1
Possible upcoming attempts to disable the Tor network
The Tor Project has learned that there may be an attempt to incapacitate our network in the next...
New
The latest blog posts to take off on Hacker News. 187 posts.
2
EFF in Court to Argue NSA Collection from Internet Backbone Is Unconstitutional
Oakland - The Electronic Frontier Foundation (EFF) will argue on Friday before a federal court that the National Security Agency (NSA) is violating the Fourth Amendment by copying and searching data that it collects by tapping into the Internet backbone. The hearing on a motion for partial summary...
3
4
An Update to End-To-End
Posted by Stephan Somogyi, Product Manager, Security and Privacy In June, we announced and launched End-To-End , a tool for those who need...
5
Federal Court Throws Out Six Weeks of Warrantless Video Surveillance
Update: On December 15, Judge Edward Shea issued his written opinion in United States v. Vargas, which you can read here. The public got an early holiday gift today when a federal court agreed with us that six weeks of continually video recording the frontyard of someone's home without a search...
6
7
Illinois General Assembly passes bill to ban citizens from recording police
The Illinois General Assembly just passed a bill that would prevent citizens from recording the police.
8
Chaos Computer Club Website Blocked by UK ISPs
A significant portion of British citizens are currently blocked from accessing the Chaos Computer Club's (CCC) website. On top of that, Vodafone customers are blocked from accessing the ticket sale...
9
Apple CoreGraphics framework logging input data to /tmp
Security researcher Kent Howard reported an Apple issue present in OS X 10.10 (Yosemite) where log files are created by the CoreGraphics framework of OS X in the /tmp local directory. These log files contain a record of all inputs into Mozilla programs during their operation. In versions of OS X from versions 10.6…
10
Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”
Posted by Vinay Shet, Product Manager, reCAPTCHA reCAPTCHA protects the websites you love from spam and abuse. So, when you go online—say...
11
Incident Report – DDoS Attack
On Monday, December 1st, 2014, we experienced a major volumetric DDoS attack aimed at a customer's domain. Here is our full report.
12
A Shark on the Network
DISCLAIMER: I do not condone monitoring network traffic with intent to spy or otherwise cause harm to people. My interest in the techniques described below is academic. I write in the hope that I can improve Internet security, or at least increase public awareness of vulnerabilities. If you are attempting to replicate…
13
Escaping the Safari sandbox with a kernel GPU bug
Posted by Ian BeerTL;DRAn OS X GPU driver trusted a user-supplied kernel C++ object pointer and c...
14
Regin: Top-tier espionage tool enables stealthy surveillance
Broadcom Community - VMTN, Mainframe, Symantec, Carbon Black
15
A New Malware Detection Tool That Can Expose Illegitimate State Surveillance
Recent years have seen a boom in the adoption of surveillance technology by governments around the world, including spyware that provides its purchasers the unchecked ability to target remote Internet users' computers, to read their personal emails, listen in on private audio calls, record...
16
17
Open Whisper Systems partners with WhatsApp to provide end-to-end encryption
At Open Whisper Systems, our goal is to make private communication simple. For the past three years, we’ve been developing a modern, open source, strong encryption protocol for asynchronous messaging systems, designed to make seamless end-to-end encrypted messaging possible. Today we’re excited ...
18
Launching in 2015: A Certificate Authority to Encrypt the Entire Web
Today EFF is pleased to announce Let’s Encrypt, a new certificate authority (CA) initiative that we have put together with Mozilla, Cisco, Akamai, IdenTrust, and researchers at the University of Michigan that aims to clear the remaining roadblocks to transition the Web from HTTP to HTTPS.Although...
19
The USA Freedom Act: What's to Come and What You Need to Know
Update, Nov 18: The USA Freedom Act does not renew the entirety of the Patriot Act, which consisted of over 100 sections changing numerous electronic surveillance laws. The USA Freedom Act does extend three provisions of the Patriot Act: the "lone wolf" provision, the "roving wire tap" provision,...
20
21
22
Unsealed Filing Shows DOJ Misled Appeals Court About NSL Gag Orders
A court filing unsealed late Wednesday shows that the U.S. Department of Justice (DOJ) made a highly misleading argument to an appeals court in October during a hearing on the constitutionality of National Security Letters (NSLs). On October 8, the Electronic Frontier Foundation argued before the...
23
It’s time to extend the US Privacy Act to EU citizens
Last summer’s Snowden revelations not only highlighted the urgent need for surveillance reform but also severely damaged relations between t...
24
BrowserStack Post Mortem (Shell shocked)
Official transparency report on the November 2014 BrowserStack security breach involving a legacy prototype server (Shellshock). Incident fully resolved. BrowserStack is now SOC 2 Type II, ISO 27001:2022, and GDPR compliant. Trusted by 50,000+ companies.
25
ISPs Removing Their Customers' Email Encryption
Recently, Verizon was caught tampering with its customer's web requests to inject a tracking super-cookie. Another network-tampering threat to user safety has come to light from other providers: email encryption downgrade attacks. In recent months, researchers have reported ISPs in the US and...
26
Polaris Privacy Initiative to Accelerate User-focused Privacy Online
At Mozilla, we believe that an individuals’ privacy on the Internet cannot be treated as optional. Our Privacy Principles guide us with the design of each of our products and ...
27
Thoughts and Concerns about Operation Onymous
What happened Recently it was announced that a coalition of government agencies took control of...
28
Libtls – New TLS API from LibreSSL
tls_init , tls_config_new , tls_config_free , tls_config_error — initialize TLS client and server API
29
GnuPG - What’s new in 2.1
A possibly revised version of this article can be found at: https://gnupg.org/faq/whats-new-in-2.1.html
30
$300k for Cracking Telegram Encryption
$300,000 for cracking #Telegram encryption