1381
You don’t want to be on Cloudflare’s naughty list
My home IP ended up on Cloudflare’s naughty list for six days. Most websites and many apps loaded slowly, partially, or not at all. Just had to wait it out.
New
The latest blog posts to take off on Hacker News. 4,333 posts.
1382
America’s Open Wound
The CIA is not your friend
1383
There is no “software supply chain”
In actual supply chains, money is changing hands. A server manufacturer is paying for PCB fabrication, who is paying their suppliers for raw materials and equipment, and so on until the whole thing eventually loops back on itself when a mining company needs to buy a server.
1384
Hacking the PS4 / PS5 Through the PS2 Emulator
In this article I will discuss how I successfully escaped the PS2 emulator developed for the PlayStation 4. See also Part 2 , covering the next part of the exploit chain, and PlayStation's response to the research.
1385
Crazy Thin ‘Deep Insert’ ATM Skimmers
A number of financial institutions in and around New York City are dealing with a rash of super-thin “deep insert” skimming devices designed to fit inside the mouth of an ATM’s card acceptance slot. The card skimmers are paired with tiny pinhole cameras that are cleverly disguised as part of the cash machine. Here’s a…
1386
Privacy vs. “I have nothing to hide” (2019)
A recent post received numerous comments asking why I was so concerned about privacy and asking what I have to hide. Here's my reply...
1387
Signing Git commits with your SSH key (2021)
You could always sign Git commits with a GPG key, but now your SSH key is just as powerful!
1388
Planning Go 1.20 cryptography work
My plans for Go 1.20 include landing the crypto/ecdh package, making progress on moving math/big out of the security perimeter, and a batch of crypto/tls work.
1389
Prompt injection attacks against GPT-3
Riley Goodside, yesterday: Exploiting GPT-3 prompts with malicious inputs that order the model to ignore its previous directions. pic.twitter.com/I0NVr9LOJq- Riley Goodside (@goodside) September 12, 2022 Riley provided several examples. Here’s …
1390
Edge Case Poisoning (2020)
TLA+ Workshop Last Call The TLA+ workshop is next week! Oct 20-22, register here, use the code COMPUTRONSTUFF for $500 off. Learn how a few hours of...
1391
Pwned, the book
The first time I ever wrote publicly about a company's security vulnerabilities, my boss came to have a word with me after seeing my name in the news headlines. One of the worst days I've ever had was right in the middle of the Have I Been Pwned
1392
TIL: You can access a user’s camera with just HTML
The HTML capture attribute is interesting because it allows you to activate a user's camera with just HTML. This article covers it in more depth.
1393
The Sheer Terror of PAM
Xe Iaso's personal website.
1394
Violence-as-a-Service: Brickings, Firebombings and Shootings for Hire
A 21-year-old New Jersey man has been arrested and charged with stalking in connection with a federal investigation into groups of cybercriminals who are settling scores by hiring people to carry out physical attacks on their rivals. Prosecutors say the defendant recently participated in several of these schemes …
1395
Outlook.com is silently discarding email messages (2015)
Outlook.com and hotmail.com is silently discarding email messages from our SMTP server.
1396
I ran the worlds largest DDoS-for-Hire empire and Cloudflare helped
The perils of remaining neutral on a global scale: fanning the flames and selling the extinguisher.
1397
The optimal amount of fraud is non-zero
Counterintuitively, businesses, customers, and society prefer having fraud to what they'd need to do to not have it.
1398
1399
macOS now scans for malware whenever it gets a chance
How macOS now has anti-malware scanners checking your Mac automatically many times each day for the most frequent malware.
1400
Will California Eliminate Anonymous Web Browsing? (Comments on CA AB 2273)
I’m continuing my coverage of dangerous Internet bills in the California legislature. This job is especially challenging during an election year, when legislators rally behind the “protect the kids” mantra to pursue bills that are likely to hurt, or at...
1401
Final thoughts on Ubiquiti
Last year, I posted a series of articles about a purported “breach” at Ubiquiti. My sole source for that reporting was the person who has since been indicted by federal prosecutors for his alleged wrongdoing – which includes providing false information to the press.
1402
Things not available when someone blocks all cookies
The personal blog of Thomas Steiner
1403
Large scale Internet SSH brute force attacks seem to have stopped here
You're probably reading this page because you've attempted to access some part of my blog (Wandering Thoughts) or CSpace , the wiki thing it's part of. Unfortunately you're using a browser version that my anti-crawler precautions consider suspicious, most often because it's too old (most often this applies to versions…
1404
Tetsuji: Remote Code Execution on a GameBoy Colour 22 Years Later
Introduction It’s that time of year again - the Binary Golf Grand Prix is back for a third year running! You can also check out my entries to the first and second times this amazing competition ran. The theme this year was to produce a binary that crashes a given program. Bonus points for hijacking execution…
1405
1406
1407
What’s going on with security at PayPal?
PayPal's one-time login codes are a security disaster. Your account is at severe risk; remove your data or close your account immediately.
1408
VS Code – What's the deal with the telemetry?
VS Code collects telemetry data to help understand Microsoft how to improve the product. Is it above board? Can I turn it off completely?
1409
Your online identity is owned by your email provider (2019)
Your email provider owns your online identity by controlling your email address. You can’t port your email address to another provider as with phone numbers.
1410
Gmail will call the cops on you based on the content of your emails
Correction: An earlier draft of this story misstated a technical detail; Mark didn’t email his photo to his doctor; rather, he took the photo with his phone and the image was automatically synched to his Google Photos account, triggering a scan .