3241
New
The latest blog posts to take off on Hacker News. 4,337 posts.
3242
Amazon's customer service backdoor
As a security conscious user who follows the best practices like: using unique passwords, 2FA, only using a secure computer and being able…
3243
3244
3245
“Subject: Urgent Warning”
Back in December I got a desperate email from this person. A woman who said her Instagram had been hacked and since she found my contact info in the app she mailed me and asked for help. I of course replied and said that I have nothing to do with her being hacked but I … Continue reading “Subject: Urgent Warning” →
3246
3247
3248
Phishing attack against Lastpass
Updated 2016-02-04 : LastPass has removed the button from notifications and now requires email confirmation for all logins from new IPs . This substantially mitigates LostPass, but does not eliminate it.
3249
PayPal and zero-dollar invoice spam
I got a rather odd invoice via PayPal the other day, it looks like this: Naturally the first thing I did was to look for spoof email indicators, but none of the usual suspects were showing up: 1. It was from member@paypal.com.au 2. The mail headers were
3250
There are no secure smartphones
Modern smartphones have a CPU chip, and a baseband chip which handles radio network communications (GSM/UMTS/LTE/etc.) This chip is connected to the CPU via DMA. Thus, unless an IOMMU is used, the baseband has full access to main memory, and can compromise it arbitrarily.
3251
3252
Why NSA Surveillance Scares Me
Nothing To Hide explains why you should care about surveillance even though you have nothing to hide. But it missed the point that most con...
3253
Nvidia GPUs can break Chrome's incognito mode
When I launched Diablo III, I didn’t expect the pornography I had been looking at hours previously to be splashed on the screen. But that’s exactly what replaced the black loading scree…
3254
Storing Passwords in a Highly Parallelized World
Why “Use bcrypt.” is not the best recommendation (anymore).
3255
Why privacy is important, and having “nothing to hide” is irrelevant
The governments of Australia, Germany, the UK and the US are destroying your privacy. Some people don't see the problem...
3256
Gas Theft Gangs Fuel Pump Skimming Scams
Few schemes for monetizing stolen credit cards are as bold as the fuel theft scam: Crooks embed skimming devices inside fuel station pumps to steal credit card data from customers. Thieves then clone the cards and use them to steal hundreds of gallons of gas at multiple filling stations. The gas is pumped into…
3257
A Unikernel Firewall for QubesOS
QubesOS provides a desktop operating system made up of multiple virtual machines, running under Xen. To protect against buggy network drivers, the …
3258
DLL Hijacking Just Won’t Die
The folks that build the NSIS Installer have released updates to mitigate a serious security bug related to DLL loading. (v2.5 and v3.0b3 include the fixes). To make a long and complicate…
3259
Shellcode Injection
Injecting shellcode by overflowing the buffer - Demonstration
3260
3261
Yubico with new 4096-bit keys and gpg-agent for ssh authentication
Collection of my projects and hacks.
3262
3263
TSA Sued Over New Policy to Refuse Opt-Outs
Last Friday, the TSA snuck out a document updating the “privacy policy” for the nude body scanners. On Tuesday, reports started coming in on the change, including right here. Professi…
3264
State Considered Harmful – A Proposal for a Stateless Laptop
Two months ago I have published a detailed survey of varioussecurity-related problems plaguing the Intel x86 platforms. While the picturepainted in the paper...
3265
On the Juniper backdoor
You might have heard that a few days ago, Juniper Systems announced the discovery of “unauthorized code” in the ScreenOS software that underlies the NetScreen line of devices. As a resu…
3266
Safe Native Code
Joe Duffy's Blog | Adventures in the high-tech underbelly
3267
Juniper: Recording Some Twitter Conversations
Update : Ralf wrote up some notes from his work. These now include an update themselves with information from Willem Pinckaers that suggests that the presumed Dual-EC output is exposed to the world in Juniper devices.
3268
3269
How Tor Works: Part One
Security and Programming Blog
3270
Instagram's Million Dollar Bug
How participation in Facebook's bug bounty not only led to the complete compromise of Instagram, but also legal threats and intimidation