3331
Certificate Revocation Issue
We're experts in automated, Scalable, Integrated Digital Certificates Solutions, SSLs/TLSs, managed PKI, IoT, authentication & email security. Learn more about our identity management services.
New
The latest blog posts to take off on Hacker News. 4,441 posts.
3332
Disappearing messages for Signal
The latest Signal release for iPhone, Android, and Desktop now includes support for disappearing messages. The timer has come With this update, any conversation can be configured to delete sent and received messages after a specified interval. The configuration applies to all parties of a convers...
3333
Say Cheese: a snapshot of the massive DDoS attacks coming from IoT cameras
Over the last few weeks we've seen DDoS attacks hitting our systems that show that attackers have switched to new, large methods of bringing down web applications.
3334
3335
Industry Concerns about TLS 1.3
Search IETF mail list archives
3336
Grand jury subpoena for Signal user data
In the “first half of 2016” (the most specific we’re permitted to be), we received a subpoena from the Eastern District of Virginia. The subpoena required us to provide information about two Signal users for a federal grand jury investigation. We’ve designed the Signal service to minimize the dat...
3337
Qubes OS 3.2 has been released
I’m happy to announce that today we’re releasing Qubes OS 3.2! This is an incremental improvement over the 3.1 version that we released earlier this year. A lot of work went into making this release more polished, more stable and easier to use than our previous releases. One major featu...
3338
3339
3340
Investigating a malware sample which sometimes fails to behave maliciously
SentinelOne's blog offers the latest news around cybersecurity, risk reduction, threat intelligence, and more. Sign up for our weekly digest to stay updated.
3341
iOS 10: Security Weakness Discovered, Backup Passwords Much Easier to Break
We discovered a major security flaw in the iOS 10 backup protection mechanism. This security flaw allowed us developing a new attack that is able to bypass cert
3342
Playpen: The Story of the FBI’s Unprecedented and Illegal Hacking Operation
In December 2014, the FBI received a tip from a foreign law enforcement agency that a Tor Hidden Service site called “Playpen” was hosting child pornography. That tip would ultimately lead to the largest known hacking operation in U.S. law enforcement history. The Playpen investigation—driven by...
3343
3344
A Digital Rumor Should Never Lead to a Police Raid
Law Enforcement, Courts Need to Better Understand IP Addresses, Stop Misuse If police raided a home based only on an anonymous phone call claiming residents broke the law, it would be clearly unconstitutional. Yet EFF has found that police and courts are regularly conducting and approving raids...
3345
3346
How Dropbox securely stores your passwords
Dash knows your context, your team, and your work, so your team can stay organized, easily find and share knowledge, and keep projects secure, all from one place.
3347
What It Costs to Run Let's Encrypt
Today we’d like to explain what it costs to run Let’s Encrypt. We’re doing this because we strive to be a transparent organization, we want people to have some context for their contributions to the project, and because it’s interesting. Let’s Encrypt will require about $2.9M USD to operate in 2017. We believe this is…
3348
3349
Scalable and secure access with SSH
Visit the post for more.
3350
Sophisticated OS X Backdoor Discovered
Back in January this year we found a new family of cross-platform backdoors for desktop environments. After the discovery of the binaries for Linux and Windows systems, we have now finally come across the OS X version of Mokes.A.
3351
Moving Towards a More Secure Web
To help users browse the web safely, Chrome indicates connection security with an icon in the address bar. Historically, Chrome has not exp...
3352
3353
How to Generate Secure Random Numbers in Various Programming Languages
This blog post will maintain the industry best practices for securely generating random data in Ruby, Node.js, Java, etc.
3354
Is HTTP Public Key Pinning Dead?
HTTP Public Key Pinning (HPKP, RFC 7469)—a standard that was intended to bring public key pinning to the masses—might be dead.
3355
EFF to Court: Government Must Inform People That It’s Accessing Their Data
Seattle, Washington—The Electronic Frontier Foundation (EFF) told a federal court today that the government is violating the U.S. Constitution when it fails to notify people that it has accessed or examined their private communications stored by Internet providers in the cloud. EFF is supporting...
3356
Linux.Rex.1 – A multifunctional self-replicating Trojan for Linux written in Go
A multifunctional self-replicating Trojan for Linux written in Go. The Trojan implements the ВРЕ protocol to share data with other P2P botnet’s nodes and is launched as a node that receives and processes RPC messages. Probably, this malware program’s modification is still under development because ...
3357
Chrome is warning users about insecure pages
First transition in Google's HTTPS-everywhere plans is done
3358
3359
Hardening Compiler Flags for NixOS
In the past year some Mayflower colleagues have started using and contributing to NixOS, a purely functional GNU/Linux distribution that combines package and configuration management. We decided that we would give it a try in production but stumbled upon some issues that had to be resolved first. We have added new…
3360
Advanced Deanonymization Attacks
News posted by Whonix staff. The Whonix Blog. Stay Tuned. (rss)