3421
New
The latest blog posts to take off on Hacker News. 4,441 posts.
3422
3423
Web Storage: the lesser evil for session tokens
I was recently asked whether it was safe to store session tokens using Web Storage (sessionStorage/localStorage) instead of cookies. Upon googling this I found the top results nearly all assert that w
3424
Tor Browser 6.0 is released
The Tor Browser Team is proud to announce the first stable release in the 6.0 series. This...
3425
A New Threat Actor Targets UAE Dissidents
This report describes a campaign of targeted spyware attacks carried out by a sophisticated operator, which we call Stealth Falcon. The attacks have been conducted from 2012 until the present, against Emirati journalists, activists, and dissidents.
3426
Canary Watch, One Year Later
We announced Canary Watch a year ago as a coalition project to list Warrant Canaries and monitor them for changes or removal. Canary Watch was a joint project, with EFF, Freedom of the Press Foundation, NYU Law, Calyx and the Berkman Center.Along the way, the project has been part of the massive...
3427
Hypernetes: Bringing Security and Multi-Tenancy to Kubernetes
While many developers and security professionals are comfortable with Linux containers as an effective boundary, many users need a stronger degree of isolation, particularly for those running in a multi-tenant environment. Sadly, today, those users are forced to run their containers inside virtual machines, even one…
3428
The Tor Project: Building the Next Generation of Onion Services
A few weeks ago, a small group of Tor developers got together in Montreal and worked on onion...
3429
Two Bytes to $951M
In February 2016 one of the largest cyber heists was committed and subsequently disclosed. An unknown attacker gained access to the Banglade...
3430
You are being followed: The business of social media surveillance
Anubis could not load its JavaScript. The server may be overloaded. Please reload the page to try again.
3431
LinkedIn password leak
CES 2015 was a superb event in terms of the amount of new technology per square foot. But, from an information security standpoint, it did not appear all that positive.
3432
Anguish: Invisible Programming Language and Invisible Data Theft
DISCLAIMER: data theft is a serious crime in many jurisdictions. The author does not condone or encourage anyone to break laws. The information provided here is for educational purposes only.
3433
Open Whisper Systems Partners with Google on End-To-end Encryption for Allo
At Open Whisper Systems, our goal is to make private communication simple. The foundation of our technology is Signal Protocol, a modern, open source, strong encryption protocol for asynchronous messaging systems. It is built from the ground up to make seamless end-to-end encrypted messaging poss...
3434
Announcing Heroku Free SSL Beta and Flexible Dyno Hours
At Heroku, we want to make it easy for everyone to be able to learn and explore our service, and the related ecosystem of technologies, for free - be it...
3435
Major Remote SSH Security Issue in CoreOS Linux Alpha
No single cloud fits all. Explore how we build a more flexible future with hybrid cloud.
3436
Yubico: Secure Hardware vs. Open Source
Learn more about what's happening within the tech and cybersecurity industry and the developments in our business and security keys within our Yubico Blog.
3437
Viking Horde: A New Type of Android Malware on Google Play
Viking Horde Android malware conducts ad fraud, but can also be used for other attack purposes such as DDoS attacks, spam messages, and more.
3438
3439
Announcing Certbot: EFF's Client for Let's Encrypt
EFF is proud to introduce Certbot, a powerful tool to help websites encrypt their traffic. Certbot is the next iteration of the Let's Encrypt Client; it obtains TLS/SSL certificates and can automatically configure HTTPS encryption on your server. It's still in beta for now, but we plan to release...
3440
An Open Letter to Members of the W3C Advisory Committee
Dear member of the World Wide Web Consortium's Advisory Committee, You may have heard that over the past year we've been trying to insert legal safeguards into the Encrypted Media Extensions project at the W3C, which standardizes streaming video DRM. We've previously been opposed to the W3C...
3441
Multiple 7-Zip Vulnerabilities Discovered
7-Zip vulnerabilities were discovered by Marcin Noga. Update 2016-05-12: Related advisories for the 7-Zip issues covered in this blog can be found here: http://www.talosintel.com/reports/TALOS-2016-0093/ http://www.talosintel.com/reports/TALOS-2016-0094/ 7-Zip is an open-source file
3442
Reflections: The ecosystem is moving
At Open Whisper Systems, we’ve been developing open source “consumer-facing” software for the past four years. We want to share some of the things we’ve learned while doing it. As a software developer, I envy writers, musicians, and filmmakers. Unlike software, when they create something, it is...
3443
Introducing TAuth: Why OAuth 2.0 is bad for banking APIs and how we're fixing it
This week we released our authorisation flow making it possible for you to go from building apps that talk to your bank account, to building apps that can talk to any bank account. This is huge. Check out this SMS bot (how on trend) I hacked up yesterday morning. (and don’t forget to join the beta wait list ).
3444
3445
Yes, All DRM
Everybody knows that the digital locks of DRM on the digital media you own is a big problem. If you’ve bought a digital book, album, or movie, you should be able to do what you want with it—whether that’s enjoying it wherever you want to, or making it more accessible by changing the font size or...
3446
3447
Can’t Hack a Hacker: Reverse Engineering a Discovered ATM Skimmer
Reverse engineering an ATM skimmer discovered in the wild, analyzing its hardware and data exfiltration methods.
3448
Rule 41 Proposes to Grant New Hacking Powers to the Government
The government hacking into phones and seizing computers remotely? It’s not the plot of a dystopian blockbuster summer movie. It’s a proposal from an obscure committee that proposes changes to court procedures—and if we do nothing, it will go into effect in December. The proposal comes from the...
3449
The Crime of Speech
New EFF Report Maps Legal Threats to Free Expression in the Arab WorldFreedom of expression is a universal right, but the specific threats to it vary widely from country to country and region to region. As activists fighting for free speech worldwide, it is essential that we better understand the...
3450
Front-End Performance: The Dark Side
The latest news about Opera web browsers, tech trends, internet tips.