6961
New
The latest blog posts to take off on Hacker News. 8,774 posts.
6962
Hard, Not Soft, Kill Switches
Purism makes premium phones, laptops, mini PCs and servers running free software on PureOS. Purism products respect people's privacy and freedom while protecting their security.
6963
6964
6965
6966
6967
Exploitable vulnerabilities found in Kaspersky Anti-Virus
Posted by the notorious Tavis Ormandy.We’ve talked before about how we use Google scale to ...
6968
Researchers Could Have Uncovered Volkswagen’s Emissions Cheat If Not for DMCA
Automakers argue that it’s unlawful for independent researchers to look at the code that controls vehicles without the manufacturer’s permission. We’ve explained before how this allows manufacturers to prevent competition in the markets for add-on technologies and repair tools. It also makes it harder for watchdogs to…
6969
6970
6971
Improved Digital Certificate Security
Posted by Stephan Somogyi, Security & Privacy PM, and Adam Eijdenberg, Certificate Transparency PM On September 14, around 19:20 GMT, Syma...
6972
Popular Chinese iOS apps compromised in malware attack
自2011年以来用技术对抗审查。我们使用AI监控审查并在全球范围内扩大言论自由。
6973
6974
Candy Japan hit with credit card fraud
What is credit card fraud, how we noticed it and how it impacted our business.
6975
6976
Disabling SSLv3 and RC4
Posted by Adam Langley, Security Engineer As the previously announced transition to SHA-256 certificates is nearing completion, we are p...
6977
6978
Our First Certificate Is Now Live
Let’s Encrypt passed another major milestone by issuing our first certificate. You can see it in action here. Our cross signature is not yet in place, however this certificate is fully functional for clients with the ISRG root in their trust store. When we are cross signed, approximately a month from now, our…
6979
Tracking a Bluetooth Skimmer Gang in Mexico (Part I)
-Sept. 9, 12:30 p.m. CT, Yucatan Peninsula, Mexico: Halfway down the southbound four-lane highway from Cancun to the ancient ruins in Tulum, traffic inexplicably slowed to a halt. There was some sort of checkpoint ahead by the Mexican Federal Police. I began to wonder whether it was a good idea to have brought along…
6980
Reverse engineering an ancient wireless security keypad using RTL-SDR
A few weeks ago, some friends and I decided that our houses weren’t crammed full enough with useless crap and so we embarked on a journey to a large junk shop surplus warehouse. The place was a vast hangar brimming with old and curious pieces of technology ranging from IBM keyboards to VHS video editing …
6981
6982
Introducing Heroku Private Spaces
As the world becomes more cloud-centric, and more of our apps and business depend on its capabilities, the trust, control and management of cloud services
6983
How we cracked millions of Ashley Madison passwords
Not long after the release of the Ashley Madison leaks, many groups and individuals attempted to crack the bcrypt hashes. Since t...
6984
TSA Master Keys
Someone recently noticed a Washington Post story on the TSA that originally contained a detailed photograph of all the TSA master keys. It’s now blurred out of the Washington Post story, but the image is still floating around the Internet. The whole thing neatly illustrates one of the main problems with backdoors…
6985
6986
6987
6988
6989
W^X policy violation affects Windows drivers compiled in VS 2013 and previous
Back in June, I was doing some analysis on a Windows driver and discovered that the INIT section had the read, write, and executable characteristics flags set. Windows executables (drivers included…
6990
Tarsnap email confirmation bypass
One consequence of these unsolicited security scans is that — since they feed a variety of inputs to forms, including the account creation form — I see a lot of obviously fake signup attempts (alas, none yet from the world's most obviously fake domain name ). These are harmless, since the signup code sends out a…