3361
I noticed some disturbing privacy defaults in Windows 10
Adventures in diy, electronics, programming, remote control and anything else.
New
The latest blog posts to take off on Hacker News. 4,337 posts.
3362
Behavioral Profiling: The password you can't change
You can be identified by how you type, even behind proxies and Tor. Protect yourself with KeyboardPrivacy.
3363
Releasing jsfunfuzz and DOMFuzz
Today I'm releasing two fuzzers: jsfunfuzz , which tests JavaScript engines, and DOMFuzz , which tests layout and DOM APIs.
3364
3365
One in every 600 websites has .git exposed
Deeply technical and hands-on AI and tech leader. Built, scaled and sold my own… · Experience: Cubes · Education: Nanzan University · Location: London Area, United Kingdom · 500+ connections on LinkedIn. View Jamie Brown’s profile on LinkedIn, a professional community of 1 billion members.
3366
Hacking Team: a zero-day market case study
This article documents Hacking Team’s third-party acquisition of zero-day (0day) vulnerabilities and exploits. The recent compromise of Hacking Team’s email archive offers one of the first public case studies of the market for 0days. Because of its secretive nature, this market has been the source of endless debates…
3367
Detecting VPN (and its configuration) and proxy users on the server side
A lot of people use VPN every day. Somebody use it in always-on mode to circumvent government or corporative internet censorship, while…
3368
The OpenSSH Bug That Wasn't
Much has been written about a purported OpenSSH vulnerability. On closer inspection, the reports actually got most of their facts wrong. Rea...
3369
Online Cheating Site AshleyMadison Hacked
Large caches of data stolen from online cheating site AshleyMadison.com have been posted online by an individual or group that claims to have completely compromised the company’s user databases, financial records and other proprietary information. The still-unfolding leak could be quite damaging to some 37 million…
3370
3371
1.5 TB of Dark Net Market scrapes
Mirrors of ~89 Tor-Bitcoin darknet markets & forums 2011–2015, and related material.
3372
Users Rationally Rejecting Security Advice (2009)
This paper, by Cormac Herley at Microsoft Research, sounds like me: Abstract: It is often suggested that users are hopelessly lazy and unmotivated on security questions. They chose weak passwords, ignore security warnings, and are oblivious to certicates errors. We argue that users’ rejection of the security advice…
3373
How Apple’s iCloud Drive deletes your files without warning
[…] with iCloud Drive, you can safely store all your presentations, spreadsheets, PDFs, images, and any other kind of document in iCloud. Then access them from your iPhone, iPad, iPod touch, Mac, or PC […]
3374
The easiest bug bounties I have won
The bugs I will write about are the simplest ones I have ever found on Facebook. The point of this blog is to show that some bugs can be fo...
3375
Firefox, you're supposed to be in my pocket, not the other way around
Personal blog of Julien (jvoisin) Voisin
3376
If you've nothing to hide, you've got nothing to fear
Since 1851 Amsterdam had a registry that recorded the following innocent pieces of data about the residents: Name, Date of birth, Address, Marital Status, Parents, Profession, Religion, Previous Addresses and Date of Death if deceased. For many years this system served well and was kept meticulously up to date.
3377
Hacking Team and a case of BGP hijacking
After just a few hours the Hacking Team emails archive has already provided many tasty leaks. I want to focus on a routing security issue since this is my main research activity for this year.
3378
3379
The ICANN Public Comments on WHOIS Privacy
ICANN is currently considering a proposal that “domains used for online financial transactions for commercial purpose should be ineligible for [WHOIS] privacy and proxy registrations” [ PDF ]. Given the vagueness around what would count as “commercial purpose” (tip jars? advertising? promoting your Kickstarter?) and…
3380
The NoScript Misnomer
A Hacker's Blog of Unintended Use and Insomnia.
3381
3382
Samsung disabling Windows Update?
Last updated 6/26/2015 - 4:49 PM EST. -- Windows Update will be abbreviated as "WU" in text from myself. First of all, I had this incl...
3383
Breaking the Zyzzyva encryption
The article here sums up pretty well the debacle that North American tournament Scrabble players have been faced with since the…
3384
3385
3386
Why the US federal employee record breach is worse than others
During the week of June 8th, the Office of Personnel Management (OPM) announced that the records of all current and past US federal employees had been compromised. That includes standard employment information - address, social security numbers, etc - of over 4 million people ranging from a random forest ranger to US…
3387
3388
Being Sneaky in C
I entered the 2014 Underhanded C Contest last year. Didn't win, but hey-ho what can you do. Still, I thought I'd post my entry and a write-up of it, in case anyone found it interesting.
3389
Reassessing Airport Security
News that the Transportation Security Administration missed a whopping 95% of guns and bombs in recent airport security “red team” tests was justifiably shocking. It’s clear that we’re not getting value for the $7 billion we’re paying the TSA annually. But there’s another conclusion, inescapable and disturbing to…
3390
