7261
OAuth1, OAuth2, OAuth..? (2013)
TL;DR OAuth2 sucks. Please don't think about OAuth2 as about the next generation of OAuth1. They are completely different like colors: O...
New
The latest blog posts to take off on Hacker News. 8,776 posts.
7262
British Spy Agency Considers Journalists a Threat, Vacuums Up Their Emails
Terrorists, hackers, and journalists. According to a recent Guardian article covering new Snowden documents, British spy agency GCHQ considers all of these individuals threats—various levels of threats, but threats nonetheless. One intelligence report goes so far as to say, "Of specific concern are...
7263
What happens when DNS in China is poisoned and pointed at your server
I’ve been using the Internet in one form or another since the mid-80’s. In that time, I’ve seen a lot of strange stuff happening on our global network. On Tuesday, I experienced something extraordinary. It all started with a text message from my partner Ged at 8:30 AM: Mail server down. Please take a look […]
7264
A dead man's switch for your computer?
In the last few weeks, a lot of details have been disclosed around Ross Ulbricht’s arrest. For those not familiar with the matter, Ulbricht was arrested at …
7265
7266
An experimental real world adblock
Corporate branding and advertisements are ubiquitous in society today and almost impossible to avoid. What if we lived in a world where consumers were blind to this surplus of corporate branding? Brand Killer is a technology demonstration that envisions a future in which consumers can use augmented reality to opt out…
7267
HealthCare.gov Sends Personal Data to Dozens of Tracking Websites
The Associated Press reports that healthcare.gov–the flagship site of the Affordable Care Act, where millions of Americans have signed up to receive health care–is quietly sending personal health information to a number of third party websites. The information being sent includes one's zip code,...
7268
7269
Security: OpenBSD vs. FreeBSD
Blog about network and security, showing example of Linux iptables and Snort configuration, and Windows security softwares.
7270
Against DNSSEC
10 years later and still unrebutted: DNSSEC is pageantry, it's not security, which is why so few security teams deploy it.
7271
How Verizon and Turn Defeat Browser Privacy Protections
Update 2014-01-16: Turn announced today they will suspend their zombie cookie program by early February, but left open the possibility to resume in the future. We ask that they end the program permanently.Verizon advertising partner Turn has been caught using Verizon Wireless's UIDH tracking header...
7272
Hopefully the last post I'll ever write on Dual EC DRBG
I’ve been working on some other blog posts, including a conclusion of (or at least an installment in) this exciting series on zero knowledge proofs. That’s coming soon, but first I want…
7273
Audi Cruise Control Bug
I noticed a "bug" in the way Audi handles its Cruise Control options. Cruise control is only meant to be used once you drive "30 kilometers per hour or more". …
7274
7275
7276
7277
Lizard Stresser Runs on Hacked Home Routers
The online attack service launched late last year by the same criminals who knocked Sony and Microsoft ’s gaming networks offline over the holidays is powered mostly by thousands of hacked home Internet routers, KrebsOnSecurity.com has discovered.
7278
The God Login
I graduated with a Computer Science minor from the University of Virginia in 1992. The reason it’s a minor and not a major is because to major in CS at UVa you had to go through the Engineering School, and I was absolutely not cut out for that kind
7279
7280
In Wake of Charlie Hebdo Attack, Let’s Not Sacrifice Even More Rights
EFF is stunned and deeply saddened by the attack on Charlie Hebdo, a French satirical newspaper. As free speech advocates, we mourn the use of violence against individuals who used creativity and free expression to engage in cultural and political criticism. Murder is the ultimate form of...
7281
Apple’s Dev Agreement Means No EFF Mobile App for iOS
Today we launched a new app that will make it easier for people to take action on digital rights issues using their phone. The app allows folks to connect to our action center quickly and easily, using a variety of mobile devices. Sadly, though, we had to leave out Apple devices and the folks who...
7282
Secure Secure Shell
No ads, no tracking. Ever.<br/> <strong>blog.stribik.technology</strong> is completely static, without cookies or javascript.<br/> <strong>comments.stribik.technology</strong> uses javascript and local storage, it's loaded when you click
7283
7284
7285
Why are free proxies free? (2013)
Personal Blog of Christian Haschek
7286
7287
7288
Thunderstrike – Apple EFI firmware vulnerability
31C3 presentation on the Thunderstrike firmware vulnerability in MacBooks
7289
Why Deleting Sensitive Information from GitHub Doesn't Save You
Security and Programming Blog
7290
On the new Snowden documents
If you don’t follow NSA news obsessively, you might have missed yesterday’s massive Snowden document dump from Der Spiegel. The documents provide a great deal of insight into how the NSA brea…