6931
New
The latest blog posts to take off on Hacker News. 8,773 posts.
6932
How to Protect Yourself from NSA Attacks on 1024-bit DH
In a post on Wednesday, researchers Alex Halderman and Nadia Heninger presented compelling research suggesting that the NSA has developed the capability to decrypt a large number of HTTPS, SSH, and VPN connections using an attack on common implementations of the Diffie-Hellman key exchange...
6933
Hacker Who Sent Me Heroin Faces Charges in U.S
A Ukrainian hacker who once hatched a plot to have heroin sent to my Virginia home and then alert police when the drugs arrived had his first appearance in a U.S. court today, after being extradited to the United States to face multiple cybercrime charges.
6934
How is NSA breaking so much crypto?
There have been rumors for years that the NSA can decrypt a significant fraction of encrypted Internet traffic. In 2012, James Bamford published an article quoting anonymous former NSA officials stating that the agency had achieved a “computing breakthrough” that gave them “the ability to crack current public…
6935
The Web Authentication Arms Race – A Tale of Two Security Experts
Web authentication systems have evolved over the past ten years to counter a growing variety of threats. This post will present a fictional arms race between a web application developer and an attacker, showing how different threats can be countered with the latest security technologies.
6936
Judge to DOJ: Not All Writs
A federal magistrate judge in Brooklyn took an admirable stand last week when he questioned the government’s authority to compel Apple to unlock a seized mobile device using the All Writs Act. That’s a general-purpose law passed in 1789 that allows a court to require third parties’ assistance to...
6937
There's No DRM in JPEG – Let's Keep It That Way
If you have ever tried scanning or photocopying a banknote, you may have found that your software—such as Adobe Photoshop, or the embedded software in the photocopier—refused to let you do so. That's because your software is secretly looking for security features such as EURion dots in the...
6938
Obama Encryption Policy Rejects Laws Mandating Backdoors
Obama’s position on encryption is now public, as reported by the Washington Post. According to Ellen Nakashima and Andrea Peterson of the Post, Obama “will not —for now—call for legislation requiring companies to decode messages for law enforcement.” Instead, the Post reports, the “administration...
6939
Gov. Brown Signs CalECPA, Requiring Police to Get a Warrant for Your Data
Californians can rest assured that law enforcement can’t poke around in their digital records without first obtaining a warrant. Today, Gov. Jerry Brown has signed S.B. 178, the California Electronic Communications Privacy Act (CalECPA). After months of pressure from public interest groups, media...
6940
What’s in a Boarding Pass Barcode?
The next time you’re thinking of throwing away a used boarding pass with a barcode on it, consider tossing the boarding pass into a document shredder instead. Two-dimensional barcodes and QR codes can hold a great deal of information, and the codes printed on airline boarding passes may allow someone to discover more…
6941
No Safe Harbor: How NSA Spying Undermined U.S. Tech and Europeans' Privacy
The spread of knowledge about the NSA's surveillance programs has shaken the trust of customers in U.S. Internet companies like Facebook, Google, and Apple: especially non-U.S. customers who have discovered how weak the legal protections over their data is under U.S. law. It should come as no...
6942
Introducing AWS WAF
AWS WAF is a managed cloud web application firewall (WAF) service that protects websites, APIs, and applications from bots, exploits, and layer 7 events. Deploy scalable, enterprise-grade WAF solutions with global protection.
6943
The End of Safe Harbor and a Scary Path Forward
Some in detail analysis about what the end of safe harbor means for small companies, especially in Europe.
6944
Global coalition to Facebook: “Authentic names” are dangerous for your users
Facebook claims its practice of forcing users to go by their "real names" (or "authentic identities" as Facebook spins it) makes the social network a safer place. In fact, the company has often claimed that the policy protects women who use the social media platform, even when faced with community...
6945
6946
In China, Your Credit Score Is Affected by Your Political Opinions
China's social score system is full of rumor and speculation. We clear up the misconceptions and explain how the credit system really works.
6947
Web Fonts Collateral Damage of Ad Blockers
Years of abusive implementation of webfonts has landed the feature under the umbrella of content blocking APIs, affecting those few who’ve cared all along.
6948
6949
6950
Do not let your CDN betray you: Use Subresource Integrity
Mozilla Firefox Developer Edition 43 and other modern browsers help websites to control third-party JavaScript loads and prevent unexpected or malicious modifications. Using a new specification called Subresource Integrity, a ...
6951
France's Government Aims to Give Itself Carte Blanche to Spy on the World
The United States makes an improper division between surveillance conducted on residents of the United States and the surveillance that is conducted with almost no restraint upon the rest of the world. This double standard has proved poisonous to the rights of Americans and non-Americans alike. In...
6952
6953
Volkswagen and Cheating Software
Portuguese translation by Ricardo R Hashimoto For the past six years, Volkswagen has been cheating on the emissions testing for its diesel cars. The cars’ computers were able to detect when they were being tested, and temporarily alter how their engines worked so they looked much cleaner than they actually were. When…
6954
Senator Wants to Make the Computer Fraud and Abuse Act Even Easier to Abuse
This summer, Senator Sheldon Whitehouse introduced an amendment to the flawed Cyber Information Sharing Act (CISA) that would make it even worse, by expanding the broken Computer Fraud and Abuse Act (CFAA). EFF has proposed common sense changes to this federal anti-hacking law, many of which were...
6955
How I hacked my IP camera, and found this backdoor account
The time has come. I bought my second IoT device - in the form of a cheap IP camera. As it was the most affordable among all others, my exp...
6956
Google fixes nearly decade-old Linux kernel TCP bug
The Google transport networking crew (QUIC, TCP, etc..) deserve a shout out for identifying and fixing a nearly decade old Linux kernel TCP ...
6957
The Inside Story Behind MS08-067
Access to this page requires authorization. You can try signing in or changing directories .
6958
Keybase's New Key Model
You're reading the Keybase blog. There are more posts . When you're done, you can install Keybase .
6959
Cookies Lack Integrity: Real-World Implications
Xiaofeng Zheng, Tsinghua University and Tsinghua National Laboratory for Information Science and Technology; Jian Jiang, University of California, Berkeley; Jinjin Liang, Tsinghua University and Tsinghua National Laboratory for Information Science and Technology; Haixin Duan, Tsinghua University, Tsinghua National…
6960
