1
Teleport 1.3 adds support for SSH authentication with U2F keys
We are excited to announce that Teleport now supports Universal 2nd Factor out of the box.
New
The latest blog posts to take off on Hacker News. 299 posts.
2
How Referral Spam Like lifehacker.com Gets into Google Analytics
Find out how referral spam in Google Analytics can be produced, why anybody would take time to do that and personality behind the latest spam wave.
3
Doodles, stickers, and censorship circumvention for Signal Android
The latest Signal for Android release includes support for adding doodles, stickers, and text to images. This release also includes support for censorship circumvention in Egypt and the United Arab Emirates.
4
5
Wycheproof – Tests that check cryptographic software for known weaknesses
Posted by Daniel Bleichenbacher, Security Engineer and Thai Duong, Security Engineer We’re excited to announce the release of Project Wyche...
6
7
Tor blocked in Turkey as government cracks down on VPN use
The Turkey Blocks internet censorship watchdog has identified and verified that restrictions on the Tor anonymity network and Tor Browser are now in effect throughout Turkey. Our study indicates that service providers have successfully complied with a government ...
8
Technology in Hostile States: Ten Principles for User Protection
This blog post is meant to generate a conversation about best practices for using cryptography...
9
How is NSA breaking so much crypto? (2015)
There have been rumors for years that the NSA can decrypt a significant fraction of encrypted Internet traffic. In 2012, James Bamford published an article quoting anonymous former NSA officials stating that the agency had achieved a “computing breakthrough” that gave them “the ability to crack current public…
10
11
12
Reversing Go Binaries Like a Pro
GO binaries are weird, or at least, that is where this all started out. While delving into some Linux malware named Rex, I came to the realization that I might need to understand more than I wanted to
13
14
Sharing National Security Letters with the Public
*On August 10, 2017, we updated this post with additional National Security Letters (NSLs) we received where, either through litigation or legislation, we have been free…
15
16
Law Enforcement Uses Border Search Exception as Fourth Amendment Loophole
In recent months, U.S. Customs and Border Protection agents have sought access to private data on the cell phones of two journalists. Such incidents are offensive because they threaten the independence of the press and pose specific risks to confidential sources. This government overreach also...
17
Chrome 56 Beta: “Not Secure” Warning, Web Bluetooth, and CSS Position: Sticky
Unless otherwise noted, changes described below apply to the newest Chrome Beta channel release for Android, Chrome OS, Linux, Mac, and Wi...
18
Belarus finally bans Tor
Country: Belarus Probed ISPs: Beltelecom (AS 6697) Censorship method: TCP injections We have recently heard of network anomalies in Belarus. Tor has been finally blocked in December 2016, although it had been explicitly declared that Tor should be blocked since February 2015. An anonymous cypherpunk has helped to…
19
20
An exploit kit hiding in the pixels of malicious ads
Millions of readers who visit popular news websites have been targeted by a series of malicious ads redirecting them to the Stegano exploit kit.
21
22
Improved Authentication for Email Encryption and Security
Today, we are happy to become the first and only secure email service to support Secure Remote Password (SRP), a much more secure authentication method.
23
Announcing OSS-Fuzz: Continuous Fuzzing for Open Source Software
By Mike Aizatsky, Kostya Serebryany (Software Engineers, Dynamic Tools); Oliver Chang, Abhishek Arya (Security Engineers, Google Chrome); an...
24
25
More Than 1M Google Accounts Breached by Gooligan
As a result of a lot of hard work done by our security research teams, we revealed today a new and alarming malware campaign. The attack campaign, named %
26
Qubes OS Begins Commercialization and Community Funding Efforts
Since the initial launch of Qubes OS back in April 2010, work on Qubes has been funded in several different ways. Originally a pet project, it was first supported by Invisible Things Lab (ITL) out of the money we earned on various R&D and consulting contracts. Later, we decided that...
27
AWS Organizations: Centrally Manage Multiple AWS Accounts
Today, AWS launched AWS Organizations: a new way for you to centrally manage all the AWS accounts your organization owns. Now you can arrange your AWS accounts into groups called organizational units (OUs) and apply policies to OUs or directly to accounts. For example, you can organize your accounts by application…
28
Breaking the Chain
Posted by James Forshaw, Wielder of Bolt Cutters.Much as we’d like it to be true, it seems ...
29
30
Statistician calls for audit to address election hacking fears
Double-check needed before Electoral College cements presidential results on Dec. 19