7021
Thunderstrike 2: Mac firmware worm details
Collection of my projects and hacks.
New
The latest blog posts to take off on Hacker News. 8,774 posts.
7022
7023
7024
7025
Using a single AWS account is a serious risk
Your AWS account is one of the most valuable things you own if you run a business on AWS. If you only own a single AWS accoun...
7026
Firefox exploit found in the wild
Yesterday morning, August 5, a Firefox user informed us that an advertisement on a news site in Russia was serving a Firefox exploit that searched for sensitive files and uploaded ...
7027
OS X sudoers exploit found in the wild
Last month's discovery of a zero-day vulnerability in OS X led to today's revelation of the first known exploit.
7028
Fuzzing a DNS parser written in Go
Here at CloudFlare we are heavy users of the github.com/miekg/dns Go DNS library and we make sure to contribute to its development as much as possible. Therefore when Dmitry Vyukov published go-fuzz and started to uncover tens of bugs in the Go standard library, our task was clear.
7029
Is Extended Random a Malicious NSA Plot?
Dual_EC was almost certainly an NSA backdoor. Extended Random is the TLS extension that would have made it practical to exploit. Did NSA plant that one too? A look at the evidence.
7030
The Most Dangerous Code in the Web Browser
Personal website of Stefan Heule
7031
Chaos Computer Club congratulates Netzpolitik.org
Nach nur kurzer Prüfung einer Strafanzeige des Verfassungsschutzes ermittelt der Generalbundesanwalt gegen die Redaktion von netzpolitik.org. Der Chaos Computer Club (CCC) gratuliert der Redaktion...
7032
I noticed some disturbing privacy defaults in Windows 10
Adventures in diy, electronics, programming, remote control and anything else.
7033
Behavioral Profiling: The password you can't change
You can be identified by how you type, even behind proxies and Tor. Protect yourself with KeyboardPrivacy.
7034
SSL tools we wish we'd known about earlier
...and that you'll wish you knew about earlier too
7035
Microsoft’s new small print – how your personal data is abused
Microsoft has renewed its Privacy Policy and Service Agreement. The new services agreement goes into effect on 1 August 2015, only a couple of days after the launch of the Windows 10 operating system on 29 July. The new “privacy dashboard” is presented to give the users a possibility to control their data related to…
7036
Releasing jsfunfuzz and DOMFuzz
Today I'm releasing two fuzzers: jsfunfuzz , which tests JavaScript engines, and DOMFuzz , which tests layout and DOM APIs.
7037
7038
One in every 600 websites has .git exposed
Deeply technical and hands-on AI and tech leader. Built, scaled and sold my own… · Experience: Cubes · Education: Nanzan University · Location: London Area, United Kingdom · 500+ connections on LinkedIn. View Jamie Brown’s profile on LinkedIn, a professional community of 1 billion members.
7039
Hacking Team: a zero-day market case study
This article documents Hacking Team’s third-party acquisition of zero-day (0day) vulnerabilities and exploits. The recent compromise of Hacking Team’s email archive offers one of the first public case studies of the market for 0days. Because of its secretive nature, this market has been the source of endless debates…
7040
Detecting VPN (and its configuration) and proxy users on the server side
A lot of people use VPN every day. Somebody use it in always-on mode to circumvent government or corporative internet censorship, while…
7041
The OpenSSH Bug That Wasn't
Much has been written about a purported OpenSSH vulnerability. On closer inspection, the reports actually got most of their facts wrong. Rea...
7042
French Constitutional Council Widely Approves Surveillance Law
Update (24 July 2015): The French Constitutional Council shows again its disregard for fundamental rights. This morning, after approving almost all dispositions in the Surveillance law, the Constitutional Council builds momentum by rejecting the Question Prioritaire de ConstitutionalitéThe QPC is a
7043
Comparing how security experts and non-experts stay safe online
Posted by Iulia Ion, Software Engineer - Rob Reeder, Research Scientist - Sunny Consolvo, User Experience Researcher Today, you can find...
7044
Google, the Wassenaar arrangement, and vulnerability research
Posted by Neil Martin, Export Compliance Counsel, Google Legal Tim Willis, Hacker Philanthropist, Chrome Security Team Cross-posted on...
7045
7046
Online Cheating Site AshleyMadison Hacked
Large caches of data stolen from online cheating site AshleyMadison.com have been posted online by an individual or group that claims to have completely compromised the company’s user databases, financial records and other proprietary information. The still-unfolding leak could be quite damaging to some 37 million…
7047
Finding MongoDB instances without any authentication
I would like to take a moment to discuss databases. Most people use Shodan to find devices that have web servers, but for a few years now I've also been crawling the Internet for various database software. I usually mention this during my talks and I've tried to raise awareness
7048
If David Cameron bans secure encryption he can't intercept
8:30 : Wake up and get out of bed. Open the curtains to see the sun shining, put a dressing gown on and go downstairs to make some coffee.
7049
7050
Buenos Aires Censors and Raids the Technologists Fixing Its E-Voting System
Buenos Aires is currently in the middle of electing its mayor and city council. With a first round that took place on July 5th, and a second round due on July 19th, the election is the first time Argentina's capital city has used an electronic voting system called Vot.ar, created by local company...