New
The latest blog posts to take off on Hacker News. 4,441 posts.
EFF Challenges New Jersey Subpoena Issued to MIT Student Bitcoin Developers
As the popularity of Bitcoins has increased, government officials are concerned about criminal activity associated with the virtual currency. But a recent subpoena issued by the New Jersey Division of Consumer Affairs to 19-year-old Bitcoin developer and MIT student Jeremy Rubin goes too far, and...
Chaos Computer Club files criminal complaint against the German Government
On Monday, the Chaos Computer Club (CCC) and the International League for Human Rights (ILMR), have filed a criminal complaint with the Federal Prosecutor General's office. The complaint is...
Did this Tor developer become a victim of NSA's laptop interception program?
UPDATE (1/27/14) : Shepard says she reached out to the seller and was told they entered the wrong tracking number. She hasn't received the package yet. She also says the new tracking details show that it has now been sent to Seattle, but to the wrong zip code, and "didn't ship until after [she] got the original…
HTTP Security headers you should be using
Van Pathé tot KLM en de Rijksoverheid: ontdek hoe Dawn Technology met maatwerk software alledaagse ervaringen slimmer, sneller en beter maakt.
TCP backdoor 32764 – how we could patch the Internet (or part of it)
Eloi Vanderbéken recently found a backdoor on some common routers, which is described on his GitHub here. Basically, a process that listens on the 32764 TCP port runs, sometimes accessible from the WAN interface. We scanned the v4 Internet to look for the routers that have this backdoor wild open, and gathered some…
Kids, this is story of How I Met... my VPS hacked
Just recently I published my technical goals for 2014 and one of them was to learn more about security. Well it couldn’t have been more appropriate, my Virtual Private Server (VPS) just got hacked, for the second time (I use the VPS to host a Java web application). The first time, I basically rebuilt my server and…
TrueCrypt Master Key Extraction And Volume Identification
One of the disclosed pitfalls of TrueCrypt disk encryption is that the master keys must remain in RAM in order to provide fully transparent...
FFmpeg and a thousand fixes
Posted by Mateusz Jurczyk and Gynvael Coldwind, Information Security Engineers At Google, security is a top priority - not only for our ow...
This working group has failed
Search IETF mail list archives
Court Rules No Suspicion Needed for Laptop Searches at Border
Decision Dismisses ACLU Lawsuit Challenging DHS Search Policy as Unconstitutional...
Snapchat - GibSec Full Disclosure
A series of nicely formatted documents about Snapchat by GibSec.
Telegram secret chat geolocation leak
UPD: I've just received confirmation from Telegram, that a patched version was released a few hours ago. Here is the patch on github....
Crowdsourcing a More Secure Future
A guy from Russia just earned $100,000. Crowdsourcing a More Secure Future
Browser Extension Password Managers Exposing Passwords Everywhere
Advancements in password cracking and frequent theft of password databases endanger single-factor password authentication systems. Password managers are one of the only tools available that can help users remember unique high-entropy passwords, and other secrets such as credit card numbers, for a large number of…
Trevor Perrin requests removal of NSA from IETF Crypto Review
Search IETF mail list archives
GnuPG - 16 Years of protecting privacy
In case you are not automatically redirected, please follow this link to https://gnupg.org/blog .
BitHub = Bitcoin + GitHub. An experiment in funding privacy OSS
At Open Whisper Systems, we often get emails from people who’d like to donate money to the project. For an OSS project, particularly one that aspires to a collective sense of ownership, handling donations is not always entirely straightforward. The fundamental contradiction is that while donatio...
Google Removes Vital Privacy Feature From Android, Claims Release Was Accidental
Yesterday, we published a blog post lauding an extremely important app privacy feature that was added in Android 4.3. That feature allows users to install apps while preventing the app from collecting sensitive data like the user's location or address book.[caption]The App Ops interface removed in...