New
The latest blog posts to take off on Hacker News. 135 posts.
Stuxnet: A Breakthrough
Broadcom Community - VMTN, Mainframe, Symantec, Carbon Black
Changing Passwords
How often should you change your password? I get asked that question a lot, usually by people annoyed at their employer’s or bank’s password expiration policy: people who finally memorized their current password and are realizing they’ll have to write down their new password. How could that possibly be more secure…
Using WolframAlpha to Hack Text CAPTCHA
I’ve been playing around with the Text CAPTCHA demo page and wondered how well WolframAlpha is at logic questions. As it turns out, Wolfram is pretty smart! Although, since a CAPTCHA requir…
The time I hacked my high school
When I was in high school, I started the Chess Club. I needed money to buy chess sets and chess cl...
Protect Your Site with a Blackhole for Bad Bots
Tutorial shows how to setup a blackhole bot trap using PHP in just a few easy steps.
Overclocking SSL
(This is a write up of the talk that I gave at Velocity 2010 last Thursday. This is a joint work of myself, Nagendra Modadugu and Wan-Teh Chang.)
HTTP cookies, or how not to design protocols
For as long as I remember, HTTP cookies have been vilified as a grave threat to the privacy of online browsing. I don't quite agree, but I f...
Firesheep, a day later
Most importantly, I certainly never expected there would be this much attention all at once, and within the first 24 hours.
Securing your ssh server
A social nerd writing about everything
The .ly domain space to be considered unsafe
I would like to warn current and future owners of .ly domains of a concerning incident regarding the deletion of one of our prime domains…
Hacking the D.C. Internet Voting Pilot
The District of Columbia is conducting a pilot project to allow overseas and military voters to download and return absentee ballots over the Internet. Before opening the system to real voters, D.C. has been holding a test period in which they've invited the public to evaluate the system's security and usability. This…
Wiretapping the Internet
On Monday, The New York Times reported that President Obama will seek sweeping laws enabling law enforcement to more easily eavesdrop on the internet. Technologies are changing, the administration argues, and modern digital systems aren’t as easy to monitor as traditional telephones. The government wants to force…
An Open Letter From Internet Engineers to the Senate Judiciary Committee
(Update: we've added a few engineers who asked to sign on right as the letter was going out; the final count is 96 signatures) Today, 87 prominent Internet engineers sent a joint letter the US Senate Judiciary Committee, declaring their opposition to the "Combating Online Infringement and...
Android security model is inadequate, and it needs a firewall
I have an Android phone, and while it’s good that Android does have some sandboxing, permissions and security against rogue apps, I’m not very happy with the security model and how it a…
The Asian domain-name extortion scam
We are a leading internet solutions organization in Asia, and we have something urgent to confirm with you. Yesterday we received a formal application from a company called ” Varmer Investment Co., Ltd “. They were trying to apply for ” instapaper ” as Brand Name and following Domain Names through our organization: