8611
Homoglyph attacks: How to create an internet hoax
For decades, social psychologists have understood that the link between attitudes and conduct is convoluted, if not weak. Both online and offline, this is
New
The latest blog posts to take off on Hacker News. 8,778 posts.
8612
Redirect to sslh
My homepage for projects, jokes and bunnies.
8613
8614
I know your name, where you work, and live (Safari v4 & v5)
Update 07.30.2010 : Apple patched Safari ( CVE-ID: CVE-2010-1796 ) Right at the moment a Safari user visits a website, even if they’ve never...
8615
8616
8617
Post from "weev" (AT&T/ipad data hacker) on his arrest and treatment
A while ago, someone came to me and gave me some data involving AT&T iPad customers to publicize, the full story of which I’m sure you’re all familiar with from my previous excellent blog posts. I was subsequently raided by the FBI and arrested , though I have been under gag orders and haven’t been able to discuss the…
8618
8619
It's Your Data, It's Your Bot: It's Not A Crime
Can public websites decide who is and is not a criminal through their terms of service? A brief EFF filed yesterday argues no. The amicus brief is a follow-up to one we filed last month in Facebook v. Power Ventures. Facebook claims that Power breaks California criminal law by offering users a tool...
8620
Facebook's DKIM RSA key should be crackable
If Facebook sends you a mail they will sign it using DKIM . Here are the headers from a mail I received the other day: DKIM-Signature: v=1...
8621
Schneier on Filming the Police
In at least three U.S. states, it is illegal to film an active duty policeman: The legal justification for arresting the “shooter” rests on existing wiretapping or eavesdropping laws, with statutes against obstructing law enforcement sometimes cited. Illinois, Massachusetts, and Maryland are among the 12 states in…
8622
New Adobe Flash 0day, have a nice weekend
For the complete experience, please enable JavaScript in your browser. Thank you!
8623
8624
8625
A new type of phishing attack. Works on savvy users.
In essence, a phishing attack is a kind of hack used by cybercriminals to trick victims into performing a certain activity. These emails are frequently sent
8626
Don't Talk to the Cops
Don't talk to the cops about any significant crime ...ESPECIALLY if you're innocent. Here's why.
8627
8628
DuckDuckGo Searches Are Not Anonymous
DuckDuckGo didn't log IPs, but favicons loaded from Amazon S3 leaked every search term in the Referer header. It was fixed two days after I posted.
8629
Microsoft patent trolls Salesforce
Microsoft has filed suit against Salesforce for infringing the following patent: Method and system for mapping between logical data and physical data System and method for providing and displaying a web page having an embedded menu Method and system for stacking toolbars in a computer display Aut…
8630
Worst-Case Thinking
At a security conference recently, the moderator asked the panel of distinguished cybersecurity leaders what their nightmare scenario was. The answers were the predictable array of large-scale attacks: against our communications infrastructure, against the power grid, against the financial system, in combination with…
8631
8632
Facebook leaks user's IP addresses
Actually this is a common method of combatting spam, all of the various spam providers will block facebook as a whole if they don't include this information, which would obviously be a devastating annoyance. Go and send an e-mail from hotmail, or any kind of mailserver.. normal e-mail client, gmail, etc.. and you will…
8633
The Evolution of Privacy on Facebook
Facebook is a great service. I have a profile , and so does nearly everyone I know under the age of 60.
8634
EFF vs. Facebook: Part 2: "Facebook's Connections"
"Connections." It's an innocent-sounding word. But it's at the heart of some of the worst of Facebook's recent changes.Facebook first announced Connections a few weeks ago, and EFF quickly wrote at length about the problems they created. Basically, Facebook has transformed substantial personal...
8635
Why Aren't There More Terrorist Attacks?
As the details of the Times Square car bomb attempt emerge in the wake of Faisal Shahzad’s arrest Monday night, one thing has already been made clear: Terrorism is fairly easy. All you need is a gun or a bomb, and a crowded target. Guns are easy to buy. Bombs are easy to make. Crowded targets—not only in New York, but…
8636
The Security Mindset
Uncle Milton Industries has been selling ant farms to children since 1956. Some years ago, I remember opening one up with a friend. There were no actual ants included in the box. Instead, there was a card that you filled in with your address, and the company would mail you some ants. My friend expressed surprise that…
8637
Fun with your bank's secret questions & answers
My new bank, Ally Bank , configures a security question and answer for customer service calls. In addition to your SSN, date of birth, and mother's maiden name they also ask you the question you specify and wait for the answer you've provided. This is good, because many standard questions are…
8638
8639
Deceiving Users with the Facebook Like Button
Facebook just launched a super-easy widget called "The Facebook Like Button". Website owners can add a simple iframe snippet to their html, enabling a nice "Like" button with a count of other people's "Likes" and a list of faces of people if any of them are your friends. The advantage of this new tool is that you…
8640