3991
Protecting a Laptop from Simple and Sophisticated Attacks
How I secured a ThinkPad: a Windows honeypot with Prey for thieves, TRESOR against cold boot, a USB boot stick for evil maids, and a separate Firefox user.
New
The latest blog posts to take off on Hacker News. 4,337 posts.
3992
3993
A Git Horror Story: Repository Integrity With Signed Commits
(Note: This article was written at the end of 2012 and is out of date. I will update it at some point, but until then, please keep that in perspective.)
3994
Passwords For Your Facebook Account
This is interesting. You can log into your Facebook account using three passwords – one is the main password that you created and the other passwords can…
3995
3996
Olympics 2012: A Bruce Schneier Moment
An east London estate, where 700 people live, has received leaflets saying a "Higher Velocity Missile system" could be placed on a water tower. ...
3997
3998
How I attacked myself using Google and I ramped up a $1000 bandwidth bill
It all started with an email. From: Amazon Web Services LLC Subject: Review of your AWS Account Estimated Month to Date Billing Charges...
3999
4000
The Twitter "Patent Hack"
Yesterday Twitter announced that they plan to amend the assignments agreements that they sign with their employees. They call this proposed amendment the Innovator's Patent Agreement. I've been aware of this effort inside of Twitter for a while and I like to call this move the "Twitter Patent Hack" because I think…
4001
4002
4003
Hotel Wifi JavaScript Injection
So I’m checking my blog on the hotel wifi, like ya do, and I notice something a little off with the style. There’s a dark colored bar at the top of the page that shouldn’t be there. That’s funny. Maybe a recent Firefox update changed how they treat CSS?
4004
Charlie Stross on Girls Around Me
There is an app, currently on the Apple app store as a free download, called Girls Around Me .
4005
#1 CSRF Is A Vulnerability In All Browsers
Navigation: #1 CSRF Is A Vulnerability In All Browsers - You MUST Deny It ASAP. #2 top secret(will be published on April 1) #3 Another Ra...
4006
Chrome addons hacking: Bye Bye AdBlock filters
Continuing the Chrome extension hacking (see part 1 and 2), this time I'd like to draw you attention to the oh-so-popular AdBlock extension. It has over a million users, is being actively maintained and is a piece of a great software (heck, even I use it!). However - due to how Chrome extensions work in general it is…
4007
Schneier removed from TSA oversight meeting at TSA request
I was supposed to testify today about the TSA in front of the House Committee on Oversight and Government Reform. I was informally invited a couple of weeks ago, and formally invited last Tuesday: The hearing will examine the successes and challenges associated with Advanced Imaging Technology (AIT), the Screening of…
4008
4009
4010
Random Number Bug in Debian Linux
This is a big deal: On May 13th, 2008 the Debian project announced that Luciano Bello found an interesting vulnerability in the OpenSSL package they were distributing. The bug in question was caused by the removal of the following line of code from md_rand.c MD_Update(&m,buf,j); [ .. ] MD_Update(&m,buf,j); /* purify…
4011
Don't use bcrypt
(Edit: Some numbers for you people who like numbers) If you're already using bcrypt, relax, you're fine, probably. However, if you're ...
4012
4013
4014
4015
How github was hacked
So I commited in rails/rails repo I simply added a <input value=USER_ID name=public_key[user_id]> field to Public key update form, where U...
4016
4017
4018
4019
On CPU backdoors - Trusting hardware
So, you're a decent paranoid person, running only open source software on your box: Linux, GNU, etc. You have the feeling you could, if you ...
4020
How to Find Facebook Users on Match.com by Using Face Recognition Tools
黄色福利站-2022国语高清视频播放,粗大猛地挺进娇喘啊在线视频-国产不卡青柠影院-久久草网-未删减1080P迅雷高清下载