New
The latest blog posts to take off on Hacker News. 8,773 posts.
Mozilla shouldn't copy Chrome's permission prompt for extensions
As Mozilla’s Web Extensions project is getting closer towards being usable, quite a few people seem to expect some variant of Chrome’s permission prompt to be implemented in Firefox. So instead of just asking you whether you want to trust an add-on Firefox should list exactly what kind of permissions an add-on needs…
Google collects metadata from Android phones
[German]It seems that Google has established a surveillance function for Android phones. They are claiming the right, to collect and store meta data from incoming/outgoing phone calls and SMS from…
The Fining of Black America
We analyzed the cities most likely to generate substantial revenues from fines. The best indicator that a government will levy excessive fines? If a large proportion of the city's citizens are Black.
Extracting Qualcomm's KeyMaster Keys – Breaking Android Full Disk Encryption
A security blog focusing on Android, the Linux Kernel and everything nice.
StartEncrypt considered harmful today
Inzichten over cybersecurity trends, threat intelligence, compliance-updates en technische verdiepingen van het DEFION-team.
A year of Windows kernel font fuzzing #1: the results
Posted by Mateusz Jurczyk of Google Project ZeroThis post series is about how we used at-scale fu...
How to Compromise the Enterprise Endpoint
Posted by Tavis Ormandy.Symantec is a popular vendor in the enterprise security market, their fla...
“Should you encrypt or compress first?”
Appcanary makes sure you never run vulnerable software on your servers. Like our blog? Subscribe to our newsletter or podcast . Browse the archive , or follow us on twitter , github or rss .
The “Cobra Effect” that is disabling paste on password fields
Back in the day when the British had a penchant for conquering the world, they ran into a little problem on the subcontinent; cobras. Turns out there were a hell of a lot of the buggers wandering around India and it also turned out that they were rather venomous which
Penetration Testing Tools Cheat Sheet
Penetration testing tools cheat sheet, a high level overview / quick reference cheat sheet for penetration testing.
Apple EFI firmware passwords and the SCBO myth
My original goal when I started poking around Apple’s EFI implementation was to find a way to reset a MacBook’s firmware password. My preliminary research found references to a “magical” SCBO file that could be loaded onto a USB flash drive and booted to remove the password. The normal process workflow is to first…
Defending Our Brand
Update, June 24 2016 We have confirmed that Comodo submitted Requests for Express Abandonment for all three trademark registration applications in question. We’re happy to see this positive step towards resolution, and will continue to monitor the requests as they make their way through the system. We’d like to thank…
Uber Hacking: How we found out who you are, where you are and where you went
Here at Integrity we love to be challenged, so whenever there is some free time, there is encouragement to do research or to break some things ( https://labs.integrity.pt/advisories/ ) in addition to play foosball.
Progress Towards 100% HTTPS, June 2016
Our goal with Let’s Encrypt is to get the Web to 100% HTTPS. We’d like to give a quick progress update. Let’s Encrypt has issued more than 5 million certificates in total since we launched to the general public on December 3, 2015. Approximately 3.8 million of those are active, meaning unexpired and unrevoked. Our…
Concrete AI Safety Problems
We (along with researchers from Berkeley and Stanford) are co-authors on today’s paper led by Google Brain researchers, Concrete Problems in AI Safety. The paper explores many research problems around ensuring that modern machine learning systems operate as intended.
“Guccifer2”'s second release from DNC hack
This’s time to keep my word and here’re the docs I promised you. It’s not a report in one file, it’s a big folder of docs devoted to Hillary Clinton that I found on the DNC …
CIA Director John Brennan Pretends Foreign Cryptography Doesn't Exist
Last week, CIA director John Brennan told a Senate committee that there wasn’t any strong cryptography outside of the US. CIA director John Brennan told US senators they shouldn’t worry about mandatory encryption backdoors hurting American businesses. And that’s because, according to Brennan, there’s no one else for…
“PayPal has demanded that we monitor data traffic as well as customers’ files”
Seafile is an open source, self-hosted file sync and share solution with high performance and reliability. Sync, access, and collaborate on files on your own server or private cloud.
Scammers Game Amazon A-Z Policy By Replacing iPhones With Clay
This morning I discovered some rather anomalous 1-star reviews on Amazon for the Apple iPhone 6s 128 GB. About 17% of the reviews for that product are 1-star...
Thinking About Smart Contract Security
Over the last day with the community's help we have crowdsourced a list of all of the major bugs with smart contracts on Ethereum so far, including both the...