7201
Project Zero: Exploiting the DRAM rowhammer bug to gain kernel privileges
Posted by Mark Seaborn, sandbox builder and breaker, with contributions by Thomas Dullien, revers...
New
The latest blog posts to take off on Hacker News. 8,775 posts.
7202
7203
Saying goodbye to encrypted SMS/MMS
It’s 2015, and the end of the road for encrypted SMS/MMS in TextSecure. The TextSecure story started back in 2009, at the dawn of the smartphone era. Back then, TextSecure focused on securing the transport that everyone coming from feature phones was familiar with: SMS. Today, many things have c...
7204
Packet capturing on Windows with netsh
No Wireshark? No TCPDump? No Problem!, Author: Rob VandenBrink
7205
EFF to UN: You Need a Privacy Watchdog
EFF joined more than sixty civil liberties organizations and public interest groups from across the world yesterday in calling upon the world's governments to support the creation of a United Nations Special Rapporteur on the right to privacy. The special rapporteurs are independent experts...
7206
Attack of the week: FREAK (or 'factoring the NSA for fun and profit')
This is the story of how a handful of cryptographers ‘hacked’ the NSA. It’s also a story of encryption backdoors, and why they never quite work out the way you want them to. But I…
7207
7208
Coreboot Blocked from Recent Thinkpads by Intel Boot Guard
So some innocent post on the coreboot mailing list managed to make some waves. The problem Intel tries to solve… Intel Boot Guard is the latest effort in a long series by Intel and others to allow computers to provide some reliable information about the state a computer is in. They’re working on it since at least…
7209
Are Your Devices Hardwired for Betrayal?
It's an interesting time to be a computer security researcher. Last week, Kaspersky Lab released a report about a new family of malware from an entity they called "The Equation Group". The report demonstrated for the first time that firmware-based attacks, previously only demonstrated in lab...
7210
Signal 2.0 released with private messaging support
Today we’re releasing Signal 2.0, with support for TextSecure private messaging. It is now possible to send end-to-end encrypted group, text, picture, and video messages between Signal on iPhone and TextSecure on Android, all without SMS and MMS fees. Signal 2.0 blends private phone calls and pri...
7211
7212
Getting Superfish Out of Firefox
First things first: If you are reading this post on a recent Lenovo laptop, please click the lock icon in the URL bar, then click “More Information…”. If you see ...
7213
Google announces Android for Work
Posted by Rajen Sheth, Director of Product Management, Android and Chrome for Work (Cross-posted on the Android Blog .) Over a billi...
7214
It's Time to Break Up the NSA (2014)
The NSA has become too big and too powerful. What was supposed to be a single agency with a dual mission—protecting the security of U.S. communications and eavesdropping on the communications of our enemies—has become unbalanced in the post-Cold War, all-terrorism-all-the-time era. Putting the U.S. Cyber Command, the…
7215
7216
7217
Privacy is at a crossroads. Choose wisely
We already put legal limits on financial, medical, military, transportation, and agriculture technology. Why not online tracking?
7218
7219
Hacking Oklahoma State University's Student ID
READ THIS AFTER - a full follow up here: http://snelling.io/following-up-hacking-oklahoma-state-universitys-student-id
7220
Government-Linked Certificate Authorities in OS X
I’ve been sitting on this information for some time, waiting to get more research done before I publish a post. But since word has come out about how Lenovo preloads what amounts to very bad spyware on their PCs, I thought I should also just go right ahead to spill the beans on the Mac.
7221
Bug finding is slow in spite of many eyeballs
"given enough eyeballs, all bugs are shallow" The saying (also known as Linus' law) doesn't say that the bugs are found fast and neither does it say who finds them. My version of the law would be much more cynical, something like: "eventually, bugs are found", emphasizing the 'eventually' part. (Jim Zemlin apparently…
7222
Comodo ships Adware Privdog worse than Superfish
This blog is written by Hanno Böck. Unless noted otherwise, its content is licensed as CC0 .
7223
If you are storing important info in Evernote, think twice
I assumed this was probably due to some shutdown corruption (though I rarely hit those in OS X). It just wouldn’t come back up and showed me some font error
7224
Internet of Crappy Things
There is a flood of appliances which could be connected - and some are connected - without a second thought as to whether or not it’s necessary or secure.
7225
Exploiting the Superfish certificate
As discussed in my previous blogpost, it took about 3 hours to reverse engineer the Lenovo/Superfish certificate and crack the password. In...
7226
7227
Komodia SSL certificates are in many products
So, as people have started turning over stones, looking to see how common these Komodia certificates are, some surprising (and depressing) things are beginning to surface. It does appear that Komod…
7228
Non-official MtGox investigation update and preliminary release
The official blog of WizSec, a group of bitcoin security specialists, and their investigation into MtGox.
7229
EFF to Supreme Court: The Fourth Amendment Covers DNA Collection
San Francisco - People have a Fourth Amendment right to privacy when it comes to their genetic material, the Electronic Frontier Foundation (EFF) argues in an amicus brief filed this week with the Supreme Court of the United States. EFF is asking the Supreme Court to hear arguments in Raynor v....
7230
