481
Software Engineering Institute Makes CERT C++ Coding Standard Freely Available
SEI News | A collection of the latest news articles from the CMU Software Engineering Institute.
New
The latest blog posts to take off on Hacker News. 616 posts.
482
483
Announcing Free and Automated SSL Certs
We are excited to announce that Automated Certificate Management is generally available, at no additional charge, for all applications running on Hobby...
484
Tactics, Techniques, and Procedures of the Yahoo Hack
(.. Tactics, Techniques, and Procedures)
485
I will not log in to your website
Two or three times a day, I get an email whose basic structure is as follows: Prof. Aaronson, given your expertise, we’d be incredibly grateful for your feedback on a paper / report / gr…
486
‘Honeypot’ pages to try to convert people searching for cracked software
Software piracy is a fact of life for vendors of desktop software. Take a look at Google’s helpful suggestions if you search on the name of one of my products: Trying to make your software cr…
487
Building Safe AI: A Tutorial on Homomorphically Encrypted Deep Learning
A machine learning craftsmanship blog.
488
489
We’ve lost control of our personal data, including 33M NetProspex records
Earlier this week, I read a really interesting piece on 3 things that need to be done to save the web [https://www.theguardian.com/technology/2017/mar/11/tim-berners-lee-web-inventor-save-internet] . The first observation was that "we’ve lost control of our personal data" and
490
JSON Web Tokens should be avoided
JWT, JWE, JWS, etc. are terrible designs and need to be scrapped, not resuscitated.
491
492
The CIA's “Development Tradecraft Do's and Dont's”
Useful best practices for malware writers, courtesy of the CIA. Seems like a lot of good advice. General: DO obfuscate or encrypt all strings and configuration data that directly relate to tool functionality. Consideration should be made to also only de-obfuscating strings in-memory at the moment the data is needed…
493
We will no longer use the phrase “zero knowledge” to describe our software
Space Cybersecurity has become a prominent topic in the news, particularly when it comes to protecting space-related assets and technologies.
494
EFF Applauds Amazon for Pushing Back on Request for Echo Data
The number of Internet-enabled sensors in homes across the country is steadily increasing. These sensors are collecting personal information about what’s going on inside the home, and they are doing so in a volume and detail never before possible. The law, of course, has not kept up. There are no...
495
The Senators that introduced a bill to let telecoms sell your internet history
Protection of your Internet history is up in the air thanks to new, pending legislation. A new bill coming before Senate aims to completely dismantle the
496
Password Rules Are Bullshit
Of the many, many, many bad things about passwords, you know what the worst is? Password rules. Let this pledge be duly noted on the permanent record of the Internet. I don’t know if there’s an afterlife, but I’ll be finding out soon enough, and I plan
497
The Frequency of Known Vulnerabilities in JavaScript
An interesting whitepaper was released at the 2017 NDSS Symposium discussing a large-scale attempt at determining just how vulnerable client-side JavaScript libraries are. We wanted to share some of our thoughts on the report.
498
Digital Privacy at the U.S Border: A New How-To Guide from EFF
San Francisco - Increasingly frequent and invasive searches at the U.S. border have raised questions for those of us who want to protect the private data on our computers, phones, and other digital devices. A new guide released today by the Electronic Frontier Foundation (EFF) gives travelers the...
499
500
501
Congress Is Trying to Roll Back Internet Privacy Protections
Call congress now! Back in 2014 over 3 million Internet users told the U.S. government loudly and clearly: we value our online security, we value our online privacy, and we value net neutrality. Our voices helped convince the FCC to enact smart net neutrality regulations—including long-needed...
502
503
Who controls your computer? and how to make sure it's you
Can you trust your computer? Can you control what it does and doesn’t? Or is someone else in control? How can you even know what it is or isn’t doing? Even if it tells you, how do you know it’s not lying? As computing systems become more complex, how can “Trusted Computing” be achieved, not (just) by big corporations…
504
Secure Computing for Journalists
This morning on Twitter, Buzzfeed editor Miriam Elder asks the following question: Possibly stupid question: is the Signal desktop client as secure as the mobile app? — Miriam Elder (@MiriamElder) …
505
What happens when you swipe a credit card
Ninety percent of Americans have used a credit card, but far fewer understand the underlying systems enabling their payments. So let’s dive…
506
Sandstorm gets a security review
Take control of your web by running your own personal cloud server with Sandstorm.
507
Containers Come to Firefox Test Pilot
The Containers feature in Firefox Nightly gives users the ability to place barriers on the flow of data across sites by isolating cookies, indexedDB, localStorage, and caches within discrete browsing ...
508
509
Quantifying the Impact of “Cloudbleed”
Last Thursday we released details on a bug in Cloudflare's parser impacting our customers. It was an extremely serious bug that caused data flowing through Cloudflare's network to be leaked onto the Internet.
510
ReBreakCaptcha: Breaking Google’s ReCaptcha v2 Using Google
TL;DR A logic vulnerability, dubbed ReBreakCaptcha, which lets you easily bypass Google’s ReCaptcha v2 anywhere on the web. Overview Back in 2016, I started poking around to see how hard it w…