271
Google's Street View computer vision can beat reCAPTCHA with 99% accuracy
Posted by Vinay Shet, Product Manager, reCAPTCHA Have you ever wondered how Google Maps knows the exact location of your neighborhood cof...
New
The latest blog posts to take off on Hacker News. 391 posts.
272
273
Heartbleed Update v3
Stay ahead with the latest cloud computing, content delivery, and cybersecurity trends, expert analyses, and tech insights from the official Akamai blog.
274
275
A New Development for Coverity and Heartbleed
Byte swapping does not necessarily imply the data comes from an external source. For example, when writing graphics code, you sometimes need to do byte swapping if you’re converting between 24-bit RGB and BGR image formats (Windows’ GDI famously uses BGR so this is one place where you need to do such conversions)…
276
277
278
How we got read access on Google’s production servers
This is the original writeup on how Detectify security researchers gained read access on Google's production servers.
279
Heartbleed and Static Analysis
The issue with things like Frama-C is that they are by far the easiest to use if you start out a project using them, and you often don’t know which projects you retroactively wished you had done so until they are big and crufty.
280
Preventing heartbleed bugs with safe programming languages
The Heartbleed bug in OpenSSL has resulted in a fair amount of damage across the internet. The bug itself was quite simple and is a textbook case for why programming in unsafe languages like C can be problematic. As an experiment to see if a safer systems programming language could have prevented the bug I tried…
281
282
283
Were Intelligence Agencies Using Heartbleed in November 2013?
Yesterday afternoon, Ars Technica published a story reporting two possible logs of Heartbleed attacks occurring in the wild, months before Monday's public disclosure of the vulnerability. It would be very bad news if these stories were true, indicating that blackhats and/or intelligence agencies...
284
285
286
287
Tarsnap: No heartbleed here
There's a few reasons for this. First, the Tarsnap client-server protocol does not use TLS; instead, it uses a protocol which is about 100x simpler (in terms of the number of pages of documentation required to define it). This means there's less code and far fewer edge cases where bugs can lurk without being triggered…
288
289
290
Heartbleed
Heartbleed is a catastrophic bug in OpenSSL: “The Heartbleed bug allows anyone on the Internet to read the memory of the systems protected by the vulnerable versions of the OpenSSL software. This compromises the secret keys used to identify the service providers and to encrypt the traffic, the names and passwords of…
291
My Heart Bleeds for OpenSSL
Overview Today has been eventful, to say that least. My colleague and I patched several services, re-issued keys for them and started the ...
292
293
OpenSSL Heartbleed Security Update
Yesterday the OpenSSL Project released an update to address the CVE-2014-0160 vulnerability, nicknamed “Heartbleed.” This serious vulnerability affects a..
294
Hijacking user sessions with the Heartbleed vulnerability
The Heartbleed issue is actually worse than it might immediately seem (and it seems pretty bad already).
295
296
297
298
299
300
