5251
New
The latest blog posts to take off on Hacker News. 8,772 posts.
5252
Firefox’s Trusted Recursive Resolver DNS feature is dangerous
Affordable VM hosting in Glarus, Switzerland, operated by 100% hydropower. Devuan, debian, freebsd, ubuntu, centos. Our tech stack is fully open source.
5253
5254
5255
Google: Security Keys Neutralized Employee Phishing
Google has not had any of its 85,000+ employees successfully phished on their work-related accounts since early 2017, when it began requiring all employees to use physical Security Keys in place of passwords and one-time codes, the company told KrebsOnSecurity.
5256
Better slow than sorry – VirtualBox 3D acceleration considered harmful
The 3 - d acceleration feature of VirtualBox has had a bit of a rough time this year . One could argue that technically this component might not be considered attack surface in VirtualBox, due to the big warning put out in the documentation recommending against its use (emphasis mine):
5257
Removing Bad Actors on Facebook
We removed 32 Pages and accounts from Facebook and Instagram because they were involved in coordinated inauthentic behavior.
5258
Security Begins at the Home Router
In recent days, the VPNFilter malware has attracted attention, much of it in the wake of a May 25 public service announcement from the FBI, as well as a number of announcements from vendors and security companies....
5259
5260
Secure Boot and the 2018 MacBook Pro
the vent for my mind
5261
Vulnerability in Hangouts Chat: how Electron makes open redirect great again
A few mongth ago, Google released a new product - Hangouts Chat application, which is surely an answer to Slack . Hangouts Chat might be us...
5262
5263
Introducing Telegram Passport
Meet Telegram Passport – a unified authorization method for services that require personal identification.
5264
Address Verification and Full PGP Support
Address Verification allows you to be sure you are securely communicating with the right person, while PGP support adds encrypted email interoperability.
5265
Chrome 68 Released: HTTP Sites Marked as “Not Secure”
The Chrome team is delighted to announce the promotion of Chrome 68 to the stable channel for Windows, Mac and Linux. This will roll out ove...
5266
5267
Hackers Breached Virginia Bank Twice in Eight Months, Stole $2.4M
Hackers used phishing emails to break into a Virginia bank in two separate cyber intrusions over an eight-month period, making off with more than $2.4 million total. Now the financial institution is suing its insurance provider for refusing to fully cover the losses.
5268
Google: Security Keys Neutralized Employee Phishing
Google has not had any of its 85,000+ employees successfully phished on their work-related accounts since early 2017, when it began requiring all employees to use physical Security Keys in place of passwords and one-time codes, the company told KrebsOnSecurity.
5269
Shedding Too Much Light on a Microcontroller's Firmware Protection (2017)
Proceedings of the 11th USENIX Workshop on Offensive Technologies (WOOT '17) - Vancouver, BC, Canada CVE number 2017-18347
5270
Why Intel will never let owners control the ME
The Intel Management Engine is an auxillary microprocessor embedded into modern Intel x86 CPUs or chipsets. 1 It runs an Intel-signed proprietary binary blob. Due to code signing restrictions enforced by the hardware, it cannot be modified or replaced by the user. (AMD x86 CPUs have a similar auxillary microprocessor…
5271
5272
5273
Into the Borg – SSRF inside Google production network
Intro - Testing Google Sites and Google Caja In March 2018, I reported an XSS in Google Caja, a tool to securely embed arbitrary html/javascript in a webpage. In May 2018, after the XSS was fixed, I r
5274
5275
Credit card thieves using free-to-play apps to launder their ill-gotten gains
This MacKeeper report will tell you about 6 major data breaches that happened in 2018.
5276
Riot Games Approach to Anti-Cheat
Combating cheats is an ever-evolving arms race. The scope and complexity of cheat development grows every year along with the stakes in online gaming. The pressure is on for game studios to level up when it comes to detecting and preventin…
5277
Mailinator.com: Anatomy of a Spammy Campaign
Mailinator is a popular disposable email service. It's also become a great tool for QA Teams to test email receipt, acknowledgment, authen...
5278
Mitigating Spectre with Site Isolation in Chrome
Posted by Charlie Reis, Site Isolator Speculative execution side-channel attacks like Spectre are a newly discovered security risk for web...
5279
Finding and exploiting hidden features of Animal Crossing's NES emulator
While looking for ways to activate the developer menus left over in Animal Crossing, including the NES emulator game selection menu, I found an interesting feature that exists in the original game that was always active, but never used by Nintendo. In addition to the NES/Famicom games that can be obtained in-game, it…
5280