3061
New
The latest blog posts to take off on Hacker News. 4,335 posts.
3062
How Dropbox Hacks Your Mac
Update: Dropbox hack blocked by Apple in Sierra Following my post revealing Dropbox’s Dirty Little Security Hack a few weeks ago, I thought I’d look deeper into how Dropbox was getti…
3063
How Dropbox hacks your mac
Update: also see Discovering how Dropbox hacks your mac If you have Dropbox installed, take a look at System Preferences > Security & Privacy > Accessibility tab (see …
3064
I lost my OpenBSD full-disk encryption password
The other day I set up a new OpenBSD instance with a nice RAID array, encrypted with Full Disk Encryption. And promptly proceeded to forget part of the passphrase.
3065
NSA Hacked French President’s House
“Keith Alexander (Director of the NSA) told me he was disappointed because he never thought we would detect them and he even added: You guys are good.” Bernard Barbier French newspaper …
3066
Running a Tor Exit Node for Fun and E-mails
The Tor Project is a non-profit organization in the United States that created Tor, The Onion Router, a free software that creates an open network of volunteers which helps people anonymize their traffic by routing it through three or more other computers before it reaches its final destination.
3067
3068
WoSign's secret purchase of StartCom: WoSign threatened legal actions
This website is for sale! percya.com is your first and best source for information about percya. Here you will also find topics relating to issues of general interest. We hope you find what you are looking for!
3069
3070
3071
3072
The Dropbox hack is real
Earlier today, Motherboard reported on what had been rumoured for some time, namely that Dropbox had been hacked [http://motherboard.vice.com/read/hackers-stole-over-60-million-dropbox-accounts] . Not just a little bit hacked and not in that "someone has cobbled together a list of credentials that work
3073
Google's login page accepts a vulnerable GET parameter
In hope that public disclosure will encourage Google to fix this, despite refusing to, here goes...
3074
Chinese CA WoSign faces revocation after possibly issuing fake certificates
This website is for sale! percya.com is your first and best source for information about percya. Here you will also find topics relating to issues of general interest. We hope you find what you are looking for!
3075
CloudFlare, SSL and unhealthy security absolutism
Let's start with a quick quiz: Take a look at haveibeenpwned.com [https://haveibeenpwned.com/] (HIBP) and tell me where the traffic is encrypted between: You see HTTPS which is good so you know it's doing crypto things in your browser, but where's the other end of
3076
Hacked: Investigating an Intrusion on My Server
tl;dr I have received a nice “your server is sending spam” email on a Saturday morning, this is what happened next. As a foreword, this server is not holding critical information and his mostly used to host static content and maintain former projects. Basically this is what happens when you leave upgrade undone on…
3077
The target=“_blank” vulnerability by example
Instagram leaves its users open to a simple phishing attack
3078
The NSA Is Hoarding Vulnerabilities
The National Security Agency is lying to us. We know that because data stolen from an NSA server was dumped on the Internet. The agency is hoarding information about security vulnerabilities in the products you use, because it wants to use it to hack others’ computers. Those vulnerabilities aren’t being reported, and…
3079
Taking Over DigitalOcean Domains via a Lax Domain Import System
A Hacker's Blog of Unintended Use and Insomnia.
3080
Why the NSA Dump Isn't from an Insider
Between Lies and Bad Analysis
3081
3082
3083
My Letter to the Tor Project
N ow I a fourfold vision see A nd a fourfold vision is given to me T is fourfold in my supreme delight A nd three fold in soft Beulahs night A nd twofold Always. May God us keep F rom Single vision & Newtons sleep. — W illiam B lake
3084
3085
JetBrains IDE Remote Code Execution and Local File Disclosure
TL;DR From at least 2013 until May 2016 JetBrains' IDEs were vulnerable to local file leakage, with the Windows (EDIT: and OS X) versions …
3086
Software Freedom Doesn't Kill People, Security Through Obscurity Kills People
The time has come that I must speak out against the inappropriate rhetoric used by those who (ostensibly) advocate for FLOSS usage in automotive applications.
3087
How I got tech support scammers infected with Locky
There’s been this debate for a while now, about AI being either the greatest or the worst or maybe the least interesting thing to happen to humanity so far. I have to say I’m not 100% sure where I land on this one myself. AI has empowered me to do things I had been putting off forever, multiplied my productivity and…
3088
DEF CON 24 Badge Challenge
Council of 9 ventured forth to DEFCON 24 to compete in this year's badge challenge, brought to us each year by 1o57. There was determination among the team to win at DC24 to ensure that last year's...
3089
3090
On Cybersecurity and Being Targeted
Last month, I was the subject of a targeted cyber attack. Someone went through substantial lengths to attempt to gain access to my GitHub account, but were...