1411
Why don’t we do email verification in reverse?
Just about everybody who has ever used a service on the web has experienced the following account creation follow:
New
The latest blog posts to take off on Hacker News. 4,333 posts.
1412
See what JavaScript commands get injected through an in-app browser
I work with U.S. law firms as a non-testifying technical consulting expert on matters involving the Apple platform and iOS apps. Learn more about my litigation consulting.
1413
PayPal phishing scam uses invoices sent via PayPal
Scammers are using invoices sent through PayPal.com to trick recipients into calling a number to dispute a pending charge. The missives — which come from Paypal.com and include a link at Paypal.com that displays an invoice for the supposed transaction — state that the user’s account is about to be charged hundreds of…
1414
1415
T-Mobile USA doesn't comply with its German parent company’s GDPR policies
The Practical Nomad: Edward Hasbrouck's blog
1416
Process behaviour anomaly detection using eBPF and unsupervised learning
Hello everybody, I hope you’ve been enjoying this summer after two years of Covid and lockdowns :D In this post I’m going to describe how to use eBPF syscall t…
1417
1418
I hacked my car
Note: As of 2022/10/25 the information in this series is slightly outdated. See Part 5 for more up to date information. The Car Last summer I bought a 2021 Hyundai Ioniq SEL. It is a nice fuel-efficient hybrid with a decent amount of features like wireless Android Auto/Apple CarPlay, wireless phone charging, heated…
1419
NSA's Warrantless Wiretaps (2012)
ACKNOWLEDGMENTS I thank Kent Gladstone, Science Applications International Corporation (SAIC), for a critical reading of both manuscripts. Many critical comments and corrections from Brad Howard have made the Mini-Tutorial a better adventure for anyone who follows his path.
1420
Locking down your GitHub-hosted Domains
The other day someone claimed a hostname on a domain I own and it took me a while to track down how. Turns out it was via GitHub pages.
1421
Instagram can track anything you do on any website in their in-app browser
I work with U.S. law firms as a non-testifying technical consulting expert on matters involving the Apple platform and iOS apps. Learn more about my litigation consulting.
1422
Review of /e/ – Android-based alternative for mobile phones
A review of the /e/ OS Android-alternative operating system for mobile devices, as used on the Teracube 2e smartphone.
1423
Achieving an open-source implementation of Apple Code Signing and notarization
As I've previously blogged in Pure Rust Implementation of Apple Code Signing (2021-04-14) and Expanding Apple Ecosystem Access with Open Source, Multi Platform Code signing (2022-04-25), I've been hacking on an open source implementation of Apple code signing and notarization using the Rust programming language. This…
1424
Class Action Targets Experian over Account Security
A class action lawsuit has been filed against big-three consumer credit bureau Experian over reports that the company did little to prevent identity thieves from hijacking consumer accounts. The legal filing cites liberally from an investigation KrebsOnSecurity published in July, which found that identity thieves were…
1425
1426
NSA, NIST, and post-quantum crypto: my second lawsuit against the US government
The Black Chamber was founded by the U.S. Army and the U.S. State Department in 1919. The Secretary of State terminated funding in 1929, famously writing that "Gentlemen do not read each other's mail."
1427
1428
1429
Sending spammers to password purgatory
How best to punish spammers? I give this topic a lot of thought because I spend a lot of time sifting through the endless rubbish they send me. And that's when it dawned on me: the punishment should fit the crime - robbing me of my time - which means that
1430
Hijacking Email with Cloudflare Email Routing
On Tuesday, December 7th 2021 I discovered a critical vulnerability in Cloudflare’s Email Routing service. This vulnerabilty enabled anyone to modify the routing configuration of any domain using the service. A bad actor could have overwritten the destination address to their own email address in order to read any…
1431
1432
Arris / Arris-variant DSL/Fiber router critical vulnerability exposure
Cybersecurity researcher, entrepreneur, and engineer.
1433
1434
1435
1436
1437
Lockdown: The coming war on general-purpose computing (2012)
This article is based on a keynote speech to the Chaos Computer Congress in Berlin, Dec. 2011.
1438
Why are McDonald’s Self Service Kiosks so hackable?
McDonalds in Australia do a decent cup of coffee. It’s not great but it’s consistently decent so I often start my day with a cup. Due to my travels around Australia in a decked out van I have seen how many McDonalds operate and just how many of
1439
Analyzing iOS 16 Lockdown Mode: Browser Features and Performance
Another year, another Apple iOS/iPadOS/MacOS release, right? But shortly before the iOS 16 betas dropped, Apple made an interesting announcement.
1440
TeamViewer installs suspicious font only useful for web fingerprinting
A weird almost unreadable font file bundled with TeamViewer for Windows software lets website detect if you’ve installed the software. Raises privacy concerns.