751
New
The latest blog posts to take off on Hacker News. 4,439 posts.
752
Reversing the AMD Secure Processor (PSP) – Part 2: Cryptographic Co-Processor
Part one: https://dayzerosec.com/blog/2023/04/17/reversing-the-amd-secure-processor-psp.html This is a follow-up part 2 to my previous post on the AMD Secure Processor (formerly known as the Platform Security Processor or "PSP"). In that post, I mentioned that the Cryptographic Co-Processor (CCP) is an essential…
753
From object transition to RCE in the Chrome renderer
In this post, I'll exploit CVE-2024-5830, a type confusion in Chrome that allows remote code execution (RCE) in the renderer sandbox of Chrome by a single visit to a malicious site.
754
Federal appeals court finds geofence warrants “categorically” unconstitutional
In a major decision on Friday, the federal Fifth Circuit Court of Appeals held that geofence warrants are “categorically prohibited by the Fourth Amendment.” Closely following arguments EFF has made in a number of cases, the court found that geofence warrants constitute the sort of “general,...
755
Entropic Engineering DEFCON 32 Statement
Entropic Engineering was approached in January ‘24 by the DEFCON Badge Team, who were looking for a small company to partner with. They expressed that they specifically wanted to work with us as a woman-owned, queer- and POC-driven engineering firm to develop an electronic badge with a gaming element for this year’s…
756
EFF’s concerns about the UN Cybercrime Convention
Update: This post has been updated to clarify the scope of the compelled assistance provisions and the broad nature of criminalization and electronic evidence gathering. The final version of the draft convention can still be used to expand the reach of repression under the pretext of combating...
757
Security and privacy risks of public JavaScript CDNs
Once upon a time, loading common scripts & styles from a public CDN like cdnjs or Google's Hosted Libraries was a 'best practice' - a great way to instantly...
758
USPS text scammers duped his wife, so he hacked their operation
How someone I don't know hacked the scammers back
759
How we found and fixed an eBPF Linux kernel vulnerability
This blog post takes a look at the years where eBPF was one of the kernel subsystems that grabbed the attention of a lot of security researchers. We will tell the story of how we discovered CVE-2023-2163, what our root-cause analysis process looked like, and what we did to ultimately fix the issue.
760
How to talk to your parents about hardware memory safety
Some conversations are difficult to have with members of older generations who grew up with different social norms. In particular, when you’re talking to people who grew up with PDP-11s with their completely flat memory, or Lisp machines or Burroughs Large Systems with their deeply opinionated and language-integrated…
761
What Manifest V3 means for Brave Shields and the use of extensions in the Brave browser
Brave is committed to maintaining Manifest V2 support, allowing users to keep their favorite extensions functioning beyond the industry-wide deprecation.
762
763
Proton announces release of a new VPN protocol, "Stealth"
Stealth is a new VPN protocol from Proton VPN that overcomes censorship in restrictive countries.
764
A cryptographically secure bootloader for RISC-V in Rust
A summary of a Codethink sponsored project which implements a cryptographically secure bootloader, written in Rust, for RISC-V.
765
Make your electronics tamper-evident
If the police ever have physical access to an electronic device like a laptop, even for five minutes , they can install hardware keyloggers, create images of the storage media, or otherwise trivially compromise it at the hardware, firmware, or software level. One way to minimize this risk is to make devices…
766
R5N - Obfuscated mesh routing on hostile networks.
This document contains the R 5 N DHT technical specification. R 5 N is a secure distributed hash table (DHT) routing algorithm and data structure for decentralized applications. It features an open peer-to-peer overlay routing mechanism which supports ad-hoc permissionless participation and support for topologies in…
767
Threat actor abuses Cloudflare tunnels to deliver remote access trojans
Key findings Proofpoint has observed an increase in malware delivery via TryCloudflare Tunnel abuse. The activity is financially motivated and delivers exclusively remote
768
Our audit of Homebrew
This is a joint post with the Homebrew maintainers; read their announcement here! Last summer, we performed an audit of Homebrew. Our audit’s scope included Homebrew/brew itself (home of the brew CLI), and three adjacent repositories responsible for various security-relevant aspects of Homebrew’s operation…
769
Swift Homomorphic Encryption
We’re excited to announce a new open source Swift package for homomorphic encryption in Swift: swift-homomorphic-encryption.
770
DigiCert Revocation Incident (CNAME Domain Validation)
DigiCert will be revoking certificates that did not have proper Domain Control Verification (DCV). Before issuing a certificate to a customer, DigiCert validates the customer’s control or ownership over the domain name for which they are requesting a certificate using one of several methods approved by the CA/Browser…
771
Microsoft technical breakdown of CrowdStrike incident
We examine the recent CrowdStrike outage and provide a technical overview of the root cause.
772
Unfashionably secure: why we use isolated VMs
Why we use isolated VMs as a hard security boundary.
773
Anyone can access deleted and private repository data on GitHub
You can access data from deleted forks, deleted repositories and even private repositories on GitHub. And it is available forever. This is known by GitHub, and intentionally designed that way.
774
Preliminary Post Incident Review
Read the preliminary post incident report regarding the CrowdStrike Falcon content update affecting Windows hosts.
775
What "consent" looks like for the DEA and TSA
The Drug Enforcement Agency (DEA) and the Transportation Security Administration (TSA) have been working together for years to steal travelers’ money.
776
Intent to end OCSP service
Today we are announcing our intent to end Online Certificate Status Protocol (OCSP) support in favor of Certificate Revocation Lists (CRLs) as soon as possible. OCSP and CRLs are both mechanisms by which CAs can communicate certificate revocation information, but CRLs have significant advantages over OCSP. Let’s…
777
United States discloses nuclear warhead numbers; restores nuclear transparency
The Federation of American Scientists applauds the United States for declassifying the number of nuclear warheads in its military stockpile and the number of retired and dismantled warheads.
778
779
780
Google Distributed Cloud air-gapped appliance
The Google Distributed Cloud air-gapped appliance is an integrated hardware and software solution that lets you run workloads at the tactical edge.