3031
Blueborne – A new attack vector endangering major operating systems
Following the disclosure of the BlueBorne attack vector this past September, Armis discovered that critical Bluetooth vulnerabilities impact the Amazon Echo and Google Home.
New
The latest blog posts to take off on Hacker News. 4,441 posts.
3032
Chrome's Plan to Distrust Symantec Certificates
Posted by Devon O’Brien, Ryan Sleevi, Andrew Whalley, Chrome Security This post is a broader announcement of plans already finalized on t...
3033
Apache Struts Statement on Equifax Security Breach
UPDATE: MEDIA ALERT: The Apache Software Foundation Confirms Equifax Data Breach Due to Failure to Install Patches Provided for Apache® Struts™ Exploit The Apache Struts Project Management Committee (PMC) would like to comment on the Equifax security breach, its relation to the Apache Struts Web Framework and…
3034
3035
Software to capture votes in upcoming German national election is insecure
The Chaos Computer Club is publishing an analysis of software used for tabulating the German parliamentary elections (Bundestagswahl). The analysis shows a host of problems and security holes, to...
3036
Leaked document: EU Presidency calls for massive internet filtering
A Council of the European Union document leaked by Statewatch on 30 August reveals that during the summer months, that Estonia (current EU Presidency) has been pushing the other Member States to strengthen indiscriminate internet surveillance, and to follow in the footsteps of China regarding online censorship…
3037
Run your own OAuth2 server
Run a free OAuth2 Server and OpenID Connect (OIDC) server using open source software in under 10 minutes, and become an OAuth2 provider like Google.
3038
3039
3040
SIDH in Go for quantum-resistant TLS 1.3
Most of today's cryptography is designed to be secure against an adversary with enormous amounts of computational power. This means estimating how much work certain computations require, and choosing cryptographic parameters based on our best estimates.
3041
Internet Censorship Bill Could Spell Disaster for Speech and Innovation
There’s a new bill in Congress that would threaten your right to free expression online. If that weren’t enough, it could also put small Internet businesses in danger of catastrophic litigation. Don’t let its name fool you: the Stop Enabling Sex Traffickers Act (SESTA, S. 1693) wouldn’t help punish...
3042
Hardening the Kernel in Android Oreo
News and insights on the Android platform, developer tools, and events.
3043
3044
Multiple vulnerabilities in RubyGems
There are multiple vulnerabilities in RubyGems bundled by Ruby.It is reported at the official blog of RubyGems.
3045
When it comes to internet privacy, be afraid, analyst suggests
Cybersecurity expert Bruce Schneier, a fellow with the Berkman Klein Center for Internet & Society, discusses what consumers can do to protect themselves from government and corporate surveillance.
3046
3047
3048
Titan in depth: Security in plaintext
While there are no absolutes in computer security, we design, build and operate Google Cloud Platform (GCP) with the goal to protect customers' code and data. We harden our architecture at multiple layers, with components that include Google-designed hardware, a Google-controlled firmware stack, Google-curated OS…
3049
Introducing App Engine Firewall
A key security feature for application developers and administrators is to be able to allow or deny incoming requests based on source IP addresses. This capability can help you do production testing without exposing your app to the world, block access to your app from specific geographies or block requests from a…
3050
An Electronic Voting Firm Exposes 1.8M Chicagoans
UpGuard has identified an exposure of Chicago voters' personal information by an electronic voting machine firm.
3051
Fighting Neo-Nazis and the Future of Free Expression
In the wake of Charlottesville, both GoDaddy and Google have refused to manage the domain registration for the Daily Stormer, a neo-Nazi website that, in the words of the Southern Poverty Law Center, is “dedicated to spreading anti-Semitism, neo-Nazism, and white nationalism.” Subsequently...
3052
Making Visible Watermarks More Effective
Posted by Tali Dekel and Michael Rubinstein, Research ScientistsWhether you are a photographer, a marketing manager, or a regular Internet user, ch...
3053
Thai activist jailed under lese majeste laws for sharing an article on Facebook
Thai activist Jatuphat “Pai” Boonpattaraksa was sentenced this week to two and a half years in prison—for the crime of sharing a BBC article on Facebook. The Thai-language article profiled Thailand’s new king and, while thousands of users shared it, only Jutaphat was found to violate Thailand’s...
3054
ProtonMail Now Supports Bitcoin Payments
Proton Mail is joining the cryptocurrency revolution. Bitcoin is one of our officially accepted payment methods. And no worries we will HODL for you!
3055
TunnelBear Publishes Security Audit
TunnelBear works with Cure53 to complete consumer VPN industry's first public security audit.
3056
Macie: Automatically Discover, Classify, and Secure Content at Scale
This blog is out of date. Please refer here for the updated info. When Jeff and I heard about this service, we both were curious on the meaning of the name Macie. Of course, Jeff being a great researcher looked up the name Macie and found that the name Macie has two meanings. It has […]
3057
(n+1)sec – a protocol for distributed multiparty chat encryption
Today we present (n+1)sec, a free (libre), end-to-end secure, synchronous protocol for group chat developed by eQualit.ie with support from the Open Technology Fund. After 2 years of design, development and testing, we are releasing the (n+1)sec protocol and library for securing group conversations on various…
3058
EFF Urges Supreme Court to Take on Unconstitutional NSA Surveillance
WASHINGTON, D.C.—The Electronic Frontier Foundation (EFF) asked the Supreme Court to review and overturn an unprecedented ruling allowing the government to intercept, collect, and store—without a warrant—millions of Americans’ electronic communications, including emails, texts, phone calls, and...
3059
3060
Negative Result: Reading Kernel Memory from User Mode
I were going to write an introduction about how important negative results can be. I didn’t. I assume you can figure out for yourself why that is and if not you got all the more reason to read this blog post. If you think it’s trivial why my result is negative, you definitely need to read the blog post.