The latest blog posts to take off on Hacker News. 4,337 posts.
Facebook just announced support for PGP, an encrypted email standard, for email from them to you. It’s an interesting move on many levels, albeit one that raises some interesting questions. The answers, and Facebook’s possible follow-on moves, are even more interesting.
If you have just/as of late gotten an email about your keys being revoked, this is because of me, and if you have, you should really go through and make sure that no one has done anything terrible to you, since you have opened yourself to people doing very mean things to you for what is most likely a very long time.
Back in March, I parsed the declaration Nicholas Merrill submitted in his bid to reveal the contents of what he was asked to turn over via an NSL back in 2004. As a reminder, here’s what FBI permitted Merrill to reveal at the beginning of this suit. And here’s Merrill’s description of what kind of […]
Edited to add: I wrote a followup post to address comments here and elsewhere that advertising is working as intended. This paper has been ...
Even after the Snowden revelations, there remained at least one big mystery about what the NSA was doing and how. The NSA’s classified 2013 budget request mentioned, as a priority item, R…
This blog is written by Hanno Böck. Unless noted otherwise, its content is licensed as CC0 .
I gave a talk a couple of weeks ago at the Yahoo Unconference . The conference was at the end of a particually hard week for a bunch of reasons and I fear that the talk wasn't that great. (Afterwards I got home about 3pm and pretty much slept until the following morning.) This post is a, hopefully clearer…
This blog entry is part of a series covering: Logging into your laptop and decrypting it automatically Encrypting and decrypting any passwords or secure info you have Sending and receiving encrypted mails Providing 2-step authentication codes for your web logins Doing all of the above on your mobile phone…
Sometimes I do things for no real reasons other than “because I can” and/or “it amuses me”. For example, embedding a snarky message into my HTTPS certificate.
Hello, Lately I have been looking into race condition bugs affecting websites/web-applications. Here is a good resource to learn about th...
Critical remote code execution vulnerability in Magento (SUPEE-5344). Patch immediately. Affects 200,000 stores. Includes patch download and analysis.
SQLite is probably the most popular embedded database in use today; it is also known for being exceptionally well-tested and robust. In co...
A Finnish online bank leaked out user data by using a third-party tracker script.
This blog is written by Hanno Böck. Unless noted otherwise, its content is licensed as CC0 .
If you were to browse Amazon right now and someone was eavesdropping on your connection, they could tell exactly what you were looking at. They could even tell what you've bought.
A few weeks back I wrote an update on the Truecrypt audit promising that we’d have some concrete results to show you soon. Thanks to some hard work by the NCC Crypto Services group, soon is n…
For the past week, the website "GitHub" has been under attack by China. In this post, I pin-point where the attack is coming from by doing a...
About Vulnerability Research Grants and a little story how I could delete any video on YouTube.
Firefox 37 brings more encryption to the web through opportunistic encryption of some http:// based resources. It will be released the week ...
