2671
Meltdown Initial Performance Regressions
KPTI/KAISER Meltdown Initial Performance Regressions
New
The latest blog posts to take off on Hacker News. 4,335 posts.
2672
2673
2674
How Google Chrome’s ad blocker works
Get the details on how the built-in ad-blocker in Google Chrome works. The ad-blocker only kicks in on websites in violation of the Better Ad Standards policies.
2675
Spectre/Meltdown Pits Transparency Against Liability
There is a lot of righteous anger directed toward Intel over CPU bugs that were revealed by Spectre/Meltdown. I agree that things could have been handled better, particularly with regards to transparency and the sharing of information among the relevant user communities that could have worked together to deploy…
2676
Advanced Denanonymization through Strava
Strava is getting some bad press, because its heatmap can be used to infer the existence and floorplan of various US/UK military and govt...
2677
2678
Audio Adversarial Examples
Figure from our paper: given any waveform, we can modify it slightly to produce another (similar) waveform that transcribes as any different target phrase.
2679
2680
‘Jackpotting’ Attacks Hit U.S. ATMs
ATM “ jackpotting ” — a sophisticated crime in which thieves install malicious software and/or hardware at ATMs that forces the machines to spit out huge volumes of cash on demand — has long been a threat for banks in Europe and Asia, yet these attacks somehow have eluded U.S. ATM operators. But all that changed this…
2681
About rel=noopener (2016)
2021 update: Browsers now implicitly set rel=noopener for any target=_blank link, following a spec change . If the demo on this page no longer seems scary, congratulations — you’re using a modern browser!
2682
7-Zip: Multiple Memory Corruptions via RAR and ZIP
Blog about anti-virus software vulnerabilities.
2683
Mobile Device Management invades privacy
With BYOD, companies are more than ever keen on protecting their data. MDM tools, like Google Apps, do more than that; they invade your privacy.
2684
2685
Meltdown and Spectre Linux Kernel Status
I keep getting a lot of private emails about my previous post about the latest status of the Linux kernel patches to resolve both the Meltdown and …
2686
2687
CloudFlair: Bypassing CloudFlare using Internet-wide scan data
Cloudflare is a service that acts as a middleman between a website and its end users, protecting it from various attacks. Unfortunately, those websites are often poorly configured, allowing an attacker to entirely bypass Cloudflare and run DDoS attacks or exploit web-based vulnerabilities that would otherwise be…
2688
2689
Some thoughts on security after ten years of Qmail 1.0
Some thoughts on security after ten years of qmail 1.0 Bernstein, 2007 I find security much more important than speed. We need invulnerable software systems, and we need them today, even if they ar…
2690
Some thoughts on Spectre and Meltdown
The story of these attacks starts in late 2004. I had submitted my doctoral thesis and had a few months before flying back to Oxford for my defense, so I turned to some light reading: Intel's latest "Optimization Manual", full of tips on how to write faster code. (Eking out every last nanosecond of performance has…
2691
Long-Term Consequences of Spectre and Its Mitigations
Robert O'Callahan. Christian. Kiwi. Software guy. All content human-authored unless otherwise noted.
2692
Using a Yubikey for GPG and SSH
It’s been a long time since my last blogpost, but I’m back with a post about how to use your Yubikey 4 for GPG and SSH keys.\n
2693
LinkedIn is ignoring user settings
Logged out users are prevented from reaching LinkedIn profiles set to complete public visibility
2694
Spectre and the end of langsec
wingolog: article: spectre and the end of langsec
2695
Website Glitch Let Me Overstock My Coinbase
Coinbase and Overstock.com just fixed a serious glitch that allowed Overstock customers to buy any item at a tiny fraction of the listed price. Potentially more punishing, the flaw let anyone paying with bitcoin reap many times the authorized bitcoin refund amount on any canceled Overstock orders.
2696
Attack of the Week: Group Messaging in WhatsApp and Signal
If you’ve read this blog before, you know that secure messaging is one of my favorite topics. However, recently I’ve been a bit disappointed. My sadness comes from the fact that lately …
2697
Microsoft disables Windows Update when Meltdown/Spectre registry key isn't set
Last week, Microsoft issued January’s cumulative security fixes for January 2018. Although the media focus has been around “Meltdown” and…
2698
2699
2700
Meltdown and Spectre Linux kernel status
By now, everyone knows that something “big” just got announced regarding computer security. Heck, when the Daily Mail does a report on it …