New
The latest blog posts to take off on Hacker News. 8,773 posts.
The dark side of big data
Everybody (1, 2, 3) is talking about big data and the chances that are not to be missed. So it would be fatal to miss this opportunity, for instance, by impo...
Cisco buffer overflow vulnerability with remote code execution
A vulnerability in the Internet Key Exchange (IKE) version 1 (v1) and IKE version 2 (v2) code of Cisco ASA Software could allow an unauthenticated, remote attacker to cause a reload of the affected system or to remotely execute code. The vulnerability is due to a buffer overflow in the affected code area. An attacker…
Gmail Will Warn If Message Is Not Authenticated/Encrypted
Making email safer for you with two new security features in Gmail on the web.
SSH: Best practices
The comments around the last OpenSSH issue ( CVE 2016-0777 , you must read excellent Qualys’ analysis if you’re interested with the details), I noticed that many people were not aware of some basic features of OpenSSH. I will attempt to give a few advises, prioritized in feasibility order, and with graphical…
ZCash (formerly Zerocash/Zerocoin) technology preview
I’m extremely happy to announce the Zcash project. Zcash (formerly “Zerocash”/“Zerocoin”) is a project to create a new currency for the Internet, inspired by Bitcoin. Bitcoin is an amazing and complex…
How the TPP Will Affect You and Your Digital Rights (2015)
The Internet is a diverse ecosystem of private and public stakeholders. By excluding a large sector of communities—like security researchers, artists, libraries, and user rights groups—trade negotiators skewed the priorities of the Trans-Pacific Partnership (TPP) towards major tech companies and...
The Security-Minded Container Engine by CoreOS: rkt Hits 1.0
No single cloud fits all. Explore how we build a more flexible future with hybrid cloud.
The Internet of Things Will Be the World's Biggest Robot
The Internet of Things is the name given to the computerization of everything in our lives. Already you can buy Internet-enabled thermostats, light bulbs, refrigerators, and cars. Soon everything will be on the Internet: the things we own, the things we interact with in public, autonomous things that interact with…
No More Deceptive Download Buttons
Posted by Lucas Ballard, Safe Browsing Team In November , we announced that Safe Browsing would protect you from social engineering attack...
On WebKit Security Updates
Linux distributions have a problem with WebKit security. Major desktop browsers push automatic security updates directly to users on a regular basis, so most users don't have to worry about security updates. But Linux users are dependent on their distributions to release updates. Apple fixed over 100 vulnerabilities…
Don't Panic: Seeking Points of Agreement on the “Going Dark” Debate
Don't Panic: Seeking Points of Agreement on the
UCOP Ordered Spyware Installed on UC Data Networks
The San Francisco Chronicle has coverage of an issue that has been circulating on faculty email networks at UC Berkeley for a few days. ...
How Plex is doing HTTPS for all its users
This week Plex , a self-hosted media server, announced that they now offer TLS to secure all connections, including those to the user’s servers. This is actually pretty interesting.
Some OS X Applications Vulnerable to MITM Attacks
Facebook bug bounty and story behind a vulnerability
Login Forms Over HTTPS, Please
Update: This feature is now also enabled in Firefox Beta, starting with Firefox Beta 50. Pretty much everyone who uses the web has used a password to log into something. ...
OpenSSL Key Recovery Attack on DH small subgroups (CVE-2016-0701)
Usual Mandatory Disclaimer: IANAC (I am not a cryptographer) so I might likely end up writing a bunch of mistakes in this blog post... ...
25 Civil Liberties Orgs Call for Open Hearings on Section 702 Surveillance
The House Judiciary Committee has plans for a “members only” meeting next week to discuss Section 702 of the FISA Amendment Acts, the law the NSA relies on to operate its notorious PRISM surveillance program and to tap into the backbone of the Internet, also known as “upstream” collection. While we...
Oracle deprecating Java applets in Java 9
The Java programming language is one of the most popular languages today. Stay up to date with news, certifications, free learning resources, Java Magazine, events and much more
NTP Pool Bad Actors: The Rising Sophistication of Network Scanning
Gone are the days when computers didn't need firewalls. We are now living in an internet security arms race and your personal information ...
Why I’m not speaking at CPDP: It’s the privacy-washing
13 Jan, 2016 The sponsorship of privacy and human rights conferences by corporations that erode our privacy and human rights is a clear conflict of interests that we must challenge. The revolution will not be sponsored by those we are revolting against.
“No Cost” License Plate Readers Are Turning Texas Police into Debt Collectors
Vigilant Solutions, one of the country’s largest brokers of vehicle surveillance technology, is offering a hell of a deal to law enforcement agencies in Texas: a whole suite of automated license plate reader (ALPR) equipment and access to the company’s massive databases and analytical tools—and it...
HTTPS provides more than just privacy
Identity, SEO, HTML5, and not having your content modified
Updated Firefox Security Indicators
Cross posting this. It was written a couple months ago and posted to Mozilla’s Security Blog This article was coauthored by Aislinn Grigas, Senior Interaction Designer, Firefox Desktop November 3, 2015 Over the past few months, Mozilla has been improving the user experience of our privacy and security features in…
Amazon's customer service backdoor
As a security conscious user who follows the best practices like: using unique passwords, 2FA, only using a secure computer and being able…