421
New
The latest blog posts to take off on Hacker News. 616 posts.
422
423
424
Stupid security things
My mate Lars Klint shared this tweet the other day: > Your password is not unique. pic.twitter.com/ga4GwxtzrQ [https://t.co/ga4GwxtzrQ] — Lars Klint (@larsklint) April 16, 2017 [https://twitter.com/larsklint/status/853507749488975873] Naturally, I passed it on [https://twitter.com/troyhunt/status/853517036131041280]…
425
An analysis of the Nomx secure communications device
With slick marketing, catchy taglines and some pretty bold claims about their security, nomx claim to have cracked email security. Let's see if they have.
426
Symantec CA Response to Google Proposal and Community Feedback
Broadcom Community - VMTN, Mainframe, Symantec, Carbon Black
427
Golang SSH Redux
I’ll cover the post/blog, and then I’d like to counter some misconceptions. While part of me thinks “I must’ve been very unclear to have so many people misunderstand”, I also saw how many people commented without bothering to read, so really there’s a limit to how much self-flagellation will happen.
428
Access Now and EFF Condemn the Arrest of Tor Node Operator Dmitry Bogatov
This post was written in collaboration with Amie Stepanovich at Access Now. On April 6, Russian math instructor Dmitry Bogatov was arrested in Moscow and charged with “preparing to organize mass disorder” and making “public calls for terrorist activity” due to a gross misunderstanding about the...
429
430
Unroll.me
Link to: http://blog.unroll.me/we-can-do-better/
431
Tales of SugarCRM Security Horrors
This is the personal website of Egidio Romano, a very curious guy from Sicily, Italy. He's a computer security enthusiast, particularly addicted to webapp security.
432
433
Njalla – A privacy-aware domain registration service
FOR IMMACULATE RELEASE. Announcing the opening of NJAL.LA
434
What Happens When You Send a Zero-Day to a Bank?
THIS POST MOVED TO MY NEW BLOG AT https://blog.phor.net/how-to-zero-day-a-bank
435
Serverless security implications from infra to OWASP
By its very nature, Serverless (FaaS) addresses some of today’s biggest security concerns but it doesn’t fix it all. This post outlines the top areas where Serverless helps or hinders our security efforts, offering advice on how to address concerns and thoughts on what’s to come next.
436
Statement concerning the arrest of Dmitry Bogatov
[09 Dec 2017] Updated Debian 8: 8.10 released [09 Dec 2017] Updated Debian 9: 9.3 released [07 Oct 2017] Updated Debian 9: 9.2 released [12 Aug 2017] DebConf17 closes in Montreal and DebConf18 dates announced [22 Jul 2017] Updated Debian 9: 9.1 released [22 Jul 2017] Updated Debian 8: 8.9 released [18 Jun 2017] Debian…
437
Phishing with Unicode Domains
Vulnerability in Chrome, Firefox, and Opera makes users susceptible to phishing with Unicode domains
438
439
Preventing AMI’s BiOS from interfering with coreboot flashing on the Librem 13
Purism makes premium phones, laptops, mini PCs and servers running free software on PureOS. Purism products respect people's privacy and freedom while protecting their security.
440
Golang SSH Security
Working on a project for a client recently, I needed to speak the SSH protocol in Golang code. So I started with the x/crypto/ssh package, part of the suite of libraries from the Golang developers which is not part of the standard library and not part of their usual compatibility guarantees, but more along the lines…
441
442
Shadow Brokers exploits are patched or inactive on supported Windows platforms
Today, Microsoft triaged a large release of exploits made publicly available by Shadow Brokers. Understandingly, customers have expressed concerns around the risk this disclosure potentially creates. Our engineers have investigated the disclosed exploits, and most of the exploits are already patched. Below is our…
443
ShadowBrokers: The NSA Compromised the SWIFT Network
This is by far, the most interesting release from Shadow Brokers as it does not only contain tools — but also materials describing the most…
444
EFF’s “Spying on Students” Report Highlights Tech Companies’ Data Collection
San Francisco—School children are being spied on by tech companies through devices and software used in classrooms that often collect and store kids’ names, birth dates, browsing histories, location data, and much more—often without adequate privacy protections or the awareness and consent of...
445
Digital Privacy at the U.S. Border: Protecting the Data On Your Devices
by Sophia Cope, Amul Kalia, Seth Schoen, and Adam SchwartzDownload the report as a PDF.EXECUTIVE SUMMARYThe U.S. government reported a five-fold increase in the number of electronic media searches at the border in a single year, from 4,764 in 2015 to 23,877 in 2016.[fn] Gillian Flaccus, Electronic...
446
Adding a security key to Gmail
Your primary email (the one you give to banks, social media sites, etc.) is the most important online account you have. If an attacker can take over your primary email account, they can reset passwords on every other service that uses that email for account recovery.
447
448
449
Over the Air: Exploiting Broadcom’s Wi-Fi Stack (Part 2)
Posted by Gal Beniamini, Project ZeroIn this blog post we'll continue our journey into gaining re...
450
