2401
Down the Rabbit-Hole
Posted by Tavis Ormandy, Security Research Over-Engineer.“Sometimes, hacking is just someon...
New
The latest blog posts to take off on Hacker News. 4,441 posts.
2402
2403
Ransomware-ing a DSLR Camera
Research by: Eyal Itkin TL;DR Cameras. We take them to every important life event, we bring them on our vacations, and we store them in a protective case to keep them safe during transit. Cameras are more than just a tool or toy; we entrust them with our very memories, and so they are very important […]
2404
DEF CON and Stack Overflow: What Our Traffic Says About Cybersecurity
Stack Overflow traffic during DEF CON shows what technologies are trending in the hacker community
2405
2406
2407
Group sex app leaks locations, pics and personal details
We’ve seen some pretty poor security in dating apps over recent years; breaches of personal data, leaking users locations and more. But this one really takes the biscuit: probably the worst security for any dating app we’ve ever seen And it’s used for arranging threesomes. It’s 3fun. It exposes the near real time…
2408
First modern coreboot server platform
With our expertise we create security solutions which are robust and easy to use, leveraging leading open source technology.
2409
2410
The Fully Remote Attack Surface of the iPhone
Posted by Natalie Silvanovich, Project ZeroWhile there have been several rumours and reports of f...
2411
2412
Basic Electron Framework Exploitation
A Accenture oferece oportunidades que surgem a partir da disrupção tecnológica em todas as indústrias, em todos os países, todos os dias. Saiba mais!
2413
Steam Windows Client Local Privilege Escalation 0day
Английская версия <a href="https://habr.com/ru/company/pm/blog/462479/">статьи</a>, опубликованной в корпоративном блоге на Хабрахабре.
2414
Better Encrypted Group Chat
Broadly, an end-to-end encrypted messaging protocol is one that ensures that only the participants in a conversation, and no intermediate servers, routers, or relay systems, can read and write messages. An end-to-end encrypted group messaging protocol is one that ensures this for all participants in a conversation of…
2415
Decentralized DNS with the Handshake Naming System
Starting since version 1.30, the Mac, Linux, and Windows Private Internet Access (PIA) desktop clients have come with the ability to change the selected
2416
2417
How SAML 2.0 Authentication Works
At its core, Security Assertion Markup Language (SAML) 2.0 is a means to exchange authorization and authentication information between services. Learn how saml works.
2418
Report on Microsoft Office and Windows software: still privacy risks remaining
On behalf of the Dutch Ministry of Justice and Security, Privacy Company has investigated the privacy risks related to the use of Microsoft Windows 10 Enterprise, Office 365 ProPlus and Office Online, as well as the mobile Office apps. With the Ministry’s permission, we are publishing two blog posts about our…
2419
2420
2421
2422
2423
2424
An Analysis of WeChat’s Realtime Image Filtering in Chats
In this work, we study how Tencent implements image filtering on WeChat. We found that Tencent implements realtime, automatic censorship of chat images on WeChat based on what text is in an image and based on an image’s visual similarity to those on a blacklist. Tencent facilitates this realtime filtering by…
2425
Why Rust for safe systems programming
In this series , we have explored the need for proactive measures to eliminate a class of vulnerabilities and walked through some examples of memory safety issues we’ve found in Microsoft code that could have been avoided with a different language. Now we’ll peek at why we think that Rust represents the best…
2426
Understanding Docker Container Escapes
Trail of Bits recently completed a security assessment of Kubernetes, including its interaction with Docker. Felix Wilhelm’s recent tweet of a Proof of Concept (PoC) “container escape” sparked our interest, since we performed similar research and were curious how this PoC could impact Kubernetes. Quick and dirty way…
2427
2428
Google Chrome is ditching its XSS detection tool
The Sophos Blog
2429
2430
A proactive approach to more secure code
Microsoft Security Response Center Blog2019132 points28 commentscited by 17Security & Privacy details
What if we could eliminate an entire class of vulnerabilities before they ever happened?