4831
New
The latest blog posts to take off on Hacker News. 8,772 posts.
4832
First American Financial Corp. Leaked Hundreds of Millions of Insurance Records
The Web site for Fortune 500 real estate title insurance giant First American Financial Corp. [ NYSE:FAF ] leaked hundreds of millions of documents related to mortgage deals going back to 2003, until notified this week by KrebsOnSecurity. The digitized records — including bank account numbers and statements, mortgage…
4833
PayPal's Beautiful Demonstration of Extended Validation FUD
Sometimes the discussion around extended validation certificates (EV) feels a little like flogging a dead horse. In fact, it was only September that I proposed EV certificates are already dead [https://www.troyhunt.com/extended-validation-certificates-are-dead/] for all sorts of good reasons that have only been…
4834
Google faces first investigation by its European lead authority over GDPR
Today, Ireland’s Data Protection Commission (DPC) has announced a major GDPR probe into “suspected infringement” by Google’s DoubleClick/Authorized Buyers advertising business. The probe was triggered by a formal complaint from Dr Johnny Ryan, Chief Policy Officer at Brave, the private web browser.
4835
Privacy-Preserving Ad Click Attribution for the Web
A typical website is made of numerous components coming from a wide variety of sources.
4836
Fingerprinting iPhones
This clever attack allows someone to uniquely identify a phone when you visit a website, based on data from the accelerometer, gyroscope, and magnetometer sensors. We have developed a new type of fingerprinting attack, the calibration fingerprinting attack. Our attack uses data gathered from the accelerometer…
4837
Tor Browser 8.5
Tor Browser 8.5 includes our first stable release for Android plus many new features.
4838
Notifying administrators about unhashed password storage
Google’s policy is to store your passwords with cryptographic hashes that mask those passwords to ensure their security. However, we recently notified a subset of our enterprise G Suite customers that some passwords were stored in our encrypted internal systems unhashed. This is a G Suite issue that affects business…
4839
4840
Security for Elasticsearch is now free
We are thrilled to announce that the core security features of the Elastic Stack -- like TLS encryption, RBAC, and both file and native authentication -- are now free.
4841
4842
4843
Stealing Downloads from Slack Users
Stealing Downloads from Slack Users I’m going to go over an interesting feature abuse that could have been used to steal and even manipulate downloads from Slack users using the Slack desktop app …
4844
Update to Security Incident
Update (May 23, 2019) : The affected 184 public network users have been notified via email.
4845
Security Update
Over the weekend, there was an attack on Stack Overflow. We have confirmed that some level of production access was gained on May 11. We discovered and investigated the extent of the access and are addressing all known vulnerabilities. We have not identified any breach of customer or user data. Our customers’ and…
4846
4847
ELF files on Linux
An step-by-step introduction into ELF files. Learn the structure and format, to understand how binaries and libraries on Linux systems work.
4848
EFF Wins National Security Letter Transparency Lawsuit
A federal district court in San Francisco has ruled strongly in favor of our Freedom of Information Act lawsuit seeking records of how and when the FBI lifts gag orders issued with National Security Letters (NSLs). These records will provide a window into the FBI’s use of a highly secretive...
4849
GKE Sandbox: Independent operating system kernel to each container
Help lock down your containers with these Kubernetes Engine features and guidance
4850
Oak, a Free and Open Certificate Transparency Log
Update: Feb. 5 2020 The Let’s Encrypt CT logs are now included in approved log lists and are usable by all publicly-trusted certificate authorities. Today we are announcing a new Certificate Transparency log called Oak. The Oak log will be operated by Let’s Encrypt and all publicly trusted certificate authorities will…
4851
Microsoft Patches ‘Wormable’ Flaw in Windows XP, 7 and Windows 2003
Microsoft today is taking the unusual step of releasing security updates for unsupported but still widely-used Windows operating systems like XP and Windows 2003 , citing the discovery of a “wormable” flaw that the company says could be used to fuel a fast-moving malware threat like the WannaCry ransomware attacks of…
4852
Git ransom campaign incident report
This is a coordinated effort to help educate and inform users on secure best practices relating to the recent Git ransomware incident.
4853
4854
China is blocking all language editions of Wikipedia
translation: 中国封锁了所有语言版本的维基百科 China recently started blocking all language editions of Wikipedia. Previously, the blocking was limited to the Chinese language edition of Wikipedia (zh.wikipedia.org), but has now expanded to include all *.wikipedia.org language editions. In this post, we share OONI network measurement…
4855
Senate Testimony on Privacy Rights and Data Collection in a Digital Economy
Idle Words > Talks > Privacy Rights and Data Collection in a Digital Economy (Senate hearing)
4856
4857
The Origin of ‘Script Kiddie’
The term script kiddie probably originated around 1994, but the first public record is from 1996.
4858
‘eyeDisk’ USB drive secured with iris recognition reveals password in plain text
Last year, about the time we were messing around with a virtually unheard-of hardware wallet we got a bit excited about the word “unhackable”. Long story short, I ended up supporting a selection of kickstarters that had the word “unhackable” or similar in their title. Of these, at least one got funded and got…
4859
Adventures in WhatsApp DB – extracting messages from backups, with code examples
Getting your messages without giving a third party your credentials and data
4860
Open source firmware is important for security
Why open source firmware is important for security.