2341
Google's Captcha in Firefox vs. in Chrome
I use Firefox, and this morning I've spent quite some time proving to passive-aggressive Google that I'm not a robot.
New
The latest blog posts to take off on Hacker News. 4,335 posts.
2342
2343
Apple Is Listening
They had encountered significant turbulence in the product line over the preceding years, especially Macs. It was a rough time to be a pro Mac user.
2344
State of Industrial Control Systems in Poland and Switzerland
TL;DR New update for Kamerka allows to map Industrial Control Systems of whole country. As in previous version, interactive map is created…
2345
2346
2347
Let's Clarify Some Misunderstandings Around Sign in with Apple
tl;dr This is a good move for users in the iOS ecosystem, and is primarily designed as an alternative for apps that currently use "Sign in with [Facebook/Twitter/Google]" to avoid leaking sensitive user info. Yes, Apple is entering the ...
2348
How does Apple privately find offline devices?
At Monday’s WWDC conference, Apple announced a cool new feature called “Find My”. Unlike Apple’s “Find my iPhone”, which uses cellular communication and the lost…
2349
Plausible Deniability and Gaslighting in Fighting Ad Blockers
Google is planning changes in Chrome impacting ad blocker extensions and people are wondering whether those changes are motivated by self-interest or whether there are plausible, benign explanations.
2350
TSA-style body scanners are coming to public spaces
Civil Rights, Criminal Justice and Homeland Security
2351
Abuses show Assange case was never about law
It is astonishing how often one still hears well-informed, otherwise reasonable people say about Julian Assange: “But he ran away from Swedish rape charges by hiding in Ecuador’s embassy in London.” That short sentence includes at least three factual errors. In fact, to repeat it, as so many people do, you would
2352
Information Security Mental Models
Mental models frame how we think about the world. This article describes how they work and why we need more of them in information security.
2353
Should Failing Phish Tests Be a Fireable Offense?
Would your average Internet user be any more vigilant against phishing scams if he or she faced the real possibility of losing their job after falling for one too many of these emails? Recently, I met someone at a conference who said his employer had in fact terminated employees for such repeated infractions. As this…
2354
The sorry state of OpenSSL usability (2017)
OpenSSL's inadequate documentation, confusing key formats, and deprecated interfaces make it difficult to use, despite its importance.
2355
ProtonMail Voluntarily Offers Assistance for Real-Time Surveillance?
Proton Mail disputed some of the content of the post originally published at this location. We will continue the discussion directly with Proton Mail, in particular at a meeting in …
2356
I can see your local web servers
How many web servers are running on your machine right now? Do all of those development web servers have a secure login, and restrictive CORS permissions? You don’t know? Allow me to check for you:
2357
What I Learned Trying to Secure Congressional Campaigns
You know how it happens. You try to secure one Congressional campaign, and then another, and pretty soon you can't stop. You'll fly across the country just to brief a Green Party candidate in a district the Republicans carried by 60 points. You want more, more, always looking for that next fix.
2358
Twitter accounts are being hijacked for spam
It seems that Twitter has lost control of its advertising system. This blog post will show you why it is dangerous to click on any Twitter advertising. Twitter ads have always been a bit crap, but I've seen a recent influx in outright scams. Let me step you through a couple of examples. A typical click-bait headline…
2359
2360
First American Financial Corp. Leaked Hundreds of Millions of Insurance Records
The Web site for Fortune 500 real estate title insurance giant First American Financial Corp. [ NYSE:FAF ] leaked hundreds of millions of documents related to mortgage deals going back to 2003, until notified this week by KrebsOnSecurity. The digitized records — including bank account numbers and statements, mortgage…
2361
PayPal's Beautiful Demonstration of Extended Validation FUD
Sometimes the discussion around extended validation certificates (EV) feels a little like flogging a dead horse. In fact, it was only September that I proposed EV certificates are already dead [https://www.troyhunt.com/extended-validation-certificates-are-dead/] for all sorts of good reasons that have only been…
2362
Fingerprinting iPhones
This clever attack allows someone to uniquely identify a phone when you visit a website, based on data from the accelerometer, gyroscope, and magnetometer sensors. We have developed a new type of fingerprinting attack, the calibration fingerprinting attack. Our attack uses data gathered from the accelerometer…
2363
2364
2365
2366
2367
ELF files on Linux
An step-by-step introduction into ELF files. Learn the structure and format, to understand how binaries and libraries on Linux systems work.
2368
Microsoft Patches ‘Wormable’ Flaw in Windows XP, 7 and Windows 2003
Microsoft today is taking the unusual step of releasing security updates for unsupported but still widely-used Windows operating systems like XP and Windows 2003 , citing the discovery of a “wormable” flaw that the company says could be used to fuel a fast-moving malware threat like the WannaCry ransomware attacks of…
2369
Senate Testimony on Privacy Rights and Data Collection in a Digital Economy
Idle Words > Talks > Privacy Rights and Data Collection in a Digital Economy (Senate hearing)
2370
The Origin of ‘Script Kiddie’
The term script kiddie probably originated around 1994, but the first public record is from 1996.