3871
New
The latest blog posts to take off on Hacker News. 4,337 posts.
3872
3873
Why DRM is such a fucking stupid idea
Digital comics publisher JManga is collapsing . Two weeks from now you will no longer be able to "purchase" anything from them. Two months from now, anything that was "purchased" from them will cease to exist. If you spent hundreds of pounds in their store then, well, that's bad luck for you. This…
3874
Achilles Heel of OAuth or Why Facebook Adds #_=_
This is a short addition to the previous rants on OAuth problems. We've got Nir Goldshlager working on our side (he simply loves bounties...
3875
3876
Here come the encryption apps
It seems like these days I can’t eat breakfast without reading about some new encryption app that will (supposedly) revolutionize our communications — while making tyrannical regimes fa…
3877
Hacking Github with Webkit
Previously on Github: XSS , CSRF ( My github followers are real , I gained followers using CSRF on bitbucket ), access bypass, mass assignm...
3878
3879
3880
Phishing Has Gotten Very Good
This isn’t phishing; it’s not even spear phishing. It’s laser-guided precision phishing: One of the leaked diplomatic cables referred to one attack via email on US officials who were on a trip in Copenhagen to debate issues surrounding climate change. “The message had the subject line ‘China and Climate Change’ and…
3881
3882
HTML5 localStorage allows sites to fill up users' hard disks
Use HTML5 localStorage to completely fill up Chrome, Safari, and IE users hard disks. Trololo...
3883
A simple solution to credit card fraud, and why you won't see it any time soon
This is the first in what will probably be a very long series of articles. Ultimately, this is the beginning of the story of why I stopped ...
3884
You cannot have a digital copy of the DC Code
On how the law was taken away from the people of Washington, DC by legal shenanigans
3885
How we hacked Facebook with OAuth2 and Chrome bugs
TL;DR We (me and @isciurus ) chained several different bugs in Facebook, OAuth2 and Google Chrome to craft an interesting exploit. Mallory...
3886
Using Silk Road
History, background, visiting, ordering, using, & analyzing the drug market Silk Road 1
3887
3888
3889
Linux Foundation Secure Boot System Released
As promised, here is the Linux Foundation UEFI secure boot system. This was actually released to us by Microsoft on Wednesday 6 February, but with travel, conferences and meetings I didn’t really get time to validate it all until today. The files are here
3890
3891
3892
Keeping Passwords in Source Control
I learned a neat tip from my co-worker, Craig Silverstein ( more on Craig joining Khan Academy ), recently and I thought others might find it to be useful.
3893
3894
1% of CMS-Powered Sites Expose Their Database Passwords (2011)
Feross Aboukhadijeh is a computer security researcher, teacher, web developer, designer, long distance runner, gamer, music lover, and builder of websites that (sometimes) go viral.
3895
Deconstruction of Pinkie Pie's 64-bit Chrome exploit
Back in November 2012, a Chrome Releases blog post mysteriously stated: "Congratulations to Pinkie Pie for completing challenge: 64-bit exp...
3896
On Python security amidst recent Rails/YAML vulnerabilities
The Rails community has had a few high-profile security issues this week. They are well-summarized, with an alarming list of what follow-ons to expect, by Patrick McKenzie: What the Rails Security Issue Means for Your Startup.
3897
3898
3899
Who Does Skype Let Spy?
Lately I’ve been thinking a lot about power and the Internet, and what I call the feudal model of IT security that is becoming more and more pervasive. Basically, between cloud services and locked-down end-user devices, we have less control and visibility over our security—and have no point but to trust those in power…
3900
IDIV DoS (INT_MIN / -1)
A little fun for the last day of 2012: how to crash a program via division? x86’s IDIV instruction traps not only on division by zero, but also on INT_MIN / -1 (signed integer overflow).