3301
Mission Improbable: Hardening Android for Security and Privacy
Updates: See the Changes section for a list of changes since initial posting. After a long wait,...
New
The latest blog posts to take off on Hacker News. 4,441 posts.
3302
Announcing SSL Labs Grading Changes for 2017
At SSL Labs, we have a major review of our grading criteria about once a year. As the security of the ecosystem matures, our goal is to push forward and make the requirements [for a good grade]…
3303
CertiKOS: A breakthrough toward hacker-resistant operating systems
A team of Yale researchers has unveiled CertiKOS, the world’s first operating system that runs on multi-core processors and shields against cyber attacks.
3304
Why Chrome 53 Is Rejecting Chase Bank's Symantec Certificate
If you're using Chrome 53, which was released last week, you might find that some websites which worked under Chrome 52 now fail with "Your connection is not private" with an error code of NET::ERR_CERTIFICATE_TRANSPARENCY_REQUIRED . For example, choosemyreward.chase.com shows the following error as of publication…
3305
3306
Here’s to more HTTPS on the web
Security has always been critical to the web, but challenges involved in site migration have inhibited HTTPS adoption for several years. In the interest of a safer web for all, at Google we've worked alongside many others across the online ecosystem to better understand and address these challenges, resulting in real…
3307
3308
Signal and Giphy
The latest Signal release for Android includes support for GIF search and browsing. Signal has long supported sending and receiving GIFs, but this is an experiment that allows users to browse, search, and select popular GIFs from within Signal.
3309
Tor Browser User Manual
The community team is excited to announce the new Tor Browser User Manual! The manual is...
3310
Launching Our Crowdfunding Campaign
Today we kicked off our first crowdfunding campaign with the goal of raising enough funds to cover about one month of our operations - $200,000. That amount covers the operational and engineering staff, the hardware and the software, and general operating expenses needed to securely and reliably issue and manage many…
3311
The Mirai Botnet Is Proof the Security Industry Is Broken
Appcanary makes sure you never run vulnerable software on your servers. Like our blog? Subscribe to our newsletter or podcast . Browse the archive , or follow us on twitter , github or rss .
3312
Disclosing vulnerabilities to protect users
Posted by Neel Mehta and Billy Leonard, Threat Analysis Group On Friday, October 21st, we reported 0-day vulnerabilities — previously publi...
3313
3314
Zcash begins
The Zcash blockchain is live! We released the genesis block this morning, and people all around our planet have begun mining and transacting on it. Our homepage links to a download page where you can…
3315
3316
Task_t considered harmful
Posted by Ian Beer, Project ZeroThis post discusses a design issue at the core of the XNU kernel ...
3317
Distrusting New WoSign and StartCom Certificates
Mozilla has discovered that a Certificate Authority (CA) called WoSign has had a number of technical and management failures. Most seriously, we discovered they were backdating SSL certificates in order ...
3318
3319
3320
Is Your Site Leaking Password Reset Links?
Emailed password reset links are a common part of web applications. Is your site leaking these confidential links to third party sites?
3321
Mirai Botnet Linked to Dyn DNS DDoS Attacks
Distributed Denial of Service (DDoS) attempts to make a machine or network unavailable by flooding it with overwhelming amounts of traffic.
3322
Threat Group 4127 Targets Hillary Clinton Presidential Campaign
Learn how Sophos CTU researchers tracked the activities of a Russian-based threat group targeting the Hillary Clinton Presidential Campaign.
3323
Facial Recognition’s Threat to Privacy Is Worse Than Anyone Thought
Before all of this ever went down In another place, another town You were just a face in the crowd You were just a face in the crowd Out in the street walking around A face in the crowd -Tom Petty If we don’t speak up now, the days when we can walk around with our heads held high without fear of...
3324
3325
Phasing Out SHA-1 on the Public Web
An algorithm we’ve depended on for most of the life of the Internet — SHA-1 — is aging, due to both mathematical and technological advances. Digital signatures incorporating the SHA-1 ...
3326
Dropping Linux capabilities to improve container security
Increase container security by dropping capabilities in Docker. Learn how to drop unnecessary capabilities for increased security.
3327
The VeraCrypt Audit Results
VeraCrypt 1.18 and its bootloaders were evaluated. This release included a number of new features including non-western developed encryption options, a boot loader that supports UEFI (modern BIOSes), and more.
3328
Finland: New surveillance law threatens fundamental rights (2015)
Finnish EDRi member Electronic Frontier Finland (Effi) is gravely concerned over a draft law on Internet surveillance. The bill that the country’s current government is in the process of preparing will grant the military and the Finnish Security Intelligence Service (Supo) the authority to conduct electronic mass…
3329
3330
