Truecrypt report
A few weeks back I wrote an update on the Truecrypt audit promising that we’d have some concrete results to show you soon. Thanks to some hard work by the NCC Crypto Services group, soon is n…
The latest blog posts to take off on Hacker News. 8,775 posts.
A few weeks back I wrote an update on the Truecrypt audit promising that we’d have some concrete results to show you soon. Thanks to some hard work by the NCC Crypto Services group, soon is n…
Posted by Adam Langley, Security Engineer On Friday, March 20th, we became aware of unauthorized digital certificates for several Google ...
For the past week, the website "GitHub" has been under attack by China. In this post, I pin-point where the attack is coming from by doing a...
About Vulnerability Research Grants and a little story how I could delete any video on YouTube.
On March 27 The following message was posted on the official GitHub blog: We are currently experiencing the largest DDoS (distributed denial of service) attack in github.coms history. The attack began around 2AM UTC on Thursday, March 26, and involves a wide combination of attack vectors. These incl[...]
Firefox 37 brings more encryption to the web through opportunistic encryption of some http:// based resources. It will be released the week ...
Since late 2004, EFF has been warning the public about "printer dots" -- tiny yellow dots that appear on documents produced by many color laser printers and copiers. These yellow dots form a coded pattern on every page the printer produces and can be used to identify specific details about a...
Posted by Adam Langley, Security Engineer On Friday, March 20th, we became aware of unauthorized digital certificates for several Google ...
Computers are learning to recognize objects with near-human ability. But Cornell researchers have found that computers, like humans, can be fooled by optical illusions, which raises security concerns.
[Passenger Name Record (PNR) view from Amtrak “Police GUI”. Click image for larger version.]
This document describes a method of reading and displaying previously used framebuffers from a variety of popular graphics cards. In all 4 tested laptops the content of the VRAM was not erased upon reboot. It is also possible to show that the content of the host VRAM can be accessed from a VirtualBox guest, thereby…
Last week, the ACLU filed a welcome additional challenge to the NSA’s warrantless Internet backbone surveillance (aka “Upstream” surveillance) on behalf of Wikimedia and a number of other media and human rights organizations. We applaud all of those involved in bringing the case. It adds another...
Fighting censorship with technology since 2011. We use AI to monitor censorship and expand free speech worldwide.
Nowadays many companies and organizations (non-profits, units of governmental and educational institutions, etc) believe that running their own mail servers has become an impossible task, due both to the large amount of inbound spam and to the continuous attempts by spammers to send outbound spam through their mail…
Many people may already know that all your devices try to broadcast your previous connections. I expect that many more have no idea that’s happening. There have been articles published about it before, but without specific examples.
This post was authored by Nick Biasini, Alex Chiu, Jaeson Schultz, and Craig Williams. Special thanks to William McVey for his contributions to this post.
Today, the Wikimedia Foundation is filing suit against the National Security Agency (NSA) and the Department of Justice (DOJ) of the United States. The lawsuit challenges the NSA’s mass surveillanc…