6241
New
The latest blog posts to take off on Hacker News. 8,773 posts.
6242
The State of Linux Security
This is the state of Linux security. With the most important updates around Linux and open source security. From conferences to self-protection.
6243
Blocking-resistant communication through domain fronting
David Fifield, University of California, Berkeley Chang Lan, University of California, Berkeley Rod Hynes, Psiphon Inc Percy Wegmann, Brave New Software Vern Paxson, University of California, Berkeley and the International Computer Science Institute
6244
Disclosing the Primary Email address for each Facebook user
Introduction This post is going to be discussing how I was able to get the primary/hidden email address for any Facebook user. This also happens to be my first accepted bug to the Facebook Bug Bounty Program. Background Back in September I got an email notification from Facebook stating
6245
Doodles, stickers, and censorship circumvention for Signal Android
The latest Signal for Android release includes support for adding doodles, stickers, and text to images. This release also includes support for censorship circumvention in Egypt and the United Arab Emirates.
6246
6247
How Skype fixes security vulnerabilities
In a nutshell — they don't. This post describes my fruitless effort to convince Microsoft employees that their service is vulnerable, and the humiliation one has to go through should one's account be blocked by a hacker. This is a story of ignorance, pain, and despair.
6248
Learning from a Year of Security Breaches
This year (2016) I accepted as much incident response work as I could. I spent about 300 hours responding to security incidents and data…
6249
Rolling Your Own Crypto
So you want to roll your own crypto. Well, be careful. Be very careful.
6250
Careers in security, ethical hacking and advice on where to get started
Many people will disagree with this post, not so much because it's flat out wrong but because there are so many different approaches one can take. It's a very subjective realm but I'm going to put forward some suggestions, make some considered arguments and leave it at
6251
Wycheproof – Tests that check cryptographic software for known weaknesses
Posted by Daniel Bleichenbacher, Security Engineer and Thai Duong, Security Engineer We’re excited to announce the release of Project Wyche...
6252
6253
Tor blocked in Turkey as government cracks down on VPN use
The Turkey Blocks internet censorship watchdog has identified and verified that restrictions on the Tor anonymity network and Tor Browser are now in effect throughout Turkey. Our study indicates that service providers have successfully complied with a government ...
6254
Technology in Hostile States: Ten Principles for User Protection
This blog post is meant to generate a conversation about best practices for using cryptography...
6255
How is NSA breaking so much crypto? (2015)
There have been rumors for years that the NSA can decrypt a significant fraction of encrypted Internet traffic. In 2012, James Bamford published an article quoting anonymous former NSA officials stating that the agency had achieved a “computing breakthrough” that gave them “the ability to crack current public…
6256
6257
6258
6259
Reversing Go Binaries Like a Pro
GO binaries are weird, or at least, that is where this all started out. While delving into some Linux malware named Rex, I came to the realization that I might need to understand more than I wanted to
6260
My Priorities for the Next Four Years
Like many, I was surprised and shocked by the election of Donald Trump as president. I believe his ideas, temperament, and inexperience represent a grave threat to our country and world. Suddenly, all the things I had planned to work on seemed trivial in comparison. Although Internet security and privacy are not the…
6261
Yahoo installed a backdoor for the NSA behind the back of the security team
[Update (12/14/16): Reuters has specified that the rootkit was implemented as a Linux kernel module. Wow.]
6262
The Signal protocol for Node and browsers
Signal is a protocol for encrypted chat. Developed by Moxie Marlinspike and Trevor Perrin, the Signal protocol backs the excellent Signal Messenger , and has since been incorporated into WhatsApp, Facebook Messenger and Google Allo.
6263
6264
Practical Reverse Engineering Part 5 – Digging Through the Firmware
Fifth post in the series, covering how to obtain GPL source code, disassemble MIPS binaries with tools like IDA, and search the firmware for a default WiFi p...
6265
Sharing National Security Letters with the Public
*On August 10, 2017, we updated this post with additional National Security Letters (NSLs) we received where, either through litigation or legislation, we have been free…
6266
6267
6268
Law Enforcement Uses Border Search Exception as Fourth Amendment Loophole
In recent months, U.S. Customs and Border Protection agents have sought access to private data on the cell phones of two journalists. Such incidents are offensive because they threaten the independence of the press and pose specific risks to confidential sources. This government overreach also...
6269
Chrome 56 Beta: “Not Secure” Warning, Web Bluetooth, and CSS Position: Sticky
Unless otherwise noted, changes described below apply to the newest Chrome Beta channel release for Android, Chrome OS, Linux, Mac, and Wi...
6270
Belarus finally bans Tor
Country: Belarus Probed ISPs: Beltelecom (AS 6697) Censorship method: TCP injections We have recently heard of network anomalies in Belarus. Tor has been finally blocked in December 2016, although it had been explicitly declared that Tor should be blocked since February 2015. An anonymous cypherpunk has helped to…