The latest blog posts to take off on Hacker News. 473 posts.
A 14-year-old eighth grader in Florida, Domanik Green, has been charged with a felony for “hacking” his teacher’s computer. The “hacking” in this instance was using a widely known password to change the desktop background of his teacher’s computer with an image of two men kissing. The outrage of...
The official blog of WizSec, a group of bitcoin security specialists, and their investigation into MtGox.
Our client, Chris Roberts, a founder of the security intelligence firm One World Labs, found himself detained by the FBI earlier this week after tweeting about airplane network security during a United Airlines flight. When Roberts landed in Syracuse, he was questioned by the FBI, which ultimately...
“I’m asking all the citizens of North Charleston to continue taping.” That is what Councilwoman Dorothy Williams said in response to the shooting death of Walter Scott. She and others recognize that the story would have been very different without the video showing that a white police officer shot...
When dealing with an extensive infrastructure and many team members, managing SSH keys for authentication can become unwieldy. However, SSH can utilize cert…
SQLite is probably the most popular embedded database in use today; it is also known for being exceptionally well-tested and robust. In co...
A Finnish online bank leaked out user data by using a third-party tracker script.
This post describes our analysis of an attack tool that we identify as separate from, but co-located with, the Great Firewall of China.
The White House Office of Management and Budget has published a new standard recommending full HTTPS on all federal web sites and web services. They are accepting public comments until April 14; if you care about privacy and security, you should weigh in.This post is our public comment: we whole-...
TL;DR The Admin framework in Apple OS X contains a hidden backdoor API to root privileges. It’s been there for several years (at least since 2011), I found it in October 2014 and it can be exploite…
Los Angeles — Human Rights Watch, a nonpartisan organization that fights human rights abuses across the globe, filed suit against the U.S. Drug Enforcement Administration late Tuesday for illegally collecting records of its telephone calls to certain foreign countries as part of yet another...
This blog is written by Hanno Böck. Unless noted otherwise, its content is licensed as CC0 .
On the morning of April 1st, the White House issued a new executive order (EO) that asserts that malicious “cyber-enabled activities” are a national threat, declares a national emergency, and establishes sanctions and other consequences for individuals and entities. While computer and information...
A security flaw in New South Wales’ Internet voting system may have left as many as 66,000 votes vulnerable to interception and manipulation in a recent election, according to security researchers. Despite repeated assurances from the Electoral Commission that all Internet votes are “fully...
If you were to browse Amazon right now and someone was eavesdropping on your connection, they could tell exactly what you were looking at. They could even tell what you've bought.
This week we released the latest version of HTTPS Everywhere to all of our users. Compared to the previous major release, this version introduces thousands of new rules, translations of the interface into sixteen new languages, and support for "Block All HTTP Requests" in Chrome. If you already use...
A few weeks back I wrote an update on the Truecrypt audit promising that we’d have some concrete results to show you soon. Thanks to some hard work by the NCC Crypto Services group, soon is n…
Posted by Adam Langley, Security Engineer On Friday, March 20th, we became aware of unauthorized digital certificates for several Google ...
For the past week, the website "GitHub" has been under attack by China. In this post, I pin-point where the attack is coming from by doing a...
