1
Snapchat - GibSec Full Disclosure
A series of nicely formatted documents about Snapchat by GibSec.
New
The latest blog posts to take off on Hacker News. 195 posts.
2
Telegram secret chat geolocation leak
UPD: I've just received confirmation from Telegram, that a patched version was released a few hours ago. Here is the patch on github....
3
4
5
6
Crowdsourcing a More Secure Future
A guy from Russia just earned $100,000. Crowdsourcing a More Secure Future
7
Browser Extension Password Managers Exposing Passwords Everywhere
Advancements in password cracking and frequent theft of password databases endanger single-factor password authentication systems. Password managers are one of the only tools available that can help users remember unique high-entropy passwords, and other secrets such as credit card numbers, for a large number of…
8
Trevor Perrin requests removal of NSA from IETF Crypto Review
Search IETF mail list archives
9
GnuPG - 16 Years of protecting privacy
In case you are not automatically redirected, please follow this link to https://gnupg.org/blog .
10
BitHub = Bitcoin + GitHub. An experiment in funding privacy OSS
At Open Whisper Systems, we often get emails from people who’d like to donate money to the project. For an OSS project, particularly one that aspires to a collective sense of ownership, handling donations is not always entirely straightforward. The fundamental contradiction is that while donatio...
11
Google Removes Vital Privacy Feature From Android, Claims Release Was Accidental
Yesterday, we published a blog post lauding an extremely important app privacy feature that was added in Android 4.3. That feature allows users to install apps while preventing the app from collecting sensitive data like the user's location or address book.[caption]The App Ops interface removed in...
12
13
14
Meet Jack. Or, What The Government Could Do With All That Location Data
We now know that the NSA is collecting location information en masse. As we’ve long said, location data is an extremely powerful set of information about people.
15
TextSecure, Now With 10 Million More Users
At Open Whisper Systems, we’re working to both advance the state of the art for secure communication and also reduce the friction required for ordinary people to make use of it. We want everyone to have access to advanced secure communication methods that are as easy and reliable to use as makin...
16
Further improving digital certificate security
Posted by Adam Langley, Security Engineer Late on December 3rd, we became aware of unauthorized digital certificates for several Google do...
17
“No-fly” trial: Closing arguments
Judge William Alsup convened day five of the trial in Ibrahim v. DHS — the first lawsuit challenging a U.S. government “no-fly” order to make it to trial — on Friday morning with the announcement that, “I received this additional material about the [plaintiff’s] daughter and her attempts to come here.”
18
19
Facebook reveals friends list even when it’s set to private
The Sophos Blog
20
Advanced cryptographic ratcheting
At Open Whisper Systems, we’ve been working on improving our encrypted asynchronous chat protocol for TextSecure. The TextSecure protocol was originally a derivative of OTR, with minor changes to accommodate it for transports with constraints like SMS or Push. Some of the recent changes we’ve ...
21
Severing Ties with the NSA
Note: These pages make extensive use of the latest XHTML and CSS Standards . They ought to look great in any standards-compliant modern browser. Unfortunately, they will probably look horrible in older browsers, like Netscape 4.x and IE 4.x. Moreover, many posts use MathML, which is, currently only supported in…
22
NSA's Surveillance Powers Extend Far Beyond Counterterrorism
Time and again we’ve seen the National Security Agency (NSA) defend its vast surveillance apparatus by invoking the spectre of terrorism, discussing its spying powers as a method to keep America safe. Yet, the truth is that counterterrorism is only a fraction of their far broader authority to seek...
23
24
Fake femme fatale dupes IT guys at US government agency
The Sophos Blog
25
Don't use autofill in your browser
What every WordPress site owner can do to improve WordPress security. Even the less tech savvy ones. Read all about in in this article!
26
Fifth Amendment Prohibits Compelled Decryption, New EFF Brief Argues
Encryption is one of the most important ways to safeguard data from prying eyes. But what happens when those prying belong to the government? Can they force you to break your own encryption and provide them with the information they want? In a new amicus brief, we explain that the Fifth Amendment...
27
28
29
Steps You Can Take Right Now Against Internet Surveillance
One of the trends we've seen is how, as the word of the NSA's spying has spread, more and more ordinary people want to know how (or if) they can defend themselves from surveillance online. But where to start? The bad news is: if you're being personally targeted by a powerful intelligence agency...
30
EFF Has Lavabit’s Back in Contempt of Court Appeal
San Francisco - Federal law enforcement officers compromised the backbone of the Internet and violated the Fourth Amendment when they demanded private encryption keys from the email provider Lavabit, the Electronic Frontier Foundation (EFF) argues in a brief submitted Thursday afternoon to the US...