New
The latest blog posts to take off on Hacker News. 8,776 posts.
Own your own data
A new system would allow individuals to pick and choose what data to share with websites and mobile apps.
Announcing Project Zero
Posted by Chris Evans, Researcher Herder Security is a top priority for Google. We've invested a lot in making our products secure, incl...
Germany is pressuring Neocities to censor a disclosure of their censorship
The German government is pressuring Neocities to censor a disclosure of their censorship list.
LibreSSL's PRNG is Unsafe on Linux
The first version of LibreSSL portable, 2.0.0, was released a few days ago (followed soon after by 2.0.1 ). Despite the 2.0.x version numbers, these are only preview releases and shouldn't be used in production yet, but have been released to solicit testing and feedback. After testing and examining the codebase, my…
Beware Keyloggers at Hotel Business Centers
The U.S. Secret Service is advising the hospitality industry to inspect computers made available to guests in hotel business centers, warning that crooks have been compromising hotel business center PCs with keystroke-logging malware in a bid to steal personal and financial data from guests.
Maintaining digital certificate security
Posted by Adam Langley, Security Engineer On Wednesday, July 2, we became aware of unauthorized digital certificates for several Google ...
Introducing Transport Layer Security in pure OCaml
This domain name has been registered with Gandi.net. It is currently parked by the owner.
iOS 8 Privacy Updates
A summary of all iOS 8 Security and Privacy updates and their importance.
The Rise of Thin, Mini and Insert Skimmers
Like most electronic gadgets these days, ATM skimmers are getting smaller and thinner, with extended battery life. Here’s a look at several miniaturized fraud devices that were pulled from compromised cash machines at various ATMs in Europe so far this year.
Jamming XKeyScore
Back in the day there was talk about "jamming echelon" by adding keywords to email that the echelon system was supposedly looking for. We ca...
On being targeted by the NSA
As quoted in the original article on Das Erste: We've been thinking of state surveillance for...
Breaking Spotify DRM with PANDA
Disclaimer : Although I think DRM is both stupid and evil, I don't advocate pirating music. Therefore, this post will stop short of providi...
Tor exit node operator prosecuted in Austria
June 30th, 2014 marks a turning point for Austria. Not only was the Vorratsdatenspeicherung (data retention) terminated preliminarily for good (no, really), the operation of TOR exit nodes supposedly was also declared a criminal offense by a regional criminal court. The accused was operating a TOR exit node which was…
Protecting Your Anonymity: A How-to for Sex Workers
Just as you take steps to protect your personal safety and health while engaging in real-life encounters, a sex worker should also be mindful of the dangers of the online world. As we wrote in a separate blog post today, the sex worker forum MyRedBook, along with its companion sites, have been...
Why Everyone Should be Concerned By the Seizure of MyRedBook.com
Last week, an online community for sex workers disappeared from the Internet. Visit SFRedbook.com, MyPinkBook.com, or MyRedBook.com right now, and you’ll only find the seals of the law enforcement agencies—the FBI, the DOJ, and the IRS—that seized the sites as part of a prostitution and money...
Things You Should Know About Tor
Updated: July 1st at 6:30PM to add information about traffic correlation attacks. We posted last week about the Tor Challenge and why everyone should use Tor. Since we started our Tor Challenge two weeks ago we have signed up over 1000 new Tor relays. But it appears that there are still some...
Microsoft takes down No-IP.com domains
Access to this page requires authorization. You can try signing in or changing directories .
How you will not uncover Satoshi
Computer forensics is the science of finding evidence in computers and digital documents, and when a hacker perform forensics, better be prepared for the unknown. Satoshi did many things in order t…
Docker containers should not run an SSH server
When they start using Docker, people often ask: “How do I get inside my containers?” and other people will tell them “Run an SSH server in your containers!” but that’s a very bad practice. We will see why it’s wrong, and what you should do instead.
Captchas are Becoming Ridiculous
I am a software engineer based out of Seattle, WA
Bypass PayPal's Two-Factor Authentication
Explore the Duo Blog for expert tips, security insights, and resources to stay updated on the latest in security and access management trends.
The 'Fly' Has Been Swatted
A Ukrainian man who claimed responsibility for organizing a campaign to send heroin to my home last summer has been arrested in Italy on suspicion of trafficking in stolen credit card accounts, among other things, KrebsOnSecurity.com has learned.
Every C99.php shell is backdoored
A Hacker's Blog of Unintended Use and Insomnia.