3301
New
The latest blog posts to take off on Hacker News. 4,337 posts.
3302
3303
From kafkatrap to honeytrap
The short version is: if you are any kind of open-source leader or senior figure who is male, do not be alone with any female, ever, at a technical conference. Try to avoid even being alone , ever, because there is a chance that a “women in tech” advocacy group is going to try to collect your scalp.
3304
CSS Based Attack fontface
In this post, I would like to share about new CSS based attack with unicode-range descriptor of @font-face rule . Using this technique, an...
3305
Your own Debian Mail Server (part II): how to prove you are not a spammer
TL;DR: check mail-tester.com or Spam Checker. If you don't get 10/10, read this post. In a previous post, we saw how to configure a Debian mail server with Postfix and Dovecot, but we did not address an important issue: spam. Major e-mail providers are defending their users …
3306
Breaches, traders, plain text passwords, ethical disclosure and 000webhost
It’s a bit hard to even know where to begin with this one, perhaps at the start and then I’ll try and piece all the bits together as best I can. As you may already know if you’re familiar with this blog, I run the service Have
3307
Copy-Pasting URLs from Google Search Can Leak Previous Searches
Note: This information has been disclosed to Google appropriately, they have chosen to not fix this behavior.
3308
Intel x86 considered harmful – survey of attacks against x86 over last 10 years
Back in summer I have read a new bookpublished by one of the core Intel architects about the Management Engine (ME).I didn’t quite like what I read there. In...
3309
3310
3311
Stop forcing arbitrary password rules
Arbitrary password rules are a vain attempt to increase security by forcing unnecessary complexity
3312
A riddle wrapped in a curve
If you’re looking for a nice dose of crypto conspiracy theorizing and want to read a paper by some very knowledgeable cryptographers, I have just the paper for you. Titled “A Riddle Wrapped in an E…
3313
3314
BoringSSL
We recently switched Google's two billion line repository over to BoringSSL , our fork of OpenSSL . This means that BoringSSL is now powering Chromium (on nearly all platforms), Android M and Google's production services. For the first time, the majority of Google's products are sharing a single TLS stack and making…
3315
3316
1Password Leaks Your Data
Seriously.
3317
3318
Hacker Who Sent Me Heroin Faces Charges in U.S
A Ukrainian hacker who once hatched a plot to have heroin sent to my Virginia home and then alert police when the drugs arrived had his first appearance in a U.S. court today, after being extradited to the United States to face multiple cybercrime charges.
3319
The Web Authentication Arms Race – A Tale of Two Security Experts
Web authentication systems have evolved over the past ten years to counter a growing variety of threats. This post will present a fictional arms race between a web application developer and an attacker, showing how different threats can be countered with the latest security technologies.
3320
What’s in a Boarding Pass Barcode?
The next time you’re thinking of throwing away a used boarding pass with a barcode on it, consider tossing the boarding pass into a document shredder instead. Two-dimensional barcodes and QR codes can hold a great deal of information, and the codes printed on airline boarding passes may allow someone to discover more…
3321
The End of Safe Harbor and a Scary Path Forward
Some in detail analysis about what the end of safe harbor means for small companies, especially in Europe.
3322
3323
3324
Volkswagen and Cheating Software
Portuguese translation by Ricardo R Hashimoto For the past six years, Volkswagen has been cheating on the emissions testing for its diesel cars. The cars’ computers were able to detect when they were being tested, and temporarily alter how their engines worked so they looked much cleaner than they actually were. When…
3325
How I hacked my IP camera, and found this backdoor account
The time has come. I bought my second IoT device - in the form of a cheap IP camera. As it was the most affordable among all others, my exp...
3326
Google fixes nearly decade-old Linux kernel TCP bug
The Google transport networking crew (QUIC, TCP, etc..) deserve a shout out for identifying and fixing a nearly decade old Linux kernel TCP ...
3327
3328
3329
3330
Candy Japan hit with credit card fraud
What is credit card fraud, how we noticed it and how it impacted our business.