7231
Extracting the SuperFish certificate
I extracted the certificate from the SuperFish adware and cracked the password (" komodia ") that encrypted it. I discuss how down below. T...
New
The latest blog posts to take off on Hacker News. 8,775 posts.
7232
Our brief in support of Twitter's First Amendment suit against the US government
Yesterday, NYU Technology Law & Policy Clinic filed a legal brief on behalf of Freedom of the Press Foundation in Twitter's important lawsuit against the government for violating their First Amendment rights.Buoyed by the Snowden disclosures that began eighteen months ago, tech companies like Twitter have been…
7233
Another update on the Truecrypt audit
There’s a story on Hacker News asking what the hell is going on with the Truecrypt audit. I think that’s a fair question, since we have been awfully quiet lately. To everyone who donate…
7234
I Know This – Hack Jurassic Park’s Security System
“I Know This” is a game I made for the Global Game Jam 2015 along with Gavin McCarthy (art, design), Adam Axbey (sound effects) and Matthew Simmonds (4mat) (music); I did programming and design. The name we chose for the team was Two’s Complement .
7235
Duplicate SSH Keys Everywhere
Back in December when I revamped the SSH banner and started collecting the fingerprint I noticed an odd behavior. It turns out that a few SSH keys are used a lot more than once. For example, the following SSH fingerprint can be found on more than 250,000 devices! dc:
7236
First fully sandboxed Linux desktop app
Its not a secret that I've been working on sandboxed desktop applications recently. In fact, I recently gave a talk at devconf.cz about it. However, up until now I've mainly been focusing on the bundling and deployment aspects of the problem. I've been running applications in their own environment, but having pretty…
7237
Microsoft adopts first international cloud privacy standard
Today marks a major milestone, as Microsoft is the first major cloud provider to adopt the world’s first international standard for cloud privacy. It’s another reason customers can move with confidence to the Microsoft Cloud. The standard in question may seem technical, but it has important practical benefits for…
7238
Life in a post-database world: Using crypto to avoid database writes
Possibly one of the biggest hurdles that stands in the way of fostering innovation and discovering newer and better techniques of doing old things is the ease with which developers and designers to…
7239
Invisible Click Tracking Using “Empty” UTF-8 Characters
Have a look at this URL linking to this post: https://kaspars.net/blog/invisible-click-tracking Notice any tracking variables? Me neither! But check out the HTTP request and response in the network inspector of your browser -- it is redirecting to the "same" URL: URL encoded special characters in the browser console…
7240
Deleting any Facebook album
What if your photos get deleted without your knowledge? That would be pretty upsetting, wouldn’t it? This post is about a vulnerability I found that allowed malicious users to delete any photo album on Facebook. Any photo album owned by a user, a page, or a group could be deleted. Graph API is the primary […]
7241
7242
EFF Files FOIA Suit Over U.S. Marshals’ Cell-Tracking Spy Planes
San Francisco - The Electronic Frontier Foundation (EFF) today filed a Freedom of Information Act (FOIA) lawsuit to shine light on the U.S. Marshals Service's (USMS) use of small aircraft mounted with controversial cell-phone tracking systems. The Wall Street Journal revealed last year that the...
7243
7244
7245
CPU Backdoors
It's generally accepted that any piece of software could be compromised with a backdoor. Prominent examples include the Sony/BMG installer , which had a backdoor built-in to allow Sony to keep users from copying the CD, which also allowed malicious third-parties to take over any machine with the software installed…
7246
7247
7248
Get your loved ones off Facebook
I originally wrote this for my friends and family in 2015, to explain why the latest Facebook privacy policy is really harmful. It’s since been read b
7249
7250
7251
7252
EFF Wins Battle Over Secret Legal Opinions on Government Spying
San Francisco - The Electronic Frontier Foundation (EFF) has won its four-year Freedom of Information Act lawsuit over secret legal interpretations of a controversial section of the Patriot Act, including legal analysis of law enforcement and intelligence agency access to census records. The U.S....
7253
7254
7255
7256
7257
They Live
Winter Break Of Code, Day Fifteen The 1988 film They Live is one of the last great masterpieces to come out of the Hollywood left. In the film, a drifter named John Nada discovers a box of sunglasses that, when worn, allows the wearer to really see the world around him. For instance, when wearin...
7258
EFF’s Game Plan for Ending Global Mass Surveillance
We have a problem when it comes to stopping mass surveillance. The entity that’s conducting the most extreme and far-reaching surveillance against most of the world’s communications—the National Security Agency—is bound by United States law. That’s good news for Americans. U.S. law and the...
7259
Britons: You Have 72 Hours to Stop the Snooper's Charter
Update: You did it! After a forceful debate on Monday 26 January, in which many peers protested the introduction of these amendments, Lord Blair withdrew them from consideration. Directly after the Charlie Hebdo massacre, we cautioned the public and politicians to be "wary of any attempt to rush...
7260
OAuth1, OAuth2, OAuth..? (2013)
TL;DR OAuth2 sucks. Please don't think about OAuth2 as about the next generation of OAuth1. They are completely different like colors: O...