3841
New
The latest blog posts to take off on Hacker News. 4,441 posts.
3842
Unsealed Filing Shows DOJ Misled Appeals Court About NSL Gag Orders
A court filing unsealed late Wednesday shows that the U.S. Department of Justice (DOJ) made a highly misleading argument to an appeals court in October during a hearing on the constitutionality of National Security Letters (NSLs). On October 8, the Electronic Frontier Foundation argued before the...
3843
It’s time to extend the US Privacy Act to EU citizens
Last summer’s Snowden revelations not only highlighted the urgent need for surveillance reform but also severely damaged relations between t...
3844
BrowserStack Post Mortem (Shell shocked)
Official transparency report on the November 2014 BrowserStack security breach involving a legacy prototype server (Shellshock). Incident fully resolved. BrowserStack is now SOC 2 Type II, ISO 27001:2022, and GDPR compliant. Trusted by 50,000+ companies.
3845
ISPs Removing Their Customers' Email Encryption
Recently, Verizon was caught tampering with its customer's web requests to inject a tracking super-cookie. Another network-tampering threat to user safety has come to light from other providers: email encryption downgrade attacks. In recent months, researchers have reported ISPs in the US and...
3846
Polaris Privacy Initiative to Accelerate User-focused Privacy Online
At Mozilla, we believe that an individuals’ privacy on the Internet cannot be treated as optional. Our Privacy Principles guide us with the design of each of our products and ...
3847
Thoughts and Concerns about Operation Onymous
What happened Recently it was announced that a coalition of government agencies took control of...
3848
Libtls – New TLS API from LibreSSL
tls_init , tls_config_new , tls_config_free , tls_config_error — initialize TLS client and server API
3849
GnuPG - What’s new in 2.1
A possibly revised version of this article can be found at: https://gnupg.org/faq/whats-new-in-2.1.html
3850
$300k for Cracking Telegram Encryption
$300,000 for cracking #Telegram encryption
3851
Verizon Injecting Perma-Cookies to Track Mobile Customers, Bypassing Privacy Controls
Verizon users might want to start looking for another provider. In an effort to better serve advertisers, Verizon Wireless has been silently modifying its users' web traffic on its network to inject a cookie-like tracker. This tracker, included in an HTTP header called X-UIDH, is sent to every...
3852
New NSA Documents Shine More Light into Black Box of Executive Order 12333
What is arguably the most powerful of the U.S. government’s surveillance authorities is also the most secretive, and it operates with the least amount of oversight.
3853
3854
3855
I’m Terrified of My New TV
From facial recognition to personal data collection, this thing is downright scary -- and so are the implications.
3856
3857
Government Authority Intended for Terrorism is Used for Other Purposes
The Patriot Act continues to wreak its havoc on civil liberties. Section 213 was included in the Patriot Act over the protests of privacy advocates and granted law enforcement the power to conduct a search while delaying notice to the suspect of the search. Known as a “sneak and peek” warrant, law...
3858
The Case of the Modified Binaries
SUMMARY After creating and using a new exitmap module, I found downloaded binaries being patched through a Tor exit node in Russia. Tor is a wonderful tool for protecting the identity of journalists, their sources, and even regular users around the world; however, anonymity does
3859
EFF Relaunches Surveillance Self-Defense Guide
We’re thrilled to announce the relaunch of Surveillance Self-Defense (SSD), our guide to defending yourself and your friends from digital surveillance by using encryption tools and developing appropriate privacy and security practices. The site launches today in English, Arabic, and Spanish, with...
3860
New AWS Directory Service
Virtually every organization uses a directory service such as Active Directory to allow computers to join domains, list and authenticate users, and to locate and connect to printers, and other network services including SQL Server databases. A centralized directory reduces the amount of administrative work that must…
3861
Troubling Arguments from the Government in Smith v. Obama
We’ve filed our reply brief in the appeal of Smith v. Obama, our case challenging the NSA’s mass telephone records collection on behalf of Idaho nurse Anna Smith. The case will be argued before the Ninth Circuit Court of Appeal on December 8, 2014 in Seattle, and the public is welcome to attend....
3862
Strengthening 2-Step Verification with Security Key
2-Step Verification offers a strong extra layer of protection for Google Accounts. Once enabled, you’re asked for a verification code from...
3863
China collecting Apple iCloud data
Fighting censorship with technology since 2011. We use AI to monitor censorship and expand free speech worldwide.
3864
Tor Browser 4.0 is released
Update (Oct 22 13:15 UTC): Windows users that are affected by Tor Browser crashes might try to...
3865
Docker 1.3 is out
Docker is a founding member of the Blueprint Alliance, a 12-company reference architecture for securing AI agents, built around four governance questions.
3866
Drupal 7 SQL Injection Vulnerability
SektionEins GmbH www.sektioneins.de -= Security Advisory =- Advisory: Drupal - pre Auth SQL Injection Vulnerability Release Date: 2014/10/15 Last
3867
3868
3869
Passwordless authentication: Secure, simple, and fast to deploy
Passwordless is an authentication middleware for Node.js that improves security for your users while being fast and easy to deploy. The last months were very exciting for everyone interested in ...
3870
This POODLE bites: exploiting the SSL 3.0 fallback
Today we are publishing details of a vulnerability in the design of SSL version 3.0. This vulnerability allows the plaintext of secure conn...