2041
We View Nikola’s Response as a Tacit Admission of Securities Fraud
Milton should be working with the formerly big 3. He is just another fraud like musk…
New
The latest blog posts to take off on Hacker News. 4,441 posts.
2042
Your Phone Is Your Castle
Purism makes premium phones, laptops, mini PCs and servers running free software on PureOS. Purism products respect people's privacy and freedom while protecting their security.
2043
Researchers exploit HTTP/2, WPA3 protocols to stage ‘timeless timing’ attacks
We enable the world to secure the web. Burp Suite, the Web Security Academy, and world-leading research from PortSwigger — the AppSec community’s home.
2044
Nikola: How to Parlay an Ocean of Lies into a Partnership with GM
Initial Disclosure: After extensive research, we have taken a short position in shares of Nikola Corp. This report represents our opinion, and we encourage every reader to do their own due diligence. Please see our full disclaimer at the bottom of the report.
2045
More people are searching for an inbox that protects their privacy
Google searches for privacy-focused Gmail alternatives have steadily increased since 2019. We examine the numbers and potential reasons why.
2046
ProtonDrive Security Model
Learn how Proton Drive uses end-to-end encryption to protect your photos, documents, and other sensitive data.
2047
TikTok and WeChat: Curating and controlling global information flows
Curating and controlling global information flows What’s the Problem? While most major international social media networks remain banned from the Chinese market in the People’s Republic of China (PRC), Chinese social media companies are expanding overseas and building up large global audiences. Some of those…
2048
Threema Goes Open Source
Threema Goes Open Source, Welcomes New Partner
2049
TSA tries out another biometric system
Today the Transportation Security Administration (TSA) announced that it has launched a “pilot” at Washington National Airport (DCA) of yet another scheme for biometric identification and tracking of domestic air travelers.
2050
New Federal Court Rulings Find Geofence Warrants Unconstitutional
Update December 14, 2021: After this post was published, on June 4, 2021, a federal magistrate judge in Kansas issued another opinion denying the government's application for a geofence warrant.Update May 17, 2021: Since this post was published, the court unsealed its July 24, 2020 opinion denying...
2051
2052
SSH Keygen – RSA, DSA, Ecdsa, EdDSA
Comparing SSH keys: RSA, DSA, ECDSA, and Ed25519 explained, with a straight algorithm recommendation and the move from keys to certificates. Read on.
2053
WebBundles harmful to content blocking, security tools, and the open web
Google is proposing a new standard called WebBundles. This standard allows websites to “bundle” resources together, and will make it impossible for browsers to reason about sub-resources by URL. While we appreciate the problems the WebBundles and related proposals aim to solve, we believe there are other, better ways…
2054
SourMint Malicious SDK
The Snyk security research team has made two significant disclosures surrounding the Mintegral SDK. Learn about these SourMint vulnerabilities.
2055
Kali Linux 2020.3
Its that time of year again, time for another Kali Linux release! Quarter #3 - Kali Linux 2020.3. This release has various impressive updates, all of which are ready for immediate download or updating. A quick overview of what’s new since the last release in May 2020: New Shell - Starting the process to switch from…
2056
FritzFrog: A New Generation of Peer-to-Peer Botnets
A Akamai é a empresa de cibersegurança e computação em nuvem que potencializa e protege negócios online.
2057
KeePassXC 2.6.1
KeePassXC Password Manager
2058
Breaking Samsung Firmware, or Turning Your S8/S9/S10 into a DIY “Proxmark”
This post is a companion to the DEF CON 28 video available here https://www.youtube.com/watch?v=aLe-xW-Ws4c Breaking the Firmware of Samsung’s NFC Chips Recently I have been looking into how to push the capabilities of my old smartphones beyond what you could traditionally do just by rooting it. Smartphones contain…
2059
Everything old is new again: binary security of WebAssembly
Daniel Lehmann, University of Stuttgart; Johannes Kinder, Bundeswehr University Munich; Michael Pradel, University of Stuttgart
2060
Rust and C++ Interoperability in Chrome
Chrome engineers are experimenting with Rust. For the foreseeable future, C++ is the reigning monarch in our codebase, and any use of Rust will need to fit in with C++ — not the other way around. This seems to present some C++/ Rust interoperability challenges which nobody else has faced.
2061
Accused spy Alexander Yuk Ching Ma evidently beat the polygraph
On Thursday, 13 August 2020, FBI Special Agent Chris Jensen filed under seal a criminal complaint against Alexander Yuk Ching Ma of Honolulu, Hawaii, charging him with “Conspiracy to Gather and Communicate National Defense Information of the United States to a Foreign Nation.” On Monday, 17 August 2020, the complaint…
2062
How Purism avoids Intel’s Active Management Technology
With recent chipsets, Intel offers a mechanism called Active Management Technology (Intel AMT, part of the “vPro”* featureset, specifically the Intel Management Engine) which, Intel says,“allows IT or managed service providers to better discover, repair, and protect their networked computing assets”. This means…
2063
2064
2065
TSA considers new system for flyers without ID
According to a solicitation to potential contractors published last week, the Transportation Security Administration (TSA) wants to outsource its current questioning of airline passengers without ID , and its decisions about which travelers without ID to allow to travel and which to prevent from flying , to a…
2066
Office Drama on macOS
infecting macOS via macro-laden documents and 0days
2067
Over 400 vulnerabilities on Qualcomm’s Snapdragon chip
Over 400 vulnerabilities on Qualcomm’s Snapdragon chip threaten mobile phones’ usability worldwide With over 3 billion users globally, smartphones are an %
2068
The Linux Backdoor Attempt of 2003 (2013)
Josh wrote recently about a serious security bug that appeared in Debian Linux back in 2006, and whether it was really a backdoor inserted by the NSA. (He concluded that it probably was not.) Today I want to write about another incident, in 2003, in which someone tried to backdoor the Linux kernel. This one […]
2069
Exploiting Android Messengers with WebRTC
Posted by Natalie Silvanovich, Project ZeroThis is a three-part series on exploiting messenger ap...
2070
Pysa: An open source tool to detect and prevent security issues in Python code
Today, we are sharing details about Pysa, an open source static analysis tool we’ve built to detect and prevent security and privacy issues in Python code. Last year, we shared how we built Zoncola…