The latest blog posts to take off on Hacker News. 616 posts.
When adding two integers i and j of bitlength b, the result will be of bitlength b + 1 in the worst case. This means they can easily be naively added. If the result is larger or equal to F p one has only to subtract p from the result, i.e.:
It's my strong opinion that your company should avoid the Grsecurity product sold at grsecurity.net because it presents a contributory infringement and breach of contract risk.
In pursuit of market control now, deployers of DRM are robbing us of our culture in perpetuity by enclosing the future commons. It’s possible that you think that unauthorised use of copyright…
Update, March 13, 2018 Wildcard certificate support is live. Let’s Encrypt will begin issuing wildcard certificates in January of 2018. Wildcard certificates are a commonly requested feature and we understand that there are some use cases where they make HTTPS deployment easier. Our hope is that offering wildcards…
Recent CPUs from Intel requires a binary called the “Management Engine” (Intel ME, or ME for short). This binary is one of three parts required if a business elects to use Intel’s Active Management Technology (AMT), which Purism avoids. Purism laptops can function with a neutralized and disabled ME, as we have tested…
Personal Blog of Christian Haschek
Lawmakers are getting serious about renewing the U.S. government’s Internet spying powers, so we need to get serious about stopping their bad proposals. First out of the gate is a bill from Sen. Tom Cotton, an ardent defender of government surveillance. His bill would not just reauthorize, but make...
In Alice v. CLS Bank, the Supreme Court ruled that an abstract idea does not become eligible for a patent simply by being implemented on a generic computer. This 2014 decision has significantly reduced the harm caused by vague and overbroad software patents. Before Alice, patent owners who had...
Prior to the release of the Mozilla Observatory a year ago, I ran a scan of the Alexa Top 1M websites. Despite being available for years, the usage rates of ...
Let’s Encrypt has reached a milestone: we’ve now issued more than 100,000,000 certificates. This number reflects at least a few things: First, it illustrates the strong demand for our services. We’d like to thank all of the sysadmins, web developers, and everyone else managing servers for prioritizing protecting your…
Do you have feedback you'd like to give to Google, Facebook, StackOverflow, Inc., or Gandi? Now there's a website that will collect that feedback. Or... not.
Last month we shared statistics on some popular reflection attacks. Back then the average SSDP attack size was ~12 Gbps.
A detailed troubleshooting story that covers both simple and complex tales of container isolation. Read this terrific guide for insight from A-Z.
Ubuntu is an open source software operating system that runs from the desktop, to the cloud, to all your internet connected things.
Blog about anti-virus software vulnerabilities.
Explain like I’m 5 years old: Kerberos – what is Kerberos, and why should I care?
KeePassXC Password Manager
The TSA is testing new requirements that passengers remove books and other paper goods from their carry-on baggage when going through airline security. Given the sensitivity of our reading choices, this raises privacy concerns .
I was preparing some AWS Security related training. Soon, I realized that this topic is too huge to fit into my brain. So I s...
The Wikimedia Foundation’s mission is to support the communities of readers and contributors who share and consume information on Wikipedia and the other free-knowledge projects. Privacy and anonym…
Learn how to create a Python program that sends you an SMS text message whenever an event happens, such as university class registration opens.
Conventional wisdom says one reason so many hackers seem to hail from Russia and parts of the former Soviet Union is that these countries have traditionally placed a much greater emphasis than educational institutions in the West on teaching information technology in middle and high schools, and yet they lack a…
UPDATE: OpenVPN fuzzers now released. Summary I’ve discovered 4 important security vulnerabilities in OpenVPN. Interestingly, these were not found by the two recently completed audits of Open…
