3541
HTTPS provides more than just privacy
Identity, SEO, HTML5, and not having your content modified
New
The latest blog posts to take off on Hacker News. 4,441 posts.
3542
Updated Firefox Security Indicators
Cross posting this. It was written a couple months ago and posted to Mozilla’s Security Blog This article was coauthored by Aislinn Grigas, Senior Interaction Designer, Firefox Desktop November 3, 2015 Over the past few months, Mozilla has been improving the user experience of our privacy and security features in…
3543
3544
AWS Certificate Manager: Deploy SSL/TLS-Based Apps on AWS
I am fascinated by things that are simple on the surface and complex underneath! For example, consider the popular padlock icon that is used to signify that traffic to and from a web site is encrypted: How does the browser know that it should display the green padlock? Well, that’s quite the story! It all […]
3545
How we fought bad ads in 2015
Here are some of the top areas we focused on in our fight against bad ads in 2015.
3546
3547
EFF Pries More Information on Zero Days from the Government
Until just last week, the U.S. government kept up the charade that its use of a stockpile of security vulnerabilities for hacking was a closely held secret.[fn]For what it's worth, the government denies having a “Raiders of the Lost Ark style” stockpile of zero days.[/fn] In fact, in response to...
3548
Analysis and Exploitation of a Linux Kernel Vulnerability
FortiMail Workspace Security secures user-facing apps from advanced threats that target Email, Browsers, Collaboration Tools and Cloud Storage Apps.
3549
3550
How Police Officers Seize Cash from Innocent Americans
Under civil forfeiture laws, police officers can take money from people with no proof of any wrongdoing, and without filing criminal charges. How does this work, and what happens to the money?
3551
You Can't Destroy the Village to Save It: W3C vs. DRM, Round Two
The World Wide Web Consortium (W3C), the nonprofit body that maintains the Web's core standards, made a terrible mistake in 2013: they decided to add DRM—the digital locks that train your computer to say "I can't let you do that, Dave"; rather than "Yes, boss"—to the Web's standards. At the time,...
3552
Is curl|bash insecure?
Take control of your web by running your own personal cloud server with Sandstorm.
3553
Cisco Must Be Held Accountable for Aiding China’s Human Rights Abuses
San Francisco—The Electronic Frontier Foundation (EFF) is urging a federal appeals court to reinstate a lawsuit seeking to hold Cisco Systems accountable for aiding in human rights abuses by building the Chinese government a system that Cisco officials knew was intended to identify—and facilitate...
3554
Verizon Routing Millions of IP Addresses for Cybercrime Gangs
Over the past few years, spammers have sought out large ranges of IP addresses. By spreading out their sending patterns across a wide range of IP addresses, they can attempt to defeat spam filters and get spam and malware emails delivered where they are not wanted. However, IPv4 addresses are getting scarce and hard…
3555
China Shows How Surveillance Leads to Intimidation and Software Censorship
Xinjiang, home of the China's muslim Uighur minority, has long been the world's laboratory for Internet repression. Faced with widespread local unrest, and online debate, China has done everything it can to enforce its vision of the Net in the region, from imprisoning bloggers and online publishers...
3556
3557
3558
3559
Android Full Disk Encryption Cold Boot Attack (2012)
At the end of 2011, Google released version 4.0 of its Android operating system for smartphones. For the first time, Android smartphone owners were supplied with a disk encryption feature that…
3560
How to submit an app to Apple’s App Store when it uses encryption
Carousel Apps was the company behind Watu, the application for temporary staffing agencies. It was co-founded by Julian Johnson and Pablo Fernandez. They both since have moved to other things. Julian is working on many projects, but his main one is improving education and quality of life for children in Africa which…
3561
When coding style survives compilation: De-anonymizing programmers from binaries
In a recent paper, we showed that coding style is present in source code and can be used to de-anonymize programmers. But what if only compiled binaries are available, rather than source code? Today we are releasing a new paper showing that coding style can survive compilation. Consequently, we can utilize these…
3562
Mitigating DoS Attacks with Nginx
Learn about the features in NGINX and NGINX Plus that make them a valuable part of a solution for DDoS attack mitigation.
3563
EFF to Court: Lifetime GPS Tracking Violates the Fourth Amendment
All too often, new police surveillance tools are initially applied to only the “worst of the worst” and then slowly—but surely—expanded to include an ever-growing number of less culpable individuals. We’ve seen it with DNA collection. And now we’re starting to see it with GPS tracking. That’s why...
3564
Why it’s harder to forge a SHA-1 certificate than to find a SHA-1 collision
It’s well known that SHA-1 is no longer considered a secure cryptographic hash function. Researchers now believe that finding a hash collision (two values that result in the same value when SHA-1 is applied) is inevitable and likely to happen.
3565
Santa Claus Confirms NSA Attack on Naughty or Nice Database
A press conference was organised this morning on behalf of Mr Santa Claus. At the conference, a spokes–elf confirmed that there had been repeated attempts to hack the “naughty or nice (NON)” database. The NON-database was thought to be used by Mr Claus to keep records of young inhabitants of planet earth, in order to…
3566
3567
What web developers should know about SSL
The most common questions we get from developers who already know their stuff
3568
3569
Government Succeeds in Stalling Again, but Jewel V. NSA Goes On
We were disappointed today to learn that a federal appeals court in Pasadena declined to consider EFF’s appeal of a ruling in Jewel v. NSA, our long-running lawsuit battling unconstitutional mass surveillance of Internet and phone communications. While we are disappointed that government’s stall...
3570
EFF, Access Now, and the White House Sat Down to Talk About Encryption
In the public battle for strong encryption, EFF has championed the voice of everyday Internet users. After all, if we can’t rely on the security of our digital communications, how can the Web continue to grow and thrive? Now the fight has moved to the Oval Office. EFF, Access Now, over a dozen...