2431
How to Find Hidden Cameras in Your Airbnb
How to Find Hidden Cameras in your AirBNB, Author: Johannes Ullrich
New
The latest blog posts to take off on Hacker News. 4,441 posts.
2432
2433
QCSuper: A tool for capturing 2G/3G/4G air traffic on Qualcomm-based phones
QCSuper, an open-source tool, helps capture mobile network frames from Qualcomm-based Android devices, enabling analysis in Wireshark and more.
2434
When it comes to composition and length, passwords mostly don't matter
When it comes to composition and length, your password (mostly) doesn’t matter.
2435
Camera and microphone require HTTPS in Firefox 68
As of Firefox 68—releasing next week—camera and microphone will require an https connection to work. Access from insecure http will cease to work, matching how Chrome works. Camera and microhone are powerful features, and Firefox will now only expose them in secure contexts, a security and privacy improvement. Largely…
2436
2437
RSA is a fragile cryptosystem
Here at Trail of Bits we review a lot of code. From major open source projects to exciting new proprietary software, we’ve seen it all. But one common denominator in all of these systems is that for some inexplicable reason people still seem to think RSA is a good cryptosystem to use. Let me save […]
2438
2439
Attunity Data Leak: Vendor for half the Fortune 100 exposed terabyte of backups
Backups ensure data continuity, but they're also a surface of risk. See how Fortune 100 vendor Attunity exposed nearly a terabyte of internal backups.
2440
Tightening up Privacy in Matrix
Matrix, the open protocol for secure decentralised communications
2441
Attempts to Censor AntiPolygraph.org
AntiPolygraph.org has received a rather unpleasant letter from James D’Loughy, a lawyer representing NITV Federal Services, LLC (NITV), which markets a scientifically baseless voice-based lie detector called the “Computer Voice Stress Analyzer,” and its president, self-described “Renaissance Man” “Dr.” Charles Humble…
2442
Open Letter from the OpenID Foundation to Apple Regarding Sign in with Apple
June 27, 2019Mr. Craig Federighi Apple Senior Vice President of Software Engineering One Apple Park Way Cupertino, CA 95014RE: Open Letter from the OpenID Foundation to Apple Regarding Sign In with AppleDear Mr. Federighi,The OpenID Foundation applauds Apple’s efforts to allow users to login to third-party mobile and…
2443
AMD Responds to WSJ ‘Keys to the Kingdom’ Story
A AMD oferece soluções de computação adaptativa e de alto desempenho de liderança para promover IA de data center, PCs com IA, dispositivos de borda inteligentes, jogos e muito mais.
2444
OS X/Linker: New Mac malware attempts zero-day Gatekeeper bypass
Last week, Intego researchers discovered new Mac malware, OSX/Linker, that attempts to leverage a recently disclosed zero-day flaw in macOS' Gatekeeper protection. Let's examine what we know about this latest Mac malware campaign. What is the back story? Before digging into the OSX/Linker malware, it would be helpful…
2445
EC2 Instance Connect
Discover more about what's new at AWS with Introducing Amazon EC2 Instance Connect
2446
Hey advertisers, track this
If it feels like the ads chasing you across the internet know you a little too well, it’s because they do (unless you’re an avid user of ad blockers, i
2447
AWS VPC Traffic Mirroring
Running a complex network is not an easy job. In addition to simply keeping it up and running, you need to keep an ever-watchful eye out for unusual traffic patterns or content that could signify a network intrusion, a compromised instance, or some other anomaly. VPC Traffic Mirroring Today we are launching VPC…
2448
AWS Control Tower
Earlier this month I met with an enterprise-scale AWS customer. They told me that they are planning to go all-in on AWS, and want to benefit from all that we have learned about setting up and running AWS at scale. In addition to setting up a Cloud Center of Excellence, they want to set up […]
2449
AMP for email is bad
The US antitrust complaint against Google shows that the claim 'to improve speed with AMP' was false from the start. It is simply a measure to increase ad revenue.
2450
Making Containers More Isolated: An Overview of Sandboxed Container Technologies
Currently available container-based infrastructure has limitations because containers are not truly sandboxed and share the host OS kernel. The root of the problem is the weak separation between containers when the host OS creates a virtualized userland for each container. This blog covers four unique projects from…
2451
2452
Gmail confidential mode is not secure or private
Privacy experts say Gmail confidential mode is neither secure nor private because it does not use end-to-end encryption.
2453
2454
Getting 2FA Right in 2019
Since March, Trail of Bits has been working with the Python Software Foundation to add two-factor authentication (2FA) to Warehouse, the codebase that powers PyPI. As of today, PyPI members can enable time-based OTP (TOTP) and WebAuthn (currently in beta). If you have an account on PyPI, go enable your preferred 2FA…
2455
Privacy-friendly alternatives to Google
Google has become synonymous with the internet, offering services from search engines to email, cloud storage, and more.
2456
2457
DPAPI security flaw in Windows 10
Show blog article
2458
WireGuard for Windows Pre-Alpha Is Available
Users of kernels < 5.6 may also choose wireguard-lts or wireguard-dkms + linux-headers , depending on which kernel is used.
2459
Ukrainian Billionaires Allegedly Laundered Money in the US
Ukraine’s largest bank is taking its battle with its former owners to US shores. In a civil lawsuit filed in the state court of Delaware, PrivatBank accuses Ihor Kolomoisky and Gennady Bogolyubov, the billionaires who owned the bank before it was nationalized three years ago, of large-scale money laundering in the…
2460
Web Request and Declarative Net Request: Explaining the impact on Extensions
The Story So Far As part of an effort to increase user security and privacy, Chrome is planning a number of changes to the extensions pla...