New
The latest blog posts to take off on Hacker News. 4,337 posts.
Android security model is inadequate, and it needs a firewall
I have an Android phone, and while it’s good that Android does have some sandboxing, permissions and security against rogue apps, I’m not very happy with the security model and how it a…
The Asian domain-name extortion scam
We are a leading internet solutions organization in Asia, and we have something urgent to confirm with you. Yesterday we received a formal application from a company called ” Varmer Investment Co., Ltd “. They were trying to apply for ” instapaper ” as Brand Name and following Domain Names through our organization:
Careful when hosting 3rd party apps on subdomains, or how I hacked Facebook
In the past few years it has become common for site owners to run 3rd party tools on their site. A good example would be Wordpress or other ...
Schneier on UAE to Ban BlackBerrys
The United Arab Emirates—Dubai, etc.—is threatening to ban BlackBerrys because they can’t eavesdrop on them. At the heart of the battle is access to the data transmitted by BlackBerrys. RIM processes the information through a handful of secure Network Operations Centers around the world, meaning that most governments…
PDF exploit in iOS 4
Link to: http://www.loopinsight.com/2010/08/01/jailbreakme-returns-offers-jailbreak-for-iphone-4-and-ipad/
Homoglyph attacks: How to create an internet hoax
For decades, social psychologists have understood that the link between attitudes and conduct is convoluted, if not weak. Both online and offline, this is
Redirect to sslh
My homepage for projects, jokes and bunnies.
I know your name, where you work, and live (Safari v4 & v5)
Update 07.30.2010 : Apple patched Safari ( CVE-ID: CVE-2010-1796 ) Right at the moment a Safari user visits a website, even if they’ve never...
Post from "weev" (AT&T/ipad data hacker) on his arrest and treatment
A while ago, someone came to me and gave me some data involving AT&T iPad customers to publicize, the full story of which I’m sure you’re all familiar with from my previous excellent blog posts. I was subsequently raided by the FBI and arrested , though I have been under gag orders and haven’t been able to discuss the…
Facebook's DKIM RSA key should be crackable
If Facebook sends you a mail they will sign it using DKIM . Here are the headers from a mail I received the other day: DKIM-Signature: v=1...
Schneier on Filming the Police
In at least three U.S. states, it is illegal to film an active duty policeman: The legal justification for arresting the “shooter” rests on existing wiretapping or eavesdropping laws, with statutes against obstructing law enforcement sometimes cited. Illinois, Massachusetts, and Maryland are among the 12 states in…
A new type of phishing attack. Works on savvy users.
In essence, a phishing attack is a kind of hack used by cybercriminals to trick victims into performing a certain activity. These emails are frequently sent
Don't Talk to the Cops
Don't talk to the cops about any significant crime ...ESPECIALLY if you're innocent. Here's why.