New
The latest blog posts to take off on Hacker News. 431 posts.
Zerocoin: making Bitcoin anonymous
Wow, what the heck is going on with Bitcoin? When I started this post, the value of a single bitcoin had surged upwards of $250. It’s corrected a bit since then (down $100 or so), but it̵…
How to add Two-Factor Authentication to your website with Google Authenticator
Add Two-Factor Authentication To Your Website with Google Authenticator and Twilio SMS
A non-mathematical explanation of one way functions
Alice and Bob are crossword enthusiasts. Every morning they rush to complete the Daily Telegraph cryptic crossword . One morning Alice fini...
Nice Security Mindset Example
A real-world one-way function: Alice and Bob procure the same edition of the white pages book for a particular town, say Cambridge. For each letter Alice wants to encrypt, she finds a person in the book whose last name starts with this letter and uses his/her phone number as the encryption of that letter. To decrypt…
Don't Copy-Paste from Website to Terminal
You surely know this: You're looking at some website with some useful shell commands. However, those commands are long as hell and you know you're probably not gonna need them for a few years or so (so there's no need to memorize them). So, what do you do? You copy-paste them. Here's an example:
Until Today, If You Were 17, It Could Have Been Illegal To Read Seventeen.com
If you are 17 or under, a federal prosecutor could have charged you with computer hacking just for reading Seventeen magazine online—until today. It’s not because the law got any better. Earlier today, we wrote about news sites that alarmingly prohibit their youth audiences from accessing the news...
How to implement HTTPS in an insufficient manner
HTTPS or SSL or TLS or whatever you want to call it can be a confusing beast. Some say it’s just about protecting your password and banking info whilst the packets are flying around the web but I’ve long said that SSL is not about encryption [https://www.
Teenager Who Reads News Online? According to the DoJ, You May Be a Criminal
During his first term, President Barack Obama declared October 2009 to be “National Information Literacy Awareness Month,” emphasizing that, for students, learning to navigate the online world is as important a skill as reading, writing and arithmetic. It was a move that echoed his predecessor's...
ISP Advertisement Injection - CMA Communications
Apple Inc. endorsing H&R Block with a beautiful bright green banner ad, compliments of CMA Communications. Tired from the day’s ev...
Comcast caught hijacking web traffic
On November 20th, 2012 Comcast hijacked my HTTP traffic and re-routed it through their own servers, injecting a “notice” on the page before completing the request. What this means is instead of my web request being routed to the website I wanted to visit, Comcast took it upon themselves to hijack my web…
What I've Been Thinking About
I’m starting to think about my next book, which will be about power and the Internet—from the perspective of security. My objective will be to describe current trends, explain where those trends are leading us, and discuss alternatives for avoiding that outcome. Many of my recent essays have touched on various facets…
Problems with the TSA
Coverage: Hacker News , Slashdot , BoingBoing , RT America News , Tumblr , RightThisMinute , RTM update , PapersPlease 2014 & 2015
Worst CAPTCHA Ever
By definition, CAPTCHA should be easy to read by humans but hard to read by machines. Apparently, they don’t agree with that at D&B:
Extra security measures for next week's releases
The core committee has decided that one of the security issues due to be fixed next week is sufficiently bad …
The DDoS that almost broke the Internet
The New York Times this morning published a story about the Spamhaus DDoS attack and how CloudFlare helped mitigate it and keep the site online. The Times calls the attack the largest known DDoS attack ever on the Internet.
Mailchimp offers 10% discount for using 2-factor security
Browse how-to articles on starting, running, and marketing your business, plus thought-provoking podcasts and films to inspire your inner entrepreneur.
Firefox getting smarter about third-party cookies
Mozilla has a long running interest in fostering greater transparency, trust and accountability related to privacy and the many cookie-based practices we see today. On Friday, Mozilla released a Firefox ...
Changes to the Blog
I have made a few changes to my blog that I’d like to talk about. The first is the various buttons associated with each post: a Facebook Like button, a Retweet button, and so on. These buttons are ubiquitous on the Internet now. We publishers like them because it makes it easier for our readers to share our content. I…
What happens when the Secret Service uses a NSL on you
Anubis could not load its JavaScript. The server may be overloaded. Please reload the page to try again.