3961
New
The latest blog posts to take off on Hacker News. 4,441 posts.
3962
3963
How we got read access on Google’s production servers
This is the original writeup on how Detectify security researchers gained read access on Google's production servers.
3964
3965
3966
Were Intelligence Agencies Using Heartbleed in November 2013?
Yesterday afternoon, Ars Technica published a story reporting two possible logs of Heartbleed attacks occurring in the wild, months before Monday's public disclosure of the vulnerability. It would be very bad news if these stories were true, indicating that blackhats and/or intelligence agencies...
3967
3968
3969
OpenSSL Heartbleed Security Update
Yesterday the OpenSSL Project released an update to address the CVE-2014-0160 vulnerability, nicknamed “Heartbleed.” This serious vulnerability affects a..
3970
3971
3972
3973
3974
3975
3976
Huawei and Cisco's Source Code: Correcting the Record
Last week, I wrote about statements made by Charles Ding, Huawei’s Senior Vice President and Chief Representative in the U.S., Mr. Ding explained the
3977
3978
Microsoft Says: Come Back with a Warrant, Unless You’re Microsoft
Update (March 28, 2014): Microsoft has announced a new policy which is described in a new post. EFF has long argued that law enforcement agencies must get a warrant when they ask Internet companies for the content of their users’ communications. In 2013, as part of our annual Who Has Your Back...
3979
Npm security post-mortem
npm Blog (Archive); updates from the npm team are now published on the GitHub Blog and the GitHub Changelog
3980
Los Angeles Cops Argue All Cars in LA Are Under Investigation
Do you drive a car in the greater Los Angeles Metropolitan area? According to the L.A. Police Department and L.A. Sheriff’s Department, your car is part of a vast criminal investigation. The agencies took a novel approach in the briefs they filed in EFF and the ACLU of Southern California’s...
3981
Google Docs Users Targeted by Phishing Scam
Broadcom Community - VMTN, Mainframe, Symantec, Carbon Black
3982
The newest threat on the official Android market
Google Play: Whats the newest threat on the official Android market?
3983
Mexican Protest Site Censored by GoDaddy with the U.S. Embassy's Help
The Mexican website 1dmx.org (mirror here), was set up in the wake of a set of controversial December 1st 2012 protests against the inauguration of the new President of Mexico, Enrique Peña Nieto. For a year, the site served as a source of information, news, discussion and commentary from the point...
3984
3985
Surveillance Evangelist Arrested in California
FBI agents arrested a Mexican tycoon named Jose Susumo Azano Matsura at his Coronado, Calif. home on Wednesday as part of a political bribery investigation based on captured emails, seized banking records, and covertly recorded conversations. The unfolding scandal is soaked in irony: Azano is a...
3986
The New TextSecure: Privacy Beyond SMS
Today’s release of TextSecure is the final step in the transition from a private SMS app to a private asynchronous IM app that does not depend on SMS/MMS. Using the lessons we’ve learned from the SMS environment over the past four years, we’ve developed an open protocol for asynchronous chat that...
3987
3988
How I was able to track the location of any Tinder user
By Max Veytsman At IncludeSec we specialize in application security assessment for our clients, that means taking applications apart and finding really crazy vulnerabilities before other hackers do. When we have time off from client work we like to analyze popular apps to see what we find. Towards the end of 2013 we…
3989
Technical Details Behind a 400Gbps NTP Amplification DDoS Attack
On Monday we mitigated a large DDoS that targeted one of our customers. The attack peaked just shy of 400Gbps. We've seen a handful of other attacks at this scale, but this is the largest attack we've seen that uses NTP amplification.
3990
Total security in a PostgreSQL database
The technologies used to build or run their apps