3271
New
The latest blog posts to take off on Hacker News. 4,441 posts.
3272
3273
Reversing Go Binaries Like a Pro
GO binaries are weird, or at least, that is where this all started out. While delving into some Linux malware named Rex, I came to the realization that I might need to understand more than I wanted to
3274
3275
Sharing National Security Letters with the Public
*On August 10, 2017, we updated this post with additional National Security Letters (NSLs) we received where, either through litigation or legislation, we have been free…
3276
3277
Law Enforcement Uses Border Search Exception as Fourth Amendment Loophole
In recent months, U.S. Customs and Border Protection agents have sought access to private data on the cell phones of two journalists. Such incidents are offensive because they threaten the independence of the press and pose specific risks to confidential sources. This government overreach also...
3278
Chrome 56 Beta: “Not Secure” Warning, Web Bluetooth, and CSS Position: Sticky
Unless otherwise noted, changes described below apply to the newest Chrome Beta channel release for Android, Chrome OS, Linux, Mac, and Wi...
3279
Belarus finally bans Tor
Country: Belarus Probed ISPs: Beltelecom (AS 6697) Censorship method: TCP injections We have recently heard of network anomalies in Belarus. Tor has been finally blocked in December 2016, although it had been explicitly declared that Tor should be blocked since February 2015. An anonymous cypherpunk has helped to…
3280
3281
An exploit kit hiding in the pixels of malicious ads
Millions of readers who visit popular news websites have been targeted by a series of malicious ads redirecting them to the Stegano exploit kit.
3282
3283
Improved Authentication for Email Encryption and Security
Today, we are happy to become the first and only secure email service to support Secure Remote Password (SRP), a much more secure authentication method.
3284
Announcing OSS-Fuzz: Continuous Fuzzing for Open Source Software
By Mike Aizatsky, Kostya Serebryany (Software Engineers, Dynamic Tools); Oliver Chang, Abhishek Arya (Security Engineers, Google Chrome); an...
3285
3286
More Than 1M Google Accounts Breached by Gooligan
As a result of a lot of hard work done by our security research teams, we revealed today a new and alarming malware campaign. The attack campaign, named %
3287
Qubes OS Begins Commercialization and Community Funding Efforts
Since the initial launch of Qubes OS back in April 2010, work on Qubes has been funded in several different ways. Originally a pet project, it was first supported by Invisible Things Lab (ITL) out of the money we earned on various R&D and consulting contracts. Later, we decided that...
3288
AWS Organizations: Centrally Manage Multiple AWS Accounts
Today, AWS launched AWS Organizations: a new way for you to centrally manage all the AWS accounts your organization owns. Now you can arrange your AWS accounts into groups called organizational units (OUs) and apply policies to OUs or directly to accounts. For example, you can organize your accounts by application…
3289
Breaking the Chain
Posted by James Forshaw, Wielder of Bolt Cutters.Much as we’d like it to be true, it seems ...
3290
3291
Statistician calls for audit to address election hacking fears
Double-check needed before Electoral College cements presidential results on Dec. 19
3292
NIST’s new password rules – what you need to know
The Sophos Blog
3293
Syscall Auditing at Scale
If you are are an engineer whose organization uses Linux in production, I have two quick questions for you: 1) How many unique outbound TCP connections have your servers made in the past hour? 2) Which processes and users initiated each of those connections? If you can answer both of these questions, fantastic! You…
3294
3295
DDoS Attacks: Best Practices for Prevention and Response
Late last month, Internet users across the eastern seaboard of the United States had trouble accessing popular websites, such as Reddit, Netflix, and the New York Times....
3296
3297
Signal: Safety number updates
The latest Signal release includes some changes to the way safety numbers work. Safety numbers allow Signal users to verify the privacy of their communication with a contact, either by comparing a number or by scanning a single QR code. We recently introduced this new design as an update to Sign...
3298
Pixel Security
Posted by Paul Crowley, Senior Software Engineer and Paul Lawrence, Senior Software Engineer [Cross-posted from the Android Developers Blog...
3299
Keybase chooses Zcash
You're reading the Keybase blog. There are more posts . When you're done, you can install Keybase .
3300
Firefox Focus – a free, fast and easy to use private browser for iOS
Today, we’re pleased to announce the launch of Firefox Focus – a free, fast and easy to use private browser for iOS. We live in an age where too ma