2971
The design of Chacha20
Chacha20 is a secure, fast, and amazingly simple encryption algorithm. Let's take a look.
New
The latest blog posts to take off on Hacker News. 4,335 posts.
2972
2973
Visiting a site that uses Disqus when not logged in sends URL to Facebook
I was surprised to see the Facebook SDK being loaded in the network tab on my blog when I don't have any Facebook buttons. It turned out to be coming courtesy of Disqus. No wonder Facebook knows everywhere you go!
2974
Dear Obama, from Infosec
Dear President Obama: We are more than willing to believe Russia was responsible for the hacked emails/records that influenced our electio...
2975
Class Breaks
There’s a concept from computer security known as a class break. It’s a particular security vulnerability that breaks not just one system, but an entire class of systems. Examples might be a vulnerability in a particular operating system that allows an attacker to take remote control of every computer that runs on…
2976
2977
Critiques of the DHS and FBI’s Grizzly Steppe Report
On December 29 th , 2016 the White House released a statement from the President of the United States (POTUS) that formally accused Russia of interfering with the US elections, amongst other activities. This statement laid out the beginning of the US’ response including sanctions against Russian military and…
2978
2979
Security Risks of TSA PreCheck
Former TSA Administrator Kip Hawley wrote an op-ed pointing out the security vulnerabilities in the TSA’s PreCheck program: The first vulnerability in the system is its enrollment process, which seeks to verify an applicant’s identity. We know verification is a challenge: A 2011 Government Accountability Office report…
2980
2981
2982
The State of Linux Security
This is the state of Linux security. With the most important updates around Linux and open source security. From conferences to self-protection.
2983
Blocking-resistant communication through domain fronting
David Fifield, University of California, Berkeley Chang Lan, University of California, Berkeley Rod Hynes, Psiphon Inc Percy Wegmann, Brave New Software Vern Paxson, University of California, Berkeley and the International Computer Science Institute
2984
Disclosing the Primary Email address for each Facebook user
Introduction This post is going to be discussing how I was able to get the primary/hidden email address for any Facebook user. This also happens to be my first accepted bug to the Facebook Bug Bounty Program. Background Back in September I got an email notification from Facebook stating
2985
How Skype fixes security vulnerabilities
In a nutshell — they don't. This post describes my fruitless effort to convince Microsoft employees that their service is vulnerable, and the humiliation one has to go through should one's account be blocked by a hacker. This is a story of ignorance, pain, and despair.
2986
Learning from a Year of Security Breaches
This year (2016) I accepted as much incident response work as I could. I spent about 300 hours responding to security incidents and data…
2987
Rolling Your Own Crypto
So you want to roll your own crypto. Well, be careful. Be very careful.
2988
Careers in security, ethical hacking and advice on where to get started
Many people will disagree with this post, not so much because it's flat out wrong but because there are so many different approaches one can take. It's a very subjective realm but I'm going to put forward some suggestions, make some considered arguments and leave it at
2989
2990
My Priorities for the Next Four Years
Like many, I was surprised and shocked by the election of Donald Trump as president. I believe his ideas, temperament, and inexperience represent a grave threat to our country and world. Suddenly, all the things I had planned to work on seemed trivial in comparison. Although Internet security and privacy are not the…
2991
Yahoo installed a backdoor for the NSA behind the back of the security team
[Update (12/14/16): Reuters has specified that the rootkit was implemented as a Linux kernel module. Wow.]
2992
The Signal protocol for Node and browsers
Signal is a protocol for encrypted chat. Developed by Moxie Marlinspike and Trevor Perrin, the Signal protocol backs the excellent Signal Messenger , and has since been incorporated into WhatsApp, Facebook Messenger and Google Allo.
2993
Practical Reverse Engineering Part 5 – Digging Through the Firmware
Fifth post in the series, covering how to obtain GPL source code, disassemble MIPS binaries with tools like IDA, and search the firmware for a default WiFi p...
2994
2995
The Orphaned Internet – Taking Over 120K Domains via a DNS Vulnerability
A Hacker's Blog of Unintended Use and Insomnia.
2996
I'm giving up on PGP
After years of wrestling GnuPG with varying levels of enthusiasm, I came to the conclusion that it’s just not worth it, and I’m giving up. At least on the concept of long term PGP keys.
2997
1.4B records from “Have I been pwned” for analysis
I get a lot of requests from people for data from Have I been pwned [https://haveibeenpwned.com/] (HIBP) that they can analyse. Now obviously, there are a bunch of people up to no good requesting the data but equally, there are many others who just want to run statistics.
2998
Zero Knowledge Proofs: An illustrated primer (2014)
One of the best things about modern cryptography is the beautiful terminology. You could start any number of punk bands (or Tumblrs) named after cryptography terms like ‘hard-core predicate&#…
2999
3000
Learning Exploitation with Offensive Computer Security 2.0
Own this domain today. We make your shopping experience easy. Friendly and quick customer service.