5911
Who moved my cheese, 1Password?
For the impatient, feel free to skip to the TL;DR summary.
New
The latest blog posts to take off on Hacker News. 8,772 posts.
5912
Simply Secure PHP Cryptography
A reflection on the first six months of the year, ext/sodium landing in PHP 7.2, and where to go from here.
5913
5914
Life Is About to Get Harder for Websites Without HTTPS
In case you haven't noticed, we're on a rapid march towards a "secure by default" web when it comes to protecting traffic. For example, back in Feb this year, 20% of the Alexa Top 1 Million sites were forcing the secure scheme: These figures are from Scott Helme'
5915
Toward a Reasonably Secure Laptop
It’s no secret that hardware selection is one of the biggest hurdles Qubes users face. Finding a computer that is secure, trustworthy, and compatible is more difficult than it should be. In an effort to address the compatibility aspect of that problem, we introduced the Qubes-certified ...
5916
Taking control of all .io domains with a targeted registration
A Hacker's Blog of Unintended Use and Insomnia.
5917
Unikernels are secure
Per Buer is the CEO of IncludeOS . IncludeOS is a clean-slate unikernel written in C++ with performance and security in mind. Per Buer is the founder and previous CEO/CTO of Varnish Software.
5918
A Detailed Elliptic Curve Cryptography Tutorial
When adding two integers i and j of bitlength b, the result will be of bitlength b + 1 in the worst case. This means they can easily be naively added. If the result is larger or equal to F p one has only to subtract p from the result, i.e.:
5919
Grsecurity: Potential contributory infringement and breach of contract risk
It's my strong opinion that your company should avoid the Grsecurity product sold at grsecurity.net because it presents a contributory infringement and breach of contract risk.
5920
DRM Is Toxic to Culture
In pursuit of market control now, deployers of DRM are robbing us of our culture in perpetuity by enclosing the future commons. It’s possible that you think that unauthorised use of copyright…
5921
5922
5923
Wildcard Certificates Coming January 2018
Update, March 13, 2018 Wildcard certificate support is live. Let’s Encrypt will begin issuing wildcard certificates in January of 2018. Wildcard certificates are a commonly requested feature and we understand that there are some use cases where they make HTTPS deployment easier. Our hope is that offering wildcards…
5924
Intel's Management Engine
Recent CPUs from Intel requires a binary called the “Management Engine” (Intel ME, or ME for short). This binary is one of three parts required if a business elects to use Intel’s Active Management Technology (AMT), which Purism avoids. Purism laptops can function with a neutralized and disabled ME, as we have tested…
5925
Defending a website with Zip bombs
Personal Blog of Christian Haschek
5926
5927
Congress Needs to End Warrantless Spying, Not Make It Permanent
Lawmakers are getting serious about renewing the U.S. government’s Internet spying powers, so we need to get serious about stopping their bad proposals. First out of the gate is a bill from Sen. Tom Cotton, an ardent defender of government surveillance. His bill would not just reauthorize, but make...
5928
Saved by Alice
In Alice v. CLS Bank, the Supreme Court ruled that an abstract idea does not become eligible for a patent simply by being implemented on a generic computer. This 2014 decision has significantly reduced the harm caused by vague and overbroad software patents. Before Alice, patent owners who had...
5929
5930
5931
Analysis of the Alexa Top 1M sites
Prior to the release of the Mozilla Observatory a year ago, I ran a scan of the Alexa Top 1M websites. Despite being available for years, the usage rates of ...
5932
Milestone: 100M Certificates Issued
Let’s Encrypt has reached a milestone: we’ve now issued more than 100,000,000 certificates. This number reflects at least a few things: First, it illustrates the strong demand for our services. We’d like to thank all of the sysadmins, web developers, and everyone else managing servers for prioritizing protecting your…
5933
The .feedback scam
Do you have feedback you'd like to give to Google, Facebook, StackOverflow, Inc., or Gandi? Now there's a website that will collect that feedback. Or... not.
5934
5935
Stupidly Simple DDoS Protocol (SSDP) Generates 100 Gbps DDoS
Last month we shared statistics on some popular reflection attacks. Back then the average SSDP attack size was ~12 Gbps.
5936
Container Isolation Gone Wrong
A detailed troubleshooting story that covers both simple and complex tales of container isolation. Read this terrific guide for insight from A-Z.
5937
Ubuntu Systemd Vulnerability
Ubuntu is an open source software operating system that runs from the desktop, to the cloud, to all your internet connected things.
5938
Avast Antivirus Remote Stack Buffer Overflow with Magic Numbers
Blog about anti-virus software vulnerabilities.
5939
5940
Explain like I’m 5: Kerberos (2013)
Explain like I’m 5 years old: Kerberos – what is Kerberos, and why should I care?