New
The latest blog posts to take off on Hacker News. 8,776 posts.
Schneier removed from TSA oversight meeting at TSA request
I was supposed to testify today about the TSA in front of the House Committee on Oversight and Government Reform. I was informally invited a couple of weeks ago, and formally invited last Tuesday: The hearing will examine the successes and challenges associated with Advanced Imaging Technology (AIT), the Screening of…
Random Number Bug in Debian Linux
This is a big deal: On May 13th, 2008 the Debian project announced that Luciano Bello found an interesting vulnerability in the OpenSSL package they were distributing. The bug in question was caused by the removal of the following line of code from md_rand.c MD_Update(&m,buf,j); [ .. ] MD_Update(&m,buf,j); /* purify…
Run your own CTF: Stripe publishes VM images
Online payment processing for internet businesses. Stripe is a suite of payment APIs that powers commerce for businesses of all sizes.
Cybersecurity Bill Broad Enough to Use Against WikiLeaks and The Pirate Bay
Congress is doing it again: they’re proposing overbroad regulations that could have dire consequences for our Internet ecology. The Cyber Intelligence Sharing and Protection Act of 2011 (H.R. 3523), introduced by Rep. Mike Rogers and Rep. Dutch Ruppersberger, allows companies or the government[fn]...
Don't use bcrypt
(Edit: Some numbers for you people who like numbers) If you're already using bcrypt, relax, you're fine, probably. However, if you're ...
Securing Your Domain Against Seizure: Where Is Safe to Register a Domain Name?
The Gun.io blog: insights on hiring software developers, AI in engineering, distributed teams and how to build high-performing technical teams.
How github was hacked
So I commited in rails/rails repo I simply added a <input value=USER_ID name=public_key[user_id]> field to Public key update form, where U...
On CPU backdoors - Trusting hardware
So, you're a decent paranoid person, running only open source software on your box: Linux, GNU, etc. You have the feeling you could, if you ...
Introducing Collusion: Discover who’s tracking you online
Web Extension version of the Firefox Lightbeam add-on - mozilla/lightbeam-we
How to Find Facebook Users on Match.com by Using Face Recognition Tools
黄色福利站-2022国语高清视频播放,粗大猛地挺进娇喘啊在线视频-国产不卡青柠影院-久久草网-未删减1080P迅雷高清下载
Daring Fireball: Cookies and Privacy
What I detect in Google’s behavior (and John Battelle’s more-or-less defense of it) is a sense of entitlement. That because in the past ad networks could track almost all users via cookies, they are entitled to continue tracking almost all users across the web via cookies, even when a large (and growing) number of…
NSA Interception Infographic
Late Friday afternoon , the government asked the Supreme Court to dismiss our lawsuit challenging the constitutionality of a 2008 law gives the government unprecedented authority to monitor Americans ’ international emails and phone calls.
Another Piece of the Stuxnet Puzzle
We can now conclusively link Stuxnet to the centrifuge structure at the Natanz nuclear enrichment lab in Iran. Watch this new video presentation from Ralph Langner, the researcher who has done the most work on Stuxnet. It’s a long clip, but the good stuff is between 21:00 and 29:00. The pictures he’s referring to are…
Hack your way through Stripe's Capture the Flag
Online payment processing for internet businesses. Stripe is a suite of payment APIs that powers commerce for businesses of all sizes.
Remove Google Search History Before New Privacy Policy Takes Effect
[UPDATE 2/22/2012] It is important to note that disabling Web History in your Google account will not prevent Google from gathering and storing this information and using it for internal purposes. More information at the end of this post. On March 1st, Google will implement its new, unified privacy policy, which will…
SSH Do’s and Don’ts
Do Use SSH Keys When ever you can use a key for SSH. Once you create it, you can distribute the public side widely to enable access where ever you need it. Generating one is easy: ssh-keygen -t dsa Don't Use a Blank Passphrase on Your Key This key is now your identity. Protect it.
Scamming the scammers – catching the virus call centre scammers red-handed
A few months back I got a call one evening which was clearly a virus call centre scam; you know, the ones that call you out of the blue, tell you your PC is infected with all sorts of nasties and offer to fix it for you? Or maybe you