5641
Exploiting Windows 10 in a Local Network with WPAD/PAC and JScript
by Ivan Fratric, Thomas Dullien, James Forshaw and Steven VittitoeIntroMany widely-deployed techn...
New
The latest blog posts to take off on Hacker News. 8,772 posts.
5642
WhatsApp's Signal Protocol integration is now complete
At Open Whisper Systems, our goal is to make private communication simple. A year ago, we announced a partnership with WhatsApp and committed to integrating the Signal Protocol into their product, moving towards full end-to-end encryption for all of their users by default. Over the past year, we...
5643
5644
5645
5646
HTTPS on Your Landing Page Is Important
Occasionally, I feel like I'm just handing an organisation more shovels - "here, keep digging, I'm sure this'll work out just fine..." The latest such event was with NatWest [http://personal.natwest.com] (a bank in the UK), and it culminated with this tweet from them: > I'm
5647
OSX.Pirrit Mac Adware Part III: The DaVinci Code
Discover expert insights on the latest cybersecurity trends, challenges, and best practices shaping the industry today.
5648
How to break a Captcha system in 15 minutes with Machine Learning
Let’s hack the world’s most popular Wordpress CAPTCHA Plug-in
5649
Accessing Publicly Available Information on the Internet Is Not a Crime
EFF is fighting another attempt by a giant corporation to take advantage of our poorly drafted federal computer crime statute for commercial advantage—without any regard for the impact on the rest of us. This time the culprit is LinkedIn. The social networking giant wants violations of its...
5650
Avast open-sources its machine-code decompiler
After seven years of development, Avast open-sources its machine-code decompiler for platform-independent analysis of executable files.
5651
5652
TP-Link firmware sends six DNS requests and one NTP query every 5 seconds
A design flaw in TP-Link Wi-Fi repeater firmware causes it to waste an excessive amount of bandwidth on NTP timekeeping. DDoS’ed public NTP servers in the process.
5653
AWS Single Sign-On
Discover more about what's new at AWS with Announcing AWS Single Sign-On (SSO)
5654
5655
5656
5657
Android vulnerability allows attackers to modify apps
The CVE-2017-13156 bug in Android allows attackers to modify the code in applications without affecting their signatures. Learn more about Janus Vulnerability.
5658
5659
Looking Forward to 2018
Let’s Encrypt had a great year in 2017. We more than doubled the number of active (unexpired) certificates we service to 46 million, we just about tripled the number of unique domains we service to 61 million, and we did it all while maintaining a stellar security and compliance track record. Most importantly though…
5660
Decoding an air conditioner control's checksum with differential cryptanalysis
Back in 2009 I wrote an Arduino library ( IRRemote ) to encode and decode infrared signals for remote controls. I got an email recently fr...
5661
Learning with Privacy at Scale
Understanding how people use their devices often helps in improving the user experience. However, accessing the data that provides such…
5662
5663
5664
Virtual Keyboard Developer Leaked 31M Client Records
Find out more about the biggest 2017 data breaches in this MacKeeper report!
5665
The Trouble with Politicians Sharing Passwords
Yesterday I had a bunch of people point me at a tweet from a politician in the UK named Nadine Dorries [https://twitter.com/NadineDorries]. As it turns out, some folks were rather alarmed about her position on sharing what we would normally consider to be a secret. In this
5666
Randomize your WiFi MAC address on Ubuntu
Your device’s MAC address can be used to track you across the WiFi networks you connect to. That data can be shared and sold, and often identifies you as an individual. It’s possible to limit this tracking by using pseudo-random MAC addresses.
5667
Can I erase sensitive data on an old hard drive with Neodymium Magnets?
Discover secure hard drive destruction methods using powerful magnets to safeguard sensitive data.
5668
5669
5670
Detailed Financial Histories Exposed for Thousands
111 GB of internal customer information from National Credit Federation was left exposed in a publicly downloadable data repository. This is its story.