3691
Bitcoin Private Key Necromancy
tl;dr: https://github.com/pierce403/keyhunter ~ The Longer Version ~ A few weeks ago, a friend came to me with a problem. Way back...
New
The latest blog posts to take off on Hacker News. 4,337 posts.
3692
3693
3694
3695
The NSA: An Inside View
In which I relate my experience as an NSA employee and impart my thoughts on the policies in place, my former coworkers, and the current cyber war.
3696
How to send DMs on Twitter without permission
I just recalled " SMS commands " feature and tried to send a DM (private, direct message) with "Share on Twitter"-button. It works! Twitt...
3697
3698
Is Unicode Safe?
Unicode is just too complex to ever be secure.  — Bruce Schneier, 2000 Over the last 25 years Unicode has succeeded. It hasn't displaced all other character encodings, but it's clearly on its way there. It's supported widely enough that it's a compatible choice, new projects use it, and it's becoming the…
3699
Evading Airport Security
The news is reporting about Evan Booth, who builds weaponry out of items you can buy after airport security. It’s clever stuff. It’s not new, though. People have been explaining how to evade airport security for years. Back in 2006, I—and others—explained how to print your own boarding pass and evade the photo-ID…
3700
3701
RJS leaking vulnerability in multiple Rails applications
I wrote about this problem in May, without showcases, just a theoretical post http://homakov.blogspot.com/2013/05/do-not-use-rjs-like-techn...
3702
3703
3704
3705
Google Account Recovery Vulnerability
Global Main Authentication and Identification Library (GMAIL) was exposed to a security threat by Oren Hafif.
3706
LG TV logging filenames from network folders
After DoctorBeet’s blog post detailing his LG TV’s shady logging practices I decided to have a look at what my own was doing. To start off I couldn’t seem to find an option to disable logging…
3707
3708
LG Smart TVs log USB filenames and viewing info to LG servers
Earlier this month I discovered that my new LG Smart TV was displaying ads on the Smart landing screen. After some investigation, I f...
3709
Visual Cryptography
How to create perfect secret messages that can be decoded using just your eyes.
3710
Microsoft ‘Mortally Wounds’ SHA-1
Microsoft has announced that CAs in its root program may not issue certs signed using the SHA-1 algorithm, starting just over two years from now, and that Windows will start refusing to recognise such certs starting just over 3 years from now.
3711
Adobe credentials and the serious insecurity of password hints
Adobe had a little issue the other day with the small matter of 150 million accounts being breached and released to the public. Whoops. So what are we talking about? A shed load of records containing an internal ID, username, email, encrypted password and a password hint. Naked Security did
3712
3713
Can Snowden be targeted using the Adobe breach?
Note: As a professional courtesy to those at Adobe who are doing their absolute best to mitigate this breach, I have partially redacted all ...
3714
Linkedin's Response to My "Phishing with Intro" Post
Security and Programming Blog
3715
3716
The Battle for Power on the Internet
We’re in the middle of an epic battle for power in cyberspace. On one side are the traditional, organized, institutional powers such as governments and large multinational corporations. On the other are the distributed and nimble: grassroots movements, dissident groups, hackers, and criminals. Initially, the Internet…
3717
Phishing with Linkedin's Intro
Security and Programming Blog
3718
3719
3720
Can I Be Trusted?
Slashdot asks the question: I’m a big fan of Bruce Schneier, but just to play devil’s advocate, let’s say, hypothetically, that Schneier is actually in cahoots with the NSA. Who better to reinstate public trust in weakened cryptosystems? As an exercise in security that Schneier himself may find interesting, what…