoor based around mandatory key-escrow. This weakness has…
112
Distribution packages considered insecure
If you ever have run a Linux-based operating system you are probably aware of the way that software is usually distributed on them: Using a software repository. Repositories are great for numerous …
113
My Letter to the Tor Project
N ow I a fourfold vision see A nd a fourfold vision is given to me T is fourfold in my supreme delight A nd three fold in soft Beulahs night A nd twofold Always. May God us keep F rom Single vision & Newtons sleep. — W illiam B lake