6121
Secure Computing for Journalists
This morning on Twitter, Buzzfeed editor Miriam Elder asks the following question: Possibly stupid question: is the Signal desktop client as secure as the mobile app? — Miriam Elder (@MiriamElder) …
New
The latest blog posts to take off on Hacker News. 8,772 posts.
6122
What happens when you swipe a credit card
Ninety percent of Americans have used a credit card, but far fewer understand the underlying systems enabling their payments. So let’s dive…
6123
Sandstorm gets a security review
Take control of your web by running your own personal cloud server with Sandstorm.
6124
Containers Come to Firefox Test Pilot
The Containers feature in Firefox Nightly gives users the ability to place barriers on the flow of data across sites by isolating cookies, indexedDB, localStorage, and caches within discrete browsing ...
6125
6126
Quantifying the Impact of “Cloudbleed”
Last Thursday we released details on a bug in Cloudflare's parser impacting our customers. It was an extremely serious bug that caused data flowing through Cloudflare's network to be leaked onto the Internet.
6127
ReBreakCaptcha: Breaking Google’s ReCaptcha v2 Using Google
TL;DR A logic vulnerability, dubbed ReBreakCaptcha, which lets you easily bypass Google’s ReCaptcha v2 anywhere on the web. Overview Back in 2016, I started poking around to see how hard it w…
6128
6129
6130
Vulnerabilities in Password-Manager Apps
There are different policies for the generation of secure passwords. However, one of the biggest challenges is to memorize all these complex passwords. Password manager applications are a promising way of storing all sensitive passwords cryptographically secure. Accessing these passwords is only possible if the user…
6131
6132
CloudPets teddy bears leaked and ransomed, exposing kids' voice messages
Only a couple of weeks ago, there were a lot of news headlines about how Germany had banned an internet-connected doll called "Cayla" over fears hackers could target children [http://www.telegraph.co.uk/news/2017/02/17/germany-bans-internet-connected-dolls-fears-hackers-could-target/] . One of
6133
DHS Quietly Testing Mandatory Facial Recognition of Passengers Exiting U.S
We’re all used to having to identify ourselves as we enter a country. It is the only way we can hope to have any attempt at a secure border. But, so-called “exit controls,” wher…
6134
Critical vulnerabilities in JSON Web Token libraries
Which libraries are vulnerable to attacks and how to prevent them.
6135
Fingerprinting Firefox users with cached intermediate CA certificates
Fingerprinting Firefox users with cached intermediate CA certificates (#fiprinca) ...
6136
Lessons from the History of Attacks on Secure Hash Functions
This document is a work-in-progress. Please contact the author if you see errors or omissions. Most of the secure hash functions ever designed have turned out to be vulnerable to collision attacks.
6137
6138
6139
Monzo’s Response to Cloudbleed
Your salary sorted into Pots. Your spare change turned into savings. Your money, doing what it should with Monzo.
6140
5 Problems with National ID Cards
The terrorist attacks of September 11have revived proposals for a national identity card system as a way to verify the identity of airline passengers and prevent terrorists from entering the country. For example, the Chairman and CEO of Oracle Corp., Larry Ellison, recently called for the creation of a national ID…
6141
S2n Is Now Handling 100 Percent of SSL Traffic for Amazon S3
In June 2015, we introduced s2n, an open-source implementation of the TLS encryption protocol, making the source code publicly available under the terms of the Apache Software License 2.0 from the s2n GitHub repository. One of the key benefits to s2n is far less code surface, with approximately 6,000 lines of code…
6142
Incident report on memory leak caused by Cloudflare parser bug
Last Friday, Tavis Ormandy from Google’s Project Zero contacted Cloudflare to report a security problem with our edge servers. He was seeing corrupted web pages being returned by some HTTP requests run through Cloudflare.
6143
The Internet Archive Pushes Back on “Notice and Staydown”
The US Copyright Office sought comments in its ongoing study of the Digital Millennium Copyright Act (DMCA) Section 512 safe harbor study. They are generally looking to find out how well the notice and takedown system is working for everyone—Internet platforms and users, as well as creators and copyright holders. We…
6144
Announcing the first SHA-1 collision
Posted by Marc Stevens (CWI Amsterdam), Elie Bursztein (Google), Pierre Karpman (CWI Amsterdam), Ange Albertini (Google), Yarik Markov (Goog...
6145
PGP needs to be retired in honor
personal ramblings, noone cares about
6146
Securitybot: Open Sourcing Automated Security at Scale
Dash knows your context, your team, and your work, so your team can stay organized, easily find and share knowledge, and keep projects secure, all from one place.
6147
6148
Weaponizing PostScript
In a recent pentesting assignment, there was a service which converted uploaded files to PDF/A format, to make them safer for handling. Afte...
6149
Upspin – Another option for file sharing
Posted by Andrew Gerrand, Eric Grosse, Rob Pike, Eduardo Pinheiro and Dave Presotto, Google Software Engineers Existing mechanisms for fil...
6150
PuTTY 0.68 has been released
Home | FAQ | Feedback | Licence | Updates | Mirrors | Keys | Links | Team Download: Stable · Snapshot | Docs | Privacy | Changes | Wishlist