361
New
The latest blog posts to take off on Hacker News. 431 posts.
362
363
364
365
366
Why DRM is such a fucking stupid idea
Digital comics publisher JManga is collapsing . Two weeks from now you will no longer be able to "purchase" anything from them. Two months from now, anything that was "purchased" from them will cease to exist. If you spent hundreds of pounds in their store then, well, that's bad luck for you. This…
367
Achilles Heel of OAuth or Why Facebook Adds #_=_
This is a short addition to the previous rants on OAuth problems. We've got Nir Goldshlager working on our side (he simply loves bounties...
368
369
Civil Liberties Groups Speak Out Against CISPA in Lead Up to Hearings
On Monday, EFF and over 30 other Internet rights organizations sent a letter to members of Congress demanding they vote no on the "cybersecurity" bill known as CISPA. The letter starts off a week in which Congress will hold three different hearings about CISPA and computer and network security. In...
370
Releasing my book "Hacking the Xbox" as a free PDF in honor of Aaron Swartz
Dear Reader, No Starch Press and I have decided to release this free ebook version of Hacking the Xbox in honor of Aaron Swartz. As you read this book, I hope that you’ll be reminded of how important freedom is to the hacking community and that you’ll be inclined to support the causes that Aaron believed in. Download…
371
Here come the encryption apps
It seems like these days I can’t eat breakfast without reading about some new encryption app that will (supposedly) revolutionize our communications — while making tyrannical regimes fa…
372
Hacking Github with Webkit
Previously on Github: XSS , CSRF ( My github followers are real , I gained followers using CSRF on bitbucket ), access bypass, mass assignm...
373
374
375
376
377
378
Phishing Has Gotten Very Good
This isn’t phishing; it’s not even spear phishing. It’s laser-guided precision phishing: One of the leaked diplomatic cables referred to one attack via email on US officials who were on a trip in Copenhagen to debate issues surrounding climate change. “The message had the subject line ‘China and Climate Change’ and…
379
380
381
HTML5 localStorage allows sites to fill up users' hard disks
Use HTML5 localStorage to completely fill up Chrome, Safari, and IE users hard disks. Trololo...
382
Introducing Google+ Sign-In: simple and secure, minus the social spam
Today we’re adding a new feature to the Google+ platform: application sign-in . Whether you’re building an app for Android, iOS or the web, ...
383
Bypassing Google’s Two-Factor Authentication
Explore the Duo Blog for expert tips, security insights, and resources to stay updated on the latest in security and access management trends.
384
Drone ‘Nightmare Scenario’ Now Has A Name: ARGUS
The PBS series NOVA , “ Rise of the Drones ,” recently aired a segment detailing the capabilities of a powerful aerial surveillance system known as ARGUS-IS, which is basically a super-high, 1.8 gigapixel resolution camera that can be mounted on a drone. As demonstrated in this clip , the system is capable of…
385
A simple solution to credit card fraud, and why you won't see it any time soon
This is the first in what will probably be a very long series of articles. Ultimately, this is the beginning of the story of why I stopped ...
386
387
388
NBC.com hacked, serving up Citadel malware
A few hours ago Ronald Prins of Fox-IT (@cryptoron) was tweeting about NBC.com infecting its visitors with malicious software (malware). We were investigating this as well and found the following i…
389
You cannot have a digital copy of the DC Code
On how the law was taken away from the people of Washington, DC by legal shenanigans
390
How we hacked Facebook with OAuth2 and Chrome bugs
TL;DR We (me and @isciurus ) chained several different bugs in Facebook, OAuth2 and Google Chrome to craft an interesting exploit. Mallory...