6721
New
The latest blog posts to take off on Hacker News. 8,773 posts.
6722
Insecure by design: protocols for encrypted phone calls
The MIKEY-SAKKE protocol is being promoted by the UK government as a better way to secure phone calls. The reality is that MIKEY-SAKKE is designed to offer minimal security while allowing undetectable mass surveillance, through the introduction a backdoor based around mandatory key-escrow. This weakness has…
6723
Introducing CloudFlare Registrar: Designed for Security, Not the Masses
At CloudFlare, we’ve constructed one of the world’s largest networks purpose-built to protect our customers from a wide range of attacks.
6724
Controlling vehicle features of Nissan LEAFs remotely via vulnerable APIs
Last month I was over in Norway doing training for ProgramUtvikling, [http://programutvikling.no/] the good folks who run the NDC conferences I've become so attached to. I was running my usual “Hack Yourself First” workshop [https://www.troyhunt.com/2016/02/more-europe-even-more-again-and-more.
6725
6726
The US Government has no credibility to compel anybody to weaken security
This is my belated obligatory post about the entire "Apple vs the FBI" episode and whether it should help decrypt the San Bernardino shooter's iPhone. People have commented that I should write something, and I've been reluctant in case I go off in full-rant-mode. I wrote the entire post and…
6727
Using Free SSL/TLS Certificates from Let’s Encrypt for Nginx
Deliver modern applications with NGINX. Explore high-performance load balancing, API gateways, and web server solutions trusted by top global enterprises.
6728
6729
HTTP GZIP Compression remote date and time leak
Tor is a service run by a network of volunteers to allow people to use internet anonymously. Normally tor is used to browse the web without being tracked or identified.
6730
Distribution packages considered insecure
If you ever have run a Linux-based operating system you are probably aware of the way that software is usually distributed on them: Using a software repository. Repositories are great for numerous …
6731
6732
Encryption is a necessity
Recent news around Apple’s resistance to the US government’s demand to decrypt the iPhone of one of the San Bernardino shooters has brought encryption
6733
6734
Beware of hacked ISOs if you downloaded Linux Mint on February 20th
We were exposed to an intrusion today. It was brief and it shouldn’t impact many people, but if it impacts you, it’s very important you read the information below.
6735
Early Impacts of Let's Encrypt
During the months I worked in Let's Encrypt's operations team I got fairly used to being the go-to man for any question that a database query could solve.…
6736
Reverse engineering Android from binary to source
Dmitry.GR: Full sources for Android on zWatch
6737
6738
A Technical Perspective on the Apple iPhone Case
The legal dispute between Apple and the FBI might prove pivotal in the long-running battle to protect users' privacy and right to use uncompromised encryption. The case has captured the public imagination. Of course, EFF supports Apple's efforts to protect its users. The case is complicated...
6739
6740
6741
What Is the Secure Enclave?
The big tech news this week is that the FBI is trying to force Apple to unlock a suspect's iPhone. One of the interesting points around this story is that the iPhone in question is an older one, an iPhone 5c. Newer phones have what Apple calls the Secure Enclave, which some say protects against requests of this…
6742
Bitbucket secrets
Research, expert perspectives, and product announcements from Atlassian on how teams can work smarter with AI. Subscribe for monthly insights on the future of teamwork.
6743
6744
How to Safely Store Your Users' Passwords in 2016
Salted Password Hashing with Argon2, Scrypt, Bcrypt, and PBKDF2
6745
Apple can comply with the FBI court order
Earlier today, a federal judge ordered Apple to comply with the FBI’s request for technical assistance in the recovery of the San Bernadino gunmen’s iPhone 5C. Since then, many have argued whether these requests from the FBI are technically feasible given the support for strong encryption on iOS devices. Based on my…
6746
Backdoor in DVR firmware sends CCTV camera snapshots to email address in China
CCTV is ubiquitous in the UK. A recent study estimates there are about 1.85m cameras across the UK – most in private premises. Most of those cameras will be connected to some kind of recording device, which these days means a Digital Video Recorder or DVR. DVRs take video feeds from multiple cameras and store […]
6747
Glibc getaddrinfo stack-based buffer overflow
Posted by Fermin J. Serna, Staff Security Engineer and Kevin Stadmeyer, Technical Program Manager Have you ever been deep in the mines of ...
6748
Automatically inferring file syntax with afl-analyze
The nice thing about the control flow instrumentation used by American Fuzzy Lop is that it allows you to do much more than just, well, f...
6749
Why I stopped using StartSSL (Hint: it involves a Chinese company)
StartSSL uses https://auth.startssl.com/ for the front-end to access to their PKIs (login to the PKI, create, revoke certificates...). It's the Core of their service and the critical part of their infrastructure.
6750
Tails installer is now in Debian
Tails (The amnesic incognito live system) is a live OS based on Debian GNU/Linux which aims at preserving the user's privacy and anonymity by using the Internet anonymously and circumventing censorship. Installed on a USB device, it is configured...