New
The latest blog posts to take off on Hacker News. 4,441 posts.
Shedding Too Much Light on a Microcontroller's Firmware Protection (2017)
Proceedings of the 11th USENIX Workshop on Offensive Technologies (WOOT '17) - Vancouver, BC, Canada CVE number 2017-18347
Credit card thieves using free-to-play apps to launder their ill-gotten gains
This MacKeeper report will tell you about 6 major data breaches that happened in 2018.
Riot Games Approach to Anti-Cheat
Combating cheats is an ever-evolving arms race. The scope and complexity of cheat development grows every year along with the stakes in online gaming. The pressure is on for game studios to level up when it comes to detecting and preventin…
Mailinator.com: Anatomy of a Spammy Campaign
Mailinator is a popular disposable email service. It's also become a great tool for QA Teams to test email receipt, acknowledgment, authen...
Mitigating Spectre with Site Isolation in Chrome
Posted by Charlie Reis, Site Isolator Speculative execution side-channel attacks like Spectre are a newly discovered security risk for web...
Implementing Open Source Container Security, Part 1: Runtime Security
Expert insight, best practices, and advice on Secure DevOps, security for containers, Kubernetes, and cloud services. Review Sysdig blog posts today!
Postmortem for Malicious Packages Published on July 12th, 2018
A pluggable and configurable linter tool for identifying and reporting on patterns in JavaScript. Maintain your code quality with ease.
Shutting Down the BGP Hijack Factory
Oracle Blog
Yes, Amazon Is Tracking People
In order to protect civil liberties without hampering innovation, lawmakers should require public input before surveillance tools are deployed and ensure that facial recognition databases are purged of data related to law-abiding people.
Police search homes of Zwiebelfreunde board members and OpenLab in Augsburg
On June 20th, board members of the „Zwiebelfreunde“ association in multiple German cities had their homes searched under the dubious pretence that they were „witnesses“ while their computers and...
Digicert Withdraws from the CA Security Council
DigiCert is electing to withdraw from the CA Security Council (CASC) as we believe CASC is moving in a direction that DigiCert does not support. Read more.
EFF Sues to Invalidate FOSTA, an Unconstitutional Internet Censorship Law
We are asking a court to declare the Allow States and Victims to Fight Online Sex Trafficking Act of 2017 (“FOSTA”) unconstitutional and prevent it from being enforced. The law was written so poorly that it actually criminalizes a substantial amount of protected speech and, according to experts,...
Against privacy defeatism: why browsers can still stop fingerprinting
In this post I’ll discuss how a landmark piece of privacy research was widely misinterpreted, how this misinterpretation deterred the development of privacy technologies rather than spurring it, how a recent paper set the record straight, and what we can learn from all this. The research in question is about browser…
AntiPolygraph.org appears to have been “de-listed” from Google on key searches
Search DuckDuckGo for “polygraph” and you’ll find AntiPolygraph.org, which hosts more documentation on polygraphs than any other site on the Internet, in the top 10 results. The same is true for searches on “polygraph” with Microsoft’s Bing search engine (in the United States), with Russia’s Yandex search engine, and…
Exposing the secret Office 365 detailed activity logs and forensics tool
An ethical crisis in the digital forensics industry came to a head last week with the release of new details on Microsoft’s undocumented “Activities” API. A previously unknown trove of access and activity logs held by Microsoft allows investigators to track Office 365 mailbox activity in minute detail. Following a…
Wi-Fi Alliance Introduces Wi-Fi Certified WPA3 Security
Next generation Wi-Fi® security for personal and enterprise networks
Testing Firefox Monitor, a New Security Tool
From shopping to social media, the average online user will have hundreds of accounts requiring passwords. At the same time, the number of user data breaches occurring each year continues ...
Reverse Shell from an OpenVPN Configuration File
While doing background research on OpenVPN I stumbled upon an interesting question on Stack Exchange.
Keybase Exploding Messages
You're reading the Keybase blog. There are more posts . When you're done, you can install Keybase .
MacOS Caches Data from Encrypted Hard Drives
apple's 'quicklook' cache, may leak encrypted data
The Tapplock IoT padlock has multiple security vulnerabilities
The Sophos Blog