1351
Bring Your Own Password Manager: Portable BitWarden on a Pi Zero
BYOPM is a self hosted portable Password Manager implementation based on BitWarden and Raspberry PI Zero.
New
The latest blog posts to take off on Hacker News. 4,333 posts.
1352
SMS Multifactor Authentication in Antarctica
Issues pertaining to SMS (for multifactor auth) in Antarctica.
1353
SiriSpy – iOS bug allowed apps to eavesdrop on your conversations with Siri
Gui Rambo writes about his coding and reverse engineering adventures.
1354
1355
Ring0VBA – Getting Ring0 Using a Word Document
Hey hey! Welcome to my little corner of the internet. I am also known as 'Diz'! I made this site to document my research and contributions throughout the years, and other fun stuff I could come up with. Hope you're having a good day/afternoon/night wherever you are!
1356
Brave New Trusted Boot World
Posts and writings by Lennart Poettering
1357
Chromium based browsers leak user local IP via WebRTC foundation attribute
This script uses a pregenerated foundation lookup table to find local IP address for ICE candidates that render local mDNS hostnames seen as xx-xxx-xxx-xx.local .
1358
Ssss: Shamir's Secret Sharing Scheme (2006)
Shamir's Secret Sharing Scheme
1359
Security through obscurity is underrated (2020)
Some thoughts about cyber security, technology and life - https://utkusen.com/. Click to read Utku Sen’s Substack, a Substack publication with hundreds of subscribers.
1360
Google has most of my email because it has all of yours (2014)
Republished by Slate. Translations available in French (Français), Spanish (Español), Chinese (中文) For almost 15 years, I have run my own email server which I use for all of my non-work corresponde…
1361
SHA-3 Buffer Overflow
Update: This result appeared in the proceedings of CT-RSA 2023. A preprint is available.
1362
Battle with bots prompts purge of Amazon, Apple employee accounts on LinkedIn
On October 10, 2022, there were 576,562 LinkedIn accounts that listed their current employer as Apple Inc. The next day, half of those profiles no longer existed. A similarly dramatic drop in the number of LinkedIn profiles claiming employment at Amazon comes as LinkedIn is struggling to combat a significant uptick in…
1363
Abuse prevention is tradecraft
It’s sunday evening; there’s a lot to be said for being a stay-at-home-dad, and honestly I actually like having stuff like meal-prep and laundry to do, after 35+ years of “All Uni…
1364
How to hide your IP address
A field guide to VPNs, proxies, and traffic relaying
1365
Chainalysis CTO said blockchain is easier to trace than paper money
Contrary to his original intentions, cryptocurrencies and DeFi platforms are now more vulnerable to privacy breaches and hacking than…
1366
If AI can read, then plain text can be weaponized (2019)
Advances in AI have helped automate many tasks that involve processing text. However, text-processing AI algorithms have their own unique vulnerabilities, researchers at IBM, Amazon and University of Texas have found.
1367
Recovering a password-protected ThinkPad T60
An illustrated overview about the process of clearing the supervisor password from a ThinkPad T60, based on guides that some smart and persistent people have written.
1368
Malicious update/malware by a semi-advanced adversary
What do wedding venues and malware have in common? I got to spend my weekend investigating them. A short post about interesting malware, and lessons learned.
1369
Banks are not repaying victims of Zelle scams
When U.S. consumers have their online bank accounts hijacked and plundered by hackers, U.S. financial institutions are legally obligated to reverse any unauthorized transactions as long as the victim reports the fraud in a timely manner. But new data released this week suggests that for some of the nation’s largest…
1370
Glut of Fake LinkedIn Profiles Pits HR Against the Bots
A recent proliferation of phony executive profiles on LinkedIn is creating something of an identity crisis for the business networking site, and for companies that rely on it to hire and screen prospective employees. The fabricated LinkedIn identities — which pair AI-generated profile photos with text lifted from…
1371
“Privacy”.com–Yeah Right
At the behest of a friend of mine, I decided to get myself a Privacy.com account. I filled it out with my personal information, activated the account, and...
1372
1373
Ken Thompson really did launch his "trusting trust" trojan attack in real life
Ken Thompson's "Trusting Trust" compiler Trojan attack was not just a thought experiment. In fact, Usenet poster Jay Ashworth stated that, from personal communications, Thompson really did launch this attack in real life and successfully compromised the Unix Support Group at Bell Labs. Recently, I've rediscovered this…
1374
Someone is pretending to be me
One random day - someone spills the beans. They were picked to impersonate me and get a job using my information.
1375
Explained from scratch: private information retrieval and homomorphic encryption
This is a from-scratch explanation of private information retrieval built using homomorphic encryption. I try to assume only a general math / computer science background. To simplify things, my explanations may not always match academic definitions. You can check out this paper or code for more.
1376
Whois: Fragile, Unparseable, Obsolete
A rather unstructured look at one of the older and infuriatingly trivial internet protocols: WHOIS
1377
1378
Passkeys
This is an opinionated, “quick-start” guide to using passkeys as a web developer. It’s hopefully broadly applicable, but one size will never fit all authentication needs and this guide ignores everything that’s optional. So take it as a worked example, but not as gospel.
1379
Using a Canon EOS camera as a webcam in Debian
Learn how to use your Canon EOS camera as a webcam on Debian Linux with secure boot enabled. Step-by-step guide for installing dependencies, signing the v4l2loopback module, and using the camera in applications. Works with many camera brands including Canon, Fuji, HP, Kodak, Nikon, Pentax, Sanyo, and Sony.
1380
SIM swapper abducted, beaten, held for ransom
A Florida teenager who served as a lackey for a cybercriminal group that specializes in cryptocurrency thefts was beaten and kidnapped last week by a rival cybercrime gang. The teen’s captives held guns to his head while forcing him to record a video message pleading with his crew to fork over a $200,000 ransom in…