4171
How CDNs Generate Certificates
Say Hi to Thomas. Thomas's first weeks at Fly have been hectic, but he's been taking notes, copious notes that can teach you all about the wild world of certificate infrastructure. Read on to discover more...
New
The latest blog posts to take off on Hacker News. 8,771 posts.
4172
California agency blocks release of police use of force, surveillance training
Under a California law that went into effect on January 1, 2020, all law enforcement training materials must be “conspicuously” published on the California Commission on Peace Officer Standards and Training (POST) website. However, if you visit POST’s Open Data hub and try to download the officer...
4173
United States wants HTTPS for all government sites, all the time
The Sophos Blog
4174
An even worse anti-encryption bill than EARN IT
Stanford Center for Internet and Society2020903 points351 commentscited by 7Society, Policy & Culture details
On Tuesday, June 23, Senators Graham (R-SC), Cotton (R-AR), and Blackburn (R-TN) introduced a bill that is a full-frontal nuclear assault on encryption in the United States. You can find the bill text here. It's been formally introduced as Senate bill 4051, which you can
4175
No, Safari 14 does not block Google Analytics
This article aims to subdue the rumors that Safari 14 will block Google Analytics (and other similar libraries) by default. It will not.
4176
Microsoft Defender ATP for Linux is now generally available
Today we are excited to announce general availability of Microsoft Defender Advanced Threat Protection (ATP) for Linux! - This initial release delivers...
4177
‘BlueLeaks’ Exposes Files from Hundreds of Police Departments
Hundreds of thousands of potentially sensitive files from police departments across the United States were leaked online last week. The collection, dubbed “ BlueLeaks ” and made searchable online, stems from a security breach at a Texas web design and hosting company that maintains a number of state law enforcement…
4178
Reverse Engineering the Comtech AHA363 PCIe Gzip Accelerator Board
All this work was done in November last year. I haven’t worked on it since, but others have shown interest in picking this up, so it’s about time this gets thrown out in the open.
4179
4180
Maersk, Me and NotPetya
Maersk is the world’s largest integrated shipping and container logistics company.
4181
Turn on MFA Before Crooks Do It for You
Hundreds of popular websites now offer some form of multi-factor authentication (MFA), which can help users safeguard access to accounts when their password is breached or stolen. But people who don’t take advantage of these added safeguards may find it far more difficult to regain access when their account gets…
4182
FF Sandbox Escape
By James Forshaw, Project ZeroIn my previous blog post I discussed an issue with the Windows Kern...
4183
Mozilla VPN
We are working hard to make the official product, the Mozilla VPN, available in selected regions this year. We will continue to offer the Mozilla VPN at the current pricing model for a limited time, which allows you to protect up to five devices on Windows, Android, and iOS at $4.99/month.
4184
GDPR guide for developers
Is this guide only for developers? This guide is mainly aimed at developers working alone or in teams, team leaders, service providers but also at anyone interested in web or application development. It provides advice and best practices, and thus gives useful keys to understand the GDPR for every stakeholder…
4185
4186
Zoom to bring end-to-end encryption to all users, including non-paying
Learn more about how to use each Zoom product to connect with coworkers, customers, businesses, and more with insights and best practices.
4187
4188
4189
4190
Third-Party Audit of Rustls
In May and June 2020, Cure53 completed an audit of ring , webpki , and rustls . Their report ( PDF ) fully describes the audit, and makes for interesting reading.
4191
Best practices for managing and storing secrets like API keys and credentials
We have compiled a list of some of the best practices to prevent API key leakage and keep secrets and credentials safe. Secrets management doesn’t have a one-size-fits-all approach, so this list considers multiple perspectives so you can be informed in deciding to or not to implement strategies.
4192
Lamphone: Real-Time Passive Sound Recovery from Light Bulb Vibrations
Recent studies have suggested various side-channel attacks for eavesdropping sound by analyzing the side effects of sound waves on nearby objects (e.g., a bag of chips and window) and devices (e.g., motion sensors). These methods pose a great threat to privacy, however they are limited in one of the
4193
A survey of recent iOS kernel exploits
Posted by Brandon Azad, Project ZeroI recently found myself wishing for a single online reference...
4194
GitLab acquires Peach Tech and Fuzzit
Acquisitions will make GitLab the first security solution to offer both coverage-guided and behavioral fuzz testing
4195
4196
Playing around with the Fuchsia operating system
A look at the new Fuchsia Operating System.
4197
UtahFS: Encrypted File Storage
Several months ago, I realized that I had a lot of sensitive files on my computer (my diary, if you must know) that I was afraid of losing, but I didn’t feel comfortable putting them in something like Google Drive or Dropbox. Introducing UtahFS.
4198
SeL4 is verified on RISC-V
Sounds great! But what does it mean? seL4 seL4 (pronounced ess-e-ell-four) is arguably the world’s most secure operating system (OS) kernel. The OS kernel is the lowest level of software runn…
4199
The Impending Doom of Expiring Root CAs and Legacy Clients
Regular readers will know that I'm very active in the CA / PKI space and even deliver a 2-day advanced training course [https://www.feistyduck.com/training/the-best-ssl-and-tls-training-in-the-world] on the topic. Over the last year or so I've been watching
4200
Two vulnerabilities in Zoom could lead to code execution
A member of Cisco Talos discovered this vulnerability. Cisco Talos recently discovered two vulnerabilities in the popular Zoom video chatting application that could allow a malicious user to execute arbitrary code on victims’ machines. Video conferencing software has skyrocketed in popularity during the COVID-19…