3451
How we found a bug in Amazon ELB
Troubleshooting of an Amazon ELB bug found in production using the Sysdig and Wireshark analysis tools and following a strictly top-down approach.
New
The latest blog posts to take off on Hacker News. 4,441 posts.
3452
New debugging method found undetected security flaws in popular web apps
By exploiting some peculiarities of the popular Web programming framework Ruby on Rails, MIT researchers have developed a system that can quickly comb through tens of thousands of lines of application code to find security flaws.
3453
3454
Secret Court Takes Another Bite Out of the Fourth Amendment
Defenders of the NSA's mass spying have lost an important talking point: that the erosion of our privacy and associational rights is justified given the focus of surveillance efforts on combating terrorism and protecting the national security. That argument has always been dubious for a number of...
3455
3456
How I Hacked Facebook and Found Someone's Backdoor Script
Bug Bounty Hunting from Pentest View, and How to Find Remote Code Execution and Someone's Backdoor on Facebook Server...
3457
Free VPN integrated in Opera for better online privacy
Now, you don't have to download VPN extensions or pay for VPN subscriptions to access blocked websites and to shield your browsing when on public Wi-Fi.
3458
3459
3460
EFF Sues for Court Orders Requiring Tech Cos to Decrypt Users’ Communications
San Francisco—The Electronic Frontier Foundation (EFF) filed a Freedom of Information (FOIA) lawsuit today against the Justice Department to shed light on whether the government has ever used secret court orders to force technology companies to decrypt their customers’ private communications, a...
3461
Keeping secrecy the exception, not the rule
This morning we filed a new lawsuit in federal court against the United States government to stand up for what we believe are our customers’ constitutional and fundamental rights – rights that help protect privacy and promote free expression. This is not a decision we made lightly, and hence we wanted to share…
3462
Gone in Six Characters: Short URLs Considered Harmful for Cloud Services
[This is a guest post by Vitaly Shmatikov, professor at Cornell Tech and once upon a time my adviser at the University of Texas at Austin. — Arvind Narayanan.] TL;DR: short URLs produced by bit.ly, goo.gl, and similar services are so short that they can be scanned by brute force. Our scan discovered a large […]
3463
Leaving Beta, New Sponsors
Let’s Encrypt is leaving beta today. We’re also excited to announce that founding sponsors Cisco and Akamai have renewed their Platinum sponsorships with 3-year commitments, Gemalto is joining as our newest Gold sponsor, and HP Enterprise, Fastly, Duda and ReliableSite.net are our newest Silver sponsors. Since our…
3464
3465
3466
3467
WhatsApp Rolls Out End-To-End Encryption to Its Over 1B Users
End-to-end encryption has just gone massively mainstream. In an update on March 31st, the Facebook-owned messaging platform WhatsApp quietly pushed an update adding end-to-end encryption enabled by default to its chat and call functionality. They announced the change publicly on Tuesday, allowing...
3468
Signal Desktop beta now publicly available
For the past few months, the Signal Desktop beta has been available through an invitation program. We’ve gotten a lot of feedback, made a lot of improvements, and are now ready to open the beta up for public access.
3469
RubyGems.org gem replacement security vulnerability and mitigation
Summary RubyGems.org contained a bug that could allow an attacker to replace some .gem files on our servers with a different file that they supplied. We deployed a partial fix on April 2nd and a co...
3470
3471
WhatsApp's Signal Protocol integration is now complete
At Open Whisper Systems, our goal is to make private communication simple. A year ago, we announced a partnership with WhatsApp and committed to integrating the Signal Protocol into their product, moving towards full end-to-end encryption for all of their users by default. Over the past year, we...
3472
Bitcoin Users Reveal More Private Information Than They Realize
Most people think bitcoin is anonymous. In fact, new technologies trace BTC transactions, attempting to identify bitcoin users.
3473
The Trouble with CloudFlare
Wednesday, CloudFlare blogged that 94% of the requests it sees from Tor are "malicious." We find...
3474
Amnesty International: Encryption Is a Human Rights Issue
New Report Analyzes How Crypto Backdoors, Interference with Crypto, and Compelled Disclosure of Encryption Keys All Impact Free Expression and Privacy Defending encryption is a human rights issue, according to a new Amnesty International report. The report calls on nation-states to promote the use...
3475
Reproducible Signal builds for Android
As of our latest Android release, Signal builds are reproducible. Reproducible builds help to verify that the source code in our GitHub repository is the exact source code used to build the compiled Signal APK being distributed through Google Play.
3476
The Trouble with Tor
The Tor Project makes a browser that allows anyone to surf the Internet anonymously. Tor stands for "the onion router" and that describes how the service works. Traffic is routed through a number of relays where each relay only knows the next hop, not the ultimate destination.
3477
Lessons learned while protecting Gmail
Posted by Elie Bursztein - anti-abuse & security research, Nicolas Lidzborski - Gmail security engineering, and Vijay Eranti - Gmail anti-abus...
3478
FBI Breaks into iPhone. We Have Some Questions
The FBI has successfully accessed data on an iPhone that has been the subject of a legal battle between the Justice Department and Apple, according to a court filing. EFF is pleased that the Justice Department has retreated from its dangerous and unconstitutional attempt to force Apple to subvert...
3479
HIPAA 101 for Software Development Teams
Everything you need to know about HIPAA compliance, from the basics to infrastructure requirements to building with AI.
3480
More Encryption, More Notifications, More Email Security
Posted by Nicolas Lidzborski, Gmail Security Engineering Lead and Jonathan Pevarnek, Jigsaw Engineer Today, we’re announcing a variety of...