1
New
The latest blog posts to take off on Hacker News. 71 posts.
2
Multiple programming languages vulnerable to DoS via hash algorithm collision
oCERT-2011-003 multiple implementations denial-of-service via hash algorithm collision
3
Sovereign Keys, EFF's proposal to replace the certificate authority model
This is part 2 of a series on the security of HTTPS and TLS/SSL. [Part 1] In a previous post, we discussed some structural insecurities in HTTPS and TLS/SSL, and how those are beginning to pose serious problems for the security of the Web. In this post I will introduce a new proposal called "...
4
An Open Letter From Internet Engineers to the U.S. Congress
Today, a group of 83 prominent Internet inventors and engineers sent an open letter to members of the United States Congress, stating their opposition to the SOPA and PIPA Internet blacklist bills that are under consideration in the House and Senate respectively. We, the undersigned, have played...
5
EFF: Some Facts About Carrier IQ
There has been a rolling scandal about the Carrier IQ software installed by cell phone companies on 150 million phones, mostly within the United States. Subjects of outright disagreement have included the nature of the program, what information it actually collects, and under what circumstances....
6
7
CNET Injecting Malware into Downloads
Download.com has been caught inserting malware/adware into the 3rd party software it distributes
8
9
EU Court of Justice: Censorship in Name of Copyright Violates Fundamental Rights
Paris, November 24th, 2011 — The European Court of Justice just rendered a historic decision in the Scarlet Extended case, which is crucial for the future of rights and freedoms on the Internet. The Court ruled that forcing Internet service providers to monitor and censor their users' communications
10
Carrier IQ Tries to Censor Research With Baseless Legal Threat
Last week, security researcher Trevor Eckhart posted an analysis of software produced by Carrier IQ, which describes itself as "the world's leading provider of Mobile Service Intelligence solutions." Eckhart concluded that the software, which comes by default on many mobile devices and runs quietly...
11
12
The implications of UEFI "Secure Boot" for Linux users
Last month Steven Sinofsky from Microsoft announced new requirements for manufacturers wanting to ship Windows 8 systems, including a feature called “Secure Boot”. Canonical, together with Red Hat, today publishes a white paper highlighting the implications of these requirements for users and manufacturers. The paper…
13
Google to default to SSL version for logged in users
Insights from Googlers into our products, technology, and the Google culture
14
15
16
German Chaos Computer Club analyzes and releases government malware
The largest European hacker club, "Chaos Computer Club" (CCC), has reverse engineered and analyzed a "lawful interception" malware program used by German police forces. It has been found in the...
17
MySQL.com currently Hacked (and serving javascript malware)
It looks like the MySQL.com website is currently hacked and compromised with a JavaScript malware (and serving malware to anyone visiting it). Our scanner identified…
18
How to Force Facebook into Handing Over their Secret Tracking Data
According to European data protection law every individual has the right to get a copy of all personal data a company holds about him (right to access). This law is applicable to Facebook too. Every user with a residence outside of the US and Canada has a contract with “Facebook Ireland Limited”, based in Dublin…
19
Iran blocks Tor; Tor releases same-day fix
The short version: Tor relays and bridges should upgrade to Tor 0.2.2.33 or Tor 0.2.3.4-alpha so...
20
UTorrent.com compromised, malware added to installer
This morning on 9/13/2011 at approximately 4:20 a.m. Pacific Daylight Time (UTC -7), the uTorrent.com and BitTorrent.com Web servers were compromised. Our standard Windows software download was replaced with a type of fake antivirus “scareware” program. (UPDATE: See below for removal instructions.) Just…
21
DigiNotar Damage Disclosure (with full list of issued certs)
About an hour ago I was contacted by the Dutch Government with more details about the DigiNotar...
22
DigiNotar root CA trust removal follow-up
Earlier this week we revoked our trust in the DigiNotar certificate authority from all Mozilla software. This is not a temporary suspension, it is a complete removal from our trusted ...
23
An update on attempted man-in-the-middle attacks
Posted by Heather Adkins, Information Security Manager Today we received reports of attempted SSL man-in-the-middle (MITM) attacks again...
24
25
26
Do not upgrade to PHP 5.3.7 due to a bug in crypt()
PHP is a popular general-purpose scripting language that powers everything from your blog to the most popular websites in the world.
27
28
29
Can we believe our eyes? Misleading people with Unicode.
Access to this page requires authorization. You can try signing in or changing directories .
30
H.R.1981, the end of online privacy as we know it.
Space Cybersecurity has become a prominent topic in the news, particularly when it comes to protecting space-related assets and technologies.