301
Recall: Stealing everything you've ever typed or viewed on your own Windows PC
Photographic memory comes to Windows, and is the biggest security setback in a decade.
New
The latest blog posts to take off on Hacker News. 536 posts.
302
Civil society in Latvia, Lithuania, and Poland targeted with Pegasus spyware
At least seven more Russian, Belarusian, Latvian, and Israeli journalists and activists have been targeted with Pegasus within the EU.
303
304
Apple Silicon MacBook batteries can't be replaced under warranty by third party
I bought a new M1 MacBook Pro in April 2022. A little over two years later, I'm seeing a service recommended message, and the maximum capacity of the battery is now down to 78%. Admittedly, my MacBook Pro experiences heavy usage: basically all day, every day. The batteries in my previous 2014 Intel MacBook Pro, which…
305
'Operation Endgame' Hits Malware Delivery Platforms
Law enforcement agencies in the United States and Europe today announced Operation Endgame , a coordinated action against some of the most popular cybercrime platforms for delivering ransomware and data-stealing malware. Dubbed “the largest ever operation against botnets,” the international effort is being billed as…
306
EU doubles down on penalising privacy-friendly and encrypted messaging services
An updated version of the methodology to be used in the Child Sexual Abuse Regulation, leaked by the news portal Contexte, reveals more details on the approach pursued by the Belgian Council Presidency: The text doubles-down on services that allow people to protect themselves. If services are used t
307
Let yourself be monitored: EU governments to agree on Chat Control
Based on a new proposal by the Belgian Minister of the Interior, EU governments could endorse the much-criticised child sexual abuse regulation (CSAR or chat control) as early as June after all. This is what internal information leaked to Pirate Party MEP and shadow rapporteur Patrick Breyer reveals
308
IBDNS: Intentionally Broken DNS server
Afnic, the association in charge of the .fr top-level domain and several other French overseas and generic TLDs, announced today the release as free software of its tool named IBDNS, standing for Intentionally Broken DNS.
309
Anonymous Source Shared Leaked Google Search API Documents
Update: We are diving deep into the Google API leak and what it means for marketers in our next episode of SparkToro Office Hours on June 27. Join Michael
310
Controlling the Taylor Swift Eras Tour wristbands with Flipper Zero
Many large concerts feature wristbands that light up on command. They are used to produce varied visual effects across a stadium. One compan...
311
Should I use JWTs for authentication tokens?
Let’s talk about what we’re talking about. JWT stands for JSON Web Tokens, a reasonably well defined standard for authenticated tokens. Specifically they have a header with format information, a payload, and a signature or message authentication code. The core idea is that whoever has the corresponding verification…
312
Instead of “auth”, we should say “permissions” and “login”
Most computer systems we interact with have an auth system of some kind. The problem is, that sentence is at best unclear and at worst nonsense. "Auth" can mean at least two things: authentication or authorization [1] . Which do we mean for an "auth system"? It's never perfectly clear and, unfortunately, we often mean…
313
Is regulated BGP security coming?
What impact would regulating BGP routing security have on the global Internet?
314
315
macOS Sonoma silently enabled iCloud Keychain despite my precautions
This is a follow-up to my blog post Updating from macOS Ventura to Sonoma silently enables iCloud Keychain . In the addendum to that blog post, I discussed a workaround, which was to delete my WiFi password right before rebooting into the updater. In a trial run on my M1 Mac mini, the workaround was successful.
316
Mediocre Engineer's Guide to HTTPS
As a mediocre engineer, I took Internet and HTTPS communication for granted and never dove any deeper. Today we’re improving as engineers and learning a rough overview of how internet communication works, specifically focusing on HTTP and TLS.
317
Abusing Go's Infrastructure
I apologize if this information is already known, but I couldn’t find any references about it and I wanted to understand what was going on and share with you because I think there is some value doing it. In case this wasn’t known, I apologize to the Go team for not talking to them first and jumping the full disclosure…
318
Samsung WB850F Firmware Reverse Engineering
Dissecting and symbol-mapping a camera firmware to get around WiFi hotspot mis-detection
319
Sharing details on a recent incident impacting one of our customers
Google Cloud shares details of an incident impacting one Australian customer's use of Google Cloud VMware Engine. Learn what happened and how we're preventing it from happening again.
320
Stark Industries Solutions: An Iron Hammer in the Cloud
Two weeks before Russia invaded Ukraine in February 2022, a large, mysterious new Internet hosting firm called Stark Industries Solutions materialized and quickly became the epicenter of massive distributed denial-of-service (DDoS) attacks on government and commercial targets in Ukraine and Europe. An investigation…
321
Advancing Our Bet on Asymmetric Cryptography
Google and many other organizations, such as NIST, IETF, and NSA, believe that migrating to post-quantum cryptography is important due to the large risk posed by a crypt…
322
323
The Irrevocable SSL Certificates of Cloudflare
moved this website 'worldofmatthew.com' away from CloudFlare back in August 2020.That should have been the end of the relation with CloudFlare for my website.
324
"No way to prevent this" say users of only language where this regularly happens
Xe Iaso's personal website.
325
Why Your Wi-Fi Router Doubles as an Apple AirTag
Apple and the satellite-based broadband service Starlink each recently took steps to address new research into the potential security and privacy implications of how their services geo-locate devices. Researchers from the University of Maryland say they relied on publicly available data from Apple to track the…
326
Abusing url handling in iTerm2 and Hyper for code execution
What are escape sequences
327
Going Dark: The war on encryption is on the rise
After Snowden’s whistleblowing in 2013, large parts of the internet became encrypted, enabling private and secure communication. Not everyone has welcomed this change. Most notably, the FBI and other U.S. government agencies have fought what is often called the “crypto wars”, the war on encryption. In recent years…
328
CVE-2024-4367 – Arbitrary JavaScript execution in PDF.js
A vulnerability in PDF.js found by Codean Labs. PDF.js is a JavaScript-based PDF viewer maintained by Mozilla. This bug allows an attacker to execute arbitrary JavaScript code as soon as a malicious PDF file is opened. This affects all Firefox users (
329
YARA is dead, long live YARA-X
For over 15 years, YARA has been growing and evolving until it became an indispensable tool in every malware researcher’s toolbox.
330
Cyber Security: A pre-war reality check
This is a lightly edited transcript of my presentation today at the ACCSS/NCSC/Surf seminar ‘Cyber Security and Society’. I want to thank the organizers for inviting me to their conference & giving me a great opportunity to talk about something I worry about a lot. Here are the original slides with notes, which may be…