1
Most cited
Posts that commenters keep linking to, ranked by how many different people have cited them in Hacker News comments. 41 posts.
2
3
4
Public key pinning coming in Chrome 13
Starting with Chrome 13, we'll have HTTPS pins for most Google properties. This means that certificate chains for, say, https://www.google.com , must include a whitelisted public key. It's a fatal error otherwise. Credit goes to my colleague, Chris Evans, for much of this.
5
Tarsnap critical security bug
There's a lot to say about this, and it's entirely possible that I'll miss covering some important points in this post; if I've missed something, please email me or post a comment below and I'll do my best to add the necessary information.
6
Errata: Steve Gibson
a summary of Steven Gibson events and quotes demonstrating charlatan status
7
"Schneier's Law"
Back in 1998, I wrote: Anyone, from the most clueless amateur to the best cryptographer, can create an algorithm that he himself can’t break. In 2004, Cory Doctorow called this Schneier’s law: …what I think of as Schneier’s Law: “any person can invent a security system so clever that she or he can’t think of how to…
8
Advanced sign-in security for your Google account
Insights from Googlers into our products, technology, and the Google culture
9
lloyd.io - How BrowserID Works
lloyd.io is the personal website of Lloyd Hilaiel, a software engineer who lives in Denver, Colorado.
10
Multiple programming languages vulnerable to DoS via hash algorithm collision
oCERT-2011-003 multiple implementations denial-of-service via hash algorithm collision
11
Bittorrent over Tor isn't a good idea
An increasing number of people are asking us about the recent paper coming out of Inria in...
12
How to Force Facebook into Handing Over their Secret Tracking Data
According to European data protection law every individual has the right to get a copy of all personal data a company holds about him (right to access). This law is applicable to Facebook too. Every user with a residence outside of the US and Canada has a contract with “Facebook Ireland Limited”, based in Dublin…
13
No Copyright Intended
On October 26, a YouTube user named crimewriter95 posted a full-length version of Pulp Fiction, rearranged in chronological order. A couple things struck me about this video. First, I’m surprised that a full-length, 2.5-hour very slight remix of a popular film can survive on YouTube for over six weeks without getting…
14
How Dropbox sacrifices user privacy for cost savings
Note: This flaw is different than the authentication flaw in Dropbox that Derek Newton recently published . Summary Dropbox , the popular cl...
15
16
17
18
Carnegie Mellon CS Professor challenges Sony by mirroring Geohot's PS3 hacks
Request for materials: I would like to receive tutorial information on: Sony PS3 access protection mechanisms, the Elliptical Curve Digital Signature Algorithm ( ECDSA ), the structure of the PS3 hypervisor, METLDR, signing tools, and any other topics necessary for a person reasonably skilled in computer science to be…
19
Jwz: Google's pseudonym support "obvious bullshit"
In a shamefully credulous statement, they say: Proponents of pseudonymity scored a major victory today, when Google executive Vic Gundotra revealed at the Web 2.0 Summit that social networking service Google+ will begin supporting pseudonyms and other types of identity. According to Mashable, Google+ will be "adding…
20
Why the password "this is fun" is 10 times more secure than "J4fS!2"
Baekdal is your premium site for media reports and trend analysis. Subscribe from €7.55/month
21
22
23
24
German Chaos Computer Club analyzes and releases government malware
The largest European hacker club, "Chaos Computer Club" (CCC), has reverse engineered and analyzed a "lawful interception" malware program used by German police forces. It has been found in the...
25
Xkcd Password Generator
The button below will generate a random phrase consisting of four common words. According to yesterday’s xkcd strip, such phrases are hard to guess (even by brute force), …
26
Google's Backdoor Access System into Gmail Accounts
Google made headlines when it went public with the fact that Chinese hackers had penetrated some of its services, such as Gmail, in a politically motivated attempt at intelligence gathering. The news here isn’t that Chinese hackers engage in these activities or that their attempts are technically sophisticated—we knew…
27
Google to default to SSL version for logged in users
Insights from Googlers into our products, technology, and the Google culture
28
House Keys copyable from 200 ft away via camera
UC San Diego Jacobs School of Engineering2011133 points69 commentscited by 4Security & Privacy details
 UC San Diego computer scientists have built a software program that can perform key duplication without having the key. Instead, the computer scientists only need a photograph of the key.
29
Do not upgrade to PHP 5.3.7 due to a bug in crypt()
PHP is a popular general-purpose scripting language that powers everything from your blog to the most popular websites in the world.
30