New
The latest blog posts to take off on Hacker News. 8,778 posts.
Close the Washington Monument
Securing the Washington Monument from terrorism has turned out to be a surprisingly difficult job. The concrete fence around the building protects it from attacking vehicles, but there’s no visually appealing way to house the airport-level security mechanisms the National Park Service has decided are a must for…
Bruce Schneier: Refuse to be terrorized
On Aug. 16, two men were escorted off a plane headed for Manchester, England, because some passengers thought they looked either Asian or Middle Eastern, might have been talking Arabic, wore leather jackets, and looked at their watches—and the passengers refused to fly with them on board. The men were questioned for…
Re-entry to US without backscatter or pat-down
On November 21, 2010, I was allowed to enter the U.S. through an airport security checkpoint without being x-rayed or touched by a TSA officer. This post explains how.
Stuxnet: A Breakthrough
Broadcom Community - VMTN, Mainframe, Symantec, Carbon Black
Changing Passwords
How often should you change your password? I get asked that question a lot, usually by people annoyed at their employer’s or bank’s password expiration policy: people who finally memorized their current password and are realizing they’ll have to write down their new password. How could that possibly be more secure…
Using WolframAlpha to Hack Text CAPTCHA
I’ve been playing around with the Text CAPTCHA demo page and wondered how well WolframAlpha is at logic questions. As it turns out, Wolfram is pretty smart! Although, since a CAPTCHA requir…
The time I hacked my high school
When I was in high school, I started the Chess Club. I needed money to buy chess sets and chess cl...
Protect Your Site with a Blackhole for Bad Bots
Tutorial shows how to setup a blackhole bot trap using PHP in just a few easy steps.
Overclocking SSL
(This is a write up of the talk that I gave at Velocity 2010 last Thursday. This is a joint work of myself, Nagendra Modadugu and Wan-Teh Chang.)
HTTP cookies, or how not to design protocols
For as long as I remember, HTTP cookies have been vilified as a grave threat to the privacy of online browsing. I don't quite agree, but I f...
Firesheep, a day later
Most importantly, I certainly never expected there would be this much attention all at once, and within the first 24 hours.
Securing your ssh server
A social nerd writing about everything
The .ly domain space to be considered unsafe
I would like to warn current and future owners of .ly domains of a concerning incident regarding the deletion of one of our prime domains…