1501
Psychic Signatures in Java
The long-running BBC sci-fi show Doctor Who has a recurring plot device where the Doctor manages to get out of trouble by showing an identity card which is actually completely blank. Of course, thi…
New
The latest blog posts to take off on Hacker News. 4,333 posts.
1502
Universal's Audible Watermark (2012)
This is my personal blog. The views expressed on this page are mine alone. Update, April 8, 2013: Can you hear it? Take the watermark listening test. Update, January 14, 2015: Check out the results of the listening test. A while ago, I wrote about my confusion regarding Weird Spotify Compression Artifacts. It turns…
1503
1504
1505
1506
Mac App Store Ransomware
This App Store app [My Metronome - Tempo Keeper] immediately asks you for money and then disables the “Quit” option so that you can never close it!
1507
1508
RaidForums gets raided, alleged admin arrested
The U.S. Department of Justice (DOJ) said today it seized the website and user database for RaidForums , an extremely popular English-language cybercrime forum that sold access to more than 10 billion consumer records stolen in some of the world’s largest data breaches since 2015. The DOJ also charged the alleged…
1509
Node.js packages don't deserve trust
Another week, another npm supply chain attack . Yikes! People on hacker news are wringing their hands about what should be done. The problem seems dire.
1510
An Ode to Apple’s Hide My Email
Apple's Hide My Email feature is one of the most under-rated privacy launches of the past year, and here's why.
1511
The 0.5 MB of nothing in all Apple Music files (2020)
Six percentage of each music files you’ve bought from Apple Music (iTunes Store) contain, literally, nothing. Why is Apple padding their music with zero-bytes?
1512
Tailscale’s human-scale networks are still controlled by Google and Microsoft
I’m not sure if they realize it yet, but Tailscale seems to work extremely well for polycules. Each user can have their own single-user Tailnet and explicitly share specific machines with other people. Both parties have to consent to sharing a device; either party can revoke this consent. The device owner can further…
1513
Some interesting malware I found
Update 6/28/22: a reader reached out to me and let me know that Malwarebytes now detects and removes this malware as Adware.Choprex and OSX.Generic.Suspicious - so if you're reading this because you are affected, go download Malwarebytes and run a full scan. Thanks Yegor!
1514
Authorization in a Microservices World
Authorization? How hard can it be? I am pretty sure that others have already solved it. We are not the first ones doing microservices. It should be easy to integrate what's already out there.
1515
Fake emergency search warrants draw scrutiny from Capitol Hill
On Tuesday, KrebsOnSecurity warned that hackers increasingly are using compromised government and police department email accounts to obtain sensitive customer data from mobile providers, ISPs and social media companies. Today, one of the U.S. Senate’s most tech-savvy lawmakers said he was troubled by the report and…
1516
I'm a scam prevention expert and I got scammed
When discussing scams and social engineering attacks, it's easy for security experts to imply the victims of these attacks should have known better. And, as much as we may like to think we'd handle these situations so much better, that's just not true.
1517
Hackers gaining power of subpoena via fake “emergency data requests”
There is a terrifying and highly effective “method” that criminal hackers are now using to harvest sensitive customer data from Internet service providers, phone companies and social media firms. It involves compromising email accounts and websites tied to police departments and government agencies, and then sending…
1518
The phones of Ukrainian president Zelensky
Interesting telephone equipment in the offices of Ukrainian president Zelensky
1519
A Closer Look at the Lapsus$ Data Extortion Group
Microsoft and identity management platform Okta both this week disclosed breaches involving LAPSUS$ , a relatively new cybercrime group that specializes in stealing data from big companies and threatening to publish it unless a ransom demand is paid. Here’s a closer look at LAPSUS$, and some of the low-tech but…
1520
1521
Nintendo Switch prevents downgrades by irreparably blowing its own fuses (2020)
How the Nintendo Switch uses irreversible hardware fuses to prevent firmware downgrades.
1522
Is macOS Look Up Destined for CSAM?
Remember Apple’s failed attempt to detect CSAM in images? Would that have been similar to the way that Visual Look Up works? Is this the thin end of the wedge?
1523
Decrypting your own HTTPS traffic with Wireshark
Code level discussion of web scraping, gray hat automation, growth hacking and bounty hunting
1524
Exploring Google Hangouts' easter eggs
Web developer and cybersecurity researcher
1525
Random number generator enhancements for Linux 5.17 and 5.18
The random number generator has undergone a few important changes for Linux 5.17 and 5.18, in an attempt to modernize both the code and the cryptography used. The smaller part of these will be released with 5.17 on Sunday, while the larger part will be merged into 5.18 on Monday, which should receive its first release…
1526
1527
Browser in the Browser (BITB) Attack
Providing security research and red team techniques
1528
What is: Linux keyring, gnome-keyring, Secret Service, and D-Bus (2019)
What are Linux keyring, gnome-keyring, Secret Service, and D-Bus - a brief overview and usage examples
1529
1530
Some discouraging anecdotes on how services handle account deletions
I asked 124 services to delete my user account. The results were mixed. 21 never responded, and 16 responded by created even more accounts. Some outright lied.