3211
Upspin – Another option for file sharing
Posted by Andrew Gerrand, Eric Grosse, Rob Pike, Eduardo Pinheiro and Dave Presotto, Google Software Engineers Existing mechanisms for fil...
New
The latest blog posts to take off on Hacker News. 4,441 posts.
3212
3213
Time to Encrypt the Cloud
From typing a business letter to taking pictures with friends, the internet has changed every part of our lives. We don't just share information with people, we also want it synced across our computers, tablets, and phones.
3214
Zerocoin implementation bug
Firo is a digital currency with a focus on setting privacy standards.
3215
Dutch House of Representatives passes dragnet surveillance bill
On February 14, 2017 the bill for the new Intelligence and Security Services Act was passed by the Dutch lower house. Despite being met with serious opposition from experts, regulators, civil society, political parties and citizens, the revised bill passed virtually unchanged from the proposal submi
3216
Riseup moves to encrypted email in response to legal requests
After exhausting our legal options, Riseup recently chose to comply with two sealed warrants from the FBI, rather than facing contempt of court (which would have resulted in jail time for Riseup birds and/or termination of the Riseup organization). The first concerned the public contact address for an international…
3217
Attacking machine learning with adversarial examples
Adversarial examples are inputs to machine learning models that an attacker has intentionally designed to cause the model to make a mistake; they’re like optical illusions for machines. In this post we’ll show how adversarial examples work across different mediums, and will discuss why securing systems against them…
3218
Attacking the Windows Nvidia Driver
Posted by Oliver ChangModern graphic drivers are complicated and provide a large promising attack...
3219
The Need for a Digital Geneva Convention
YouTube Video
3220
3221
Video calls for Signal now in public beta
Today’s Signal release for Android and iOS includes beta support for video calls. This represents an entirely new calling infrastructure for Signal, and should increase voice call quality as well. We think it’s a big improvement, but we’re rolling it out in stages to collect feedback from people ...
3222
Basic Security Precautions for Non-Profits and Journalists
Basic security precautions for non-profits and journalists in the United States, early 2019.
3223
Fuzzing PCI express: security in plaintext
Google recently launched GPUs on Google Cloud Platform (GCP), which will allow customers to leverage this hardware for highly parallel workloads. These GPUs are connected to our cloud machines via a variety of PCIe switches, and that required us to have a deep understanding of PCIe security.
3224
Cryptographically Secure PHP Development
Your field guide to building secure cryptography features in PHP
3225
Introducing Docker Secrets Management
Docker is a founding member of the Blueprint Alliance, a 12-company reference architecture for securing AI agents, built around four governance questions.
3226
3227
3228
Violating Terms of Use Isn’t a Crime, EFF Tells Court
Have you ever violated a website’s terms of use, such as by using something other than your real name on a website that requires one, or by sharing your account password with a family member when doing so is prohibited? Probably. Have you ever clicked “I agree” without actually reading the terms in...
3229
How the NSA obtains and uses airline reservations (2013)
A front-page report in today’s New York Times based on documents leaked by NSA whistleblower Edward Snowden confirms that the NSA, like the DHS, uses airline reservation data as part of its profiling and social network analysis of US citizens and foreigners. Today’s report also raises new questions, and suggests some…
3230
3231
How Etsy Manages HTTPS and SSL Certificates for Custom Domains on Pattern
In April of 2016 Etsy launched Pattern, a new product that gives Etsy sellers the ability to create their own hosted e-commerce...
3232
Comcast uses MITM JavaScript injection to serve account related information
For years, Comcast and other large telecommunication companies around the world have injected javascript into your web browsing experience to serve
3233
3234
Meet Algo, the VPN that works
I think you’ll agree when I say: there’s no VPN option on the market designed with equal emphasis on security and ease of use. That changes now. Today we’re introducing Algo, a self-hosted personal VPN server designed for ease of deployment and security. Algo automatically deploys an on-demand VPN service in the cloud…
3235
The foundation of a more secure web: Google Trust Services
Posted by Ryan Hurst, Security and Privacy Engineering In support of our work to implement HTTPS across all of our products ( https://www.g...
3236
EFF Asks Mass. High Court to Require Clear Limits for Searches of Devices
Along with several other advocacy groups, EFF signed on to an amicus brief this week in the case of the Commonwealth of Massachusetts v. James Keown, in support of requiring courts to set pre-search limits on the method of digital searches by law enforcement pursuant to judicially authorized...
3237
Dutch secret service tries to recruit Tor-admin
Recently a Dutch man with an MSc (Master of Science) at the Delft University of Technology and admin of Tor-exit nodes was approached by two agents of the Dutch intelligence service, the AIVD. They wanted to recruit the man as an informant or undercover agent, who would also infiltrate foreign hacker communities. The…
3238
Ways we harden our KVM hypervisor at Google Cloud: Security in plaintext
Google Cloud uses the open-source KVM hypervisor that has been validated by scores of researchers as the foundation of Google Compute Engine and Google Container Engine , and invests in additional security hardening and protection based on our research and testing experience. Then we contribute back our changes to the…
3239
Privacy and Security Risks of Android VPN Permission-enabled Apps
Explore the science behind the headlines with our leading experts.
3240
Chrome 56 will mark HTTP pages with password fields as non-secure
Posted by Emily Schechter, Chrome Security Team [Updated on 12/5/16 with instructions for developers] Developers : Read more about how to ...