2851
New
The latest blog posts to take off on Hacker News. 4,335 posts.
2852
Explain like I’m 5: Kerberos (2013)
Explain like I’m 5 years old: Kerberos – what is Kerberos, and why should I care?
2853
Why So Many Top Hackers Hail from Russia
Conventional wisdom says one reason so many hackers seem to hail from Russia and parts of the former Soviet Union is that these countries have traditionally placed a much greater emphasis than educational institutions in the West on teaching information technology in middle and high schools, and yet they lack a…
2854
Important security vulnerabilities in OpenVPN
UPDATE: OpenVPN fuzzers now released. Summary I’ve discovered 4 important security vulnerabilities in OpenVPN. Interestingly, these were not found by the two recently completed audits of Open…
2855
2856
Securing a laptop for travel to China
We're all impatiently waiting on quantum-proof asymmetrical crypto algorithms to become commonplace. Until that happens, we must all live with the assumption that all currently used asymmetric crypto will be trivially decryptable once quantum computers become powerful enough. This is probably the reason why government…
2857
Someone cloned my website and is using it to scam people
I was looking on the DuckDuckGo search results for "anonymous bitcoin sms" today, just to see what was out there. My SMS Privacy was the top result, as expected. But the second result was new to me:
2858
How I Stole a User's Siacoin
A lesson in Sia wallet seed safety
2859
How I Found a 20-Year-Old Linux Kernel Bug
Robert O'Callahan. Christian. Kiwi. Software guy. All content human-authored unless otherwise noted.
2860
Signal intelligence 101: SIGINT targets
A quick overview of the various types of signal intelligence targets, with an emphasis on the Soviet Cold War systems
2861
2862
How Torch broke ls and made me vulnerable
If used incorrectly, LD_LIBRARY_PATH can cause a plethora of issues
2863
Set up a malware analysis lab with VirtualBox, INetSim and Burp
In this post we will set up a virtual lab for malware analysis. We’ll create an isolated virtual network separated from the host OS and from the Internet, in which we’ll setup two victim virtual machines (Ubuntu and Windows 7) as well as an analysis server to mimic common Internet services like HTTP or DNS. Then…
2864
APFS is not safe to use with names which have Unicode normalisation issues
APFS is not currently safe to use with names which might have Unicode normalisation issues – which means it is only safe with a limited ASCII character set.
2865
Secret Dots from Printer Outed NSA Leaker
Today, The Intercept released documents on election tampering from an NSA leaker. Later, the arrest warrant request for an NSA contractor ...
2866
How The Intercept Outed Reality Winner
Today, The Intercept released documents on election tampering from an NSA leaker. Later, the arrest warrant request for an NSA contractor ...
2867
2868
2869
Understanding the “GPL is a Contract” court case
There's been a lot of confusion about the recent Artifex v. Hancom case, in which the court found that the GPL was an enforceable contract. I'm going to try to explain the whole thing in clear terms for the legal layman.
2870
Getting Hacked, Lessons Learned
I read Cody Brown’s blog post about getting hacked on Thursday of last week. I feel very badly for Cody and plan to send him some BTC once I get access back to my account. His post helped me avoid his fate. I woke up Friday morning (central european summer time) and saw a bunch […]
2871
Maybe we shouldn't skip SHA-3
David Wong writes about cryptography, security, and programming.
2872
Hacker, Hack Thyself
We’ve read so many sad stories about communities that were fatally compromised or destroyed due to security exploits. We took that lesson to heart when we founded the Discourse project; we endeavor to build open source software that is secure and safe for communities by default, even if there
2873
OneLogin: Breach Exposed Ability to Decrypt Data
OneLogin , an online service that lets users manage logins to sites and apps from a single platform, says it has suffered a security breach in which customer data was compromised, including the ability to decrypt encrypted data.
2874
Maybe Skip SHA-3
In 2005 and 2006, a series of significant results were published against SHA-1 [ 1 ][ 2 ][ 3 ]. These repeated break-throughs caused something of a crisis of faith as cryptographers questioned whether we knew how to build hash functions at all. After all, many hash functions from the 1990's had not aged well [ 1 ][ 2…
2875
‘Carbon Dating’ the Internet Archive with OpenTimestamps
tl;dr: You can now use our searchable database to download Bitcoin timestamps for items in the Internet Archive.
2876
How Dirty COW works from the Linux kernel’s perspective
Dirty COW (CVE-2016-5195) is one of the most publicised local privilege escalation vulnerabilities in 2016, courtesy to its catchy name, cute logo, potential damages, and the fact that it was discovered in the wild by a researcher Phil Oester, meaning it was already under active use at the time of discovery.
2877
Get your loved ones off Facebook
I originally wrote this for my friends and family in 2015, to explain why the latest Facebook privacy policy is really harmful. It’s since been read b
2878
HTTPS on Stack Overflow: The End of a Long Road
Today, we deployed HTTPS by default on Stack Overflow. All traffic is now redirected to https:// and Google links will change over the next few weeks. The ac...
2879
Laptop Ban a Reaction to X-Ray Equipment Stolen by ISIS
On March 21st, 2017, the U.S. Department of Homeland Security ordered airlines flying to the U.S. out of 10 airports, mostly in Muslim-majority countries in the Middle East, to refuse to transport …
2880
Learning to break ciphers
Every now and then, I read a question about learning how to break ciphers, or more generally how to become a cryptographer/cryptologist. From my viewpoint, the most important part of learning this…