New
The latest blog posts to take off on Hacker News. 8,778 posts.
How Dropbox sacrifices user privacy for cost savings
Note: This flaw is different than the authentication flaw in Dropbox that Derek Newton recently published . Summary Dropbox , the popular cl...
Chinese Infinite Magical Hard-Drive
Chinese Magical Hard-Drive - Thursday, 07 April 2011 - Alex's blog
OpenSSL memory use in Node.js
Last Thursday I went to the Joyent office for Node Office Hours — I wanted to talk to Isaac about running a private NPM registry .
What Location Tracking Looks Like
Your cell phone company knows everywhere you go, twenty-four hours a day, every day. How concrete is this fact for you? It's very concrete for Malte Spitz, a German politician and privacy advocate. He used German privacy law — which, like the law of many European countries, gives individuals a...
Hacking Twitter's Javascript
New Twitter uses a massive amount of javascript (for a webapp). Nearly 1 Megabyte of minified, obfuscated javascript powers the site's frontend.
MySQL.com compromised via (guess what?) SQL injection
MySQL.com (the official site for the MySQL database) was compromised via (shocking!) blind SQL injection. A post was sent today to the full disclosure list…
Microsoft Shuts off HTTPS in Hotmail for Over a Dozen Countries
UPDATE (3/26/11): HTTPS is again available for those in the countries discussed below. Microsoft denies deliberately blocking access to HTTPS, blaming the problem on a bug: We are aware of an issue that impacted some Hotmail users trying to enable HTTPS. That issue has now been resolved. Account...
Iranian hackers obtain fraudulent HTTPS certificates
On March 15th, an HTTPS/TLS Certificate Authority (CA) was tricked into issuing fraudulent certificates that posed a dire risk to Internet security. Based on currently available information, the incident got close to — but was not quite — an Internet-wide security meltdown. As this post will...
Hidden warning message found in Samsung’s Galaxy tablet
The authoritative information platform for the semiconductor industry. Learn why TechInsights is the most trusted source of actionable, in-depth intelligence to the semiconductor industry.
Bittorrent over Tor isn't a good idea
An increasing number of people are asking us about the recent paper coming out of Inria in...
Errata: Steve Gibson
a summary of Steven Gibson events and quotes demonstrating charlatan status
Advanced sign-in security for your Google account
Insights from Googlers into our products, technology, and the Google culture
Electronic Frontier Foundation Uncovers Widespread FBI Intelligence Violations
EFF has uncovered widespread violations stemming from FBI intelligence investigations from 2001 - 2008. In a report released today, EFF documents alarming trends in the Bureau’s intelligence investigation practices, suggesting that FBI intelligence investigations have compromised the civil...
How Organized Spam is Taking Control of Google's Search Results
In the past few months, I have been watching a very unsettling trend unfold in very competitive ecommerce search results on Google. It appears that huge amounts of money are put into place to systematically and successfully manipulate highly competitive search terms in order to sell fake…
OAuth Will Murder Your Children
Written pieces, talks, and other bits by Zach Holman.
Neat trick for getting private info for Facebook, GMail, Twitter and Digg users
Hidden img and script tags with onload and onerror let any site tell if you're logged into GMail, Facebook, Twitter or Digg. Google called it expected.