The latest blog posts to take off on Hacker News. 616 posts.
I read Cody Brown’s blog post about getting hacked on Thursday of last week. I feel very badly for Cody and plan to send him some BTC once I get access back to my account. His post helped me avoid his fate. I woke up Friday morning (central european summer time) and saw a bunch […]
David Wong writes about cryptography, security, and programming.
We’ve read so many sad stories about communities that were fatally compromised or destroyed due to security exploits. We took that lesson to heart when we founded the Discourse project; we endeavor to build open source software that is secure and safe for communities by default, even if there
OneLogin , an online service that lets users manage logins to sites and apps from a single platform, says it has suffered a security breach in which customer data was compromised, including the ability to decrypt encrypted data.
In 2005 and 2006, a series of significant results were published against SHA-1 [ 1 ][ 2 ][ 3 ]. These repeated break-throughs caused something of a crisis of faith as cryptographers questioned whether we knew how to build hash functions at all. After all, many hash functions from the 1990's had not aged well [ 1 ][ 2…
Mitchell Baker and Ankit Gadgil: India should pause further roll out of Aadhaar until a law protecting individual security is passed.
tl;dr: You can now use our searchable database to download Bitcoin timestamps for items in the Internet Archive.
Dirty COW (CVE-2016-5195) is one of the most publicised local privilege escalation vulnerabilities in 2016, courtesy to its catchy name, cute logo, potential damages, and the fact that it was discovered in the wild by a researcher Phil Oester, meaning it was already under active use at the time of discovery.
Check Point researchers revealed a new attack vector which threatens millions of users worldwide – attack by subtitles. By crafting malicious subtitle %
Travel Mode protects your 1Password data from unwarranted searches when you travel. Find out how – and why — to use it.
Biometric authentication systems – again – don’t deliver on their security promise: The iris recognition system of the new Samsung Galaxy S8 was successfully defeated by hackers of the Chaos...
I originally wrote this for my friends and family in 2015, to explain why the latest Facebook privacy policy is really harmful. It’s since been read b
Today, we deployed HTTPS by default on Stack Overflow. All traffic is now redirected to https:// and Google links will change over the next few weeks. The ac...
On March 21st, 2017, the U.S. Department of Homeland Security ordered airlines flying to the U.S. out of 10 airports, mostly in Muslim-majority countries in the Middle East, to refuse to transport …
Every now and then, I read a question about learning how to break ciphers, or more generally how to become a cryptographer/cryptologist. From my viewpoint, the most important part of learning this…
Stay up to speed on the rapid advancement of AI technology and the benefits it offers to humanity.
Written by Sergei Shevchenko and Adrian Nish BACKGROUND Since the release of the ETERNALBLUE exploit by ‘The Shadow Brokers’ last month se...
Introduction Back in 2014, while at Project Zero, I exploited a buffer overflow of a single NUL byte in glibc . Tavis Ormandy had found th...
Last week, for about three days, the macOS video transcoding app HandBrake was compromised . One of the two download servers for HandBrake was serving up a special malware-infested version of the app, that, when launched, would essentially give hackers remote control of your computer.
Tor Browser 7.0a4 is now available from the Tor Browser Project page and also from our...
A thorough understanding of the internet’s physical makeup has only recently emerged, thanks to painstaking work by UW-Madison researchers and their collaborators.
