31
How to break a Captcha system in 15 minutes with Machine Learning
Let’s hack the world’s most popular Wordpress CAPTCHA Plug-in
New
The latest blog posts to take off on Hacker News. 616 posts.
32
Accessing Publicly Available Information on the Internet Is Not a Crime
EFF is fighting another attempt by a giant corporation to take advantage of our poorly drafted federal computer crime statute for commercial advantage—without any regard for the impact on the rest of us. This time the culprit is LinkedIn. The social networking giant wants violations of its...
33
Avast open-sources its machine-code decompiler
After seven years of development, Avast open-sources its machine-code decompiler for platform-independent analysis of executable files.
34
35
TP-Link firmware sends six DNS requests and one NTP query every 5 seconds
A design flaw in TP-Link Wi-Fi repeater firmware causes it to waste an excessive amount of bandwidth on NTP timekeeping. DDoS’ed public NTP servers in the process.
36
AWS Single Sign-On
Discover more about what's new at AWS with Announcing AWS Single Sign-On (SSO)
37
38
39
40
Android vulnerability allows attackers to modify apps
The CVE-2017-13156 bug in Android allows attackers to modify the code in applications without affecting their signatures. Learn more about Janus Vulnerability.
41
42
Looking Forward to 2018
Let’s Encrypt had a great year in 2017. We more than doubled the number of active (unexpired) certificates we service to 46 million, we just about tripled the number of unique domains we service to 61 million, and we did it all while maintaining a stellar security and compliance track record. Most importantly though…
43
Decoding an air conditioner control's checksum with differential cryptanalysis
Back in 2009 I wrote an Arduino library ( IRRemote ) to encode and decode infrared signals for remote controls. I got an email recently fr...
44
Learning with Privacy at Scale
Understanding how people use their devices often helps in improving the user experience. However, accessing the data that provides such…
45
46
47
Virtual Keyboard Developer Leaked 31M Client Records
Find out more about the biggest 2017 data breaches in this MacKeeper report!
48
The Trouble with Politicians Sharing Passwords
Yesterday I had a bunch of people point me at a tweet from a politician in the UK named Nadine Dorries [https://twitter.com/NadineDorries]. As it turns out, some folks were rather alarmed about her position on sharing what we would normally consider to be a secret. In this
49
Randomize your WiFi MAC address on Ubuntu
Your device’s MAC address can be used to track you across the WiFi networks you connect to. That data can be shared and sold, and often identifies you as an individual. It’s possible to limit this tracking by using pseudo-random MAC addresses.
50
Can I erase sensitive data on an old hard drive with Neodymium Magnets?
Discover secure hard drive destruction methods using powerful magnets to safeguard sensitive data.
51
52
53
Detailed Financial Histories Exposed for Thousands
111 GB of internal customer information from National Credit Federation was left exposed in a publicly downloadable data repository. This is its story.
54
Officials Don't Get to Choose Who Gets to Receive, Comment, and Reply to Tweets
We’ve taken a stand for the First Amendment rights of individuals to receive and comment on social media posts from governmental officials and agencies. We’ve received a lot of good questions about why we believe that public servants—mayors, sheriffs, senators, even President Donald Trump—can’t...
55
Reproducible Signal builds for Android
As of our latest Android release, Signal builds are reproducible. Reproducible builds help to verify that the source code in our GitHub repository is the exact source code used to build the compiled Signal APK being distributed through Google Play.
56
iOS 11 Horror Story: The Rise and Fall of iOS Security
We loved what Apple used to do about security. During the past years, the company managed to build a complete, multi-layer system to secure its hardware and sof
57
58
Blocking Top-Level Navigations to Data URLs for Firefox 58
End users rely on the address bar of a web browser to identify what web page they are on. However, most end users are not aware of the concept of ...
59
What I'm Telling US Congress about Data Breaches
Last week I wrote about my upcoming congressional testimony [https://www.troyhunt.com/im-testifying-in-front-of-congress-in-washington-dc-about-data-breaches-what-should-i-say/] and wow - you guys are awesome! Seriously, the feedback there was absolutely sensational and it's helped shape what I'll
60
Why (blank) gets you root
tracking down the cause of a serious authentication flaw