New
The latest blog posts to take off on Hacker News. 135 posts.
Zero-day Flash exploit on all platforms, fix two weeks out
For the complete experience, please enable JavaScript in your browser. Thank you!
Apple's secret "wispr" request
When an Apple iOS device (iPhone, iPad, iPod) connects to a WiFi network, the first thing it does is make a request to the URL http://www.ap...
Careful when hosting 3rd party apps on subdomains, or how I hacked Facebook
In the past few years it has become common for site owners to run 3rd party tools on their site. A good example would be Wordpress or other ...
Three locks for your SSH door
AIX provides the highest level of performance, security, and reliability of any UNIX operating system.
Apple seeking to patent spyware
It looks like Apple, Inc., is exploring a new business opportunity: spyware and what we're calling "traitorware." While users were celebrating the new jailbreaking and unlocking exemptions, Apple was quietly preparing to apply for a patent on technology that, among other things, would allow Apple...
Indian Electronic Voting Researcher Arrested
Updates:8/28Alex Halderman: Indian E-Voting Researcher Freed After Seven Days in Police Custody 8/26Alex Halderman: Indian E-Voting Researcher Remains in Police Custody 8/24Ed Felten: It’s Time for India to Face its E-Voting Problem 8/22Rop Gonggrijp: Hari is in jail :-( About four months ago, Ed Felten blogged about…
EFF to Verizon: Etisalat Certificate Authority Threatens Web Security
EFF will soon be launching the SSL Observatory project, an effort to monitor and secure the cryptographic infrastructure of the World Wide Web. There is much work to be done, and we will need the help of many parties to make the HTTPS-encrypted web genuinely trustworthy. To see why, you can read...
Schneier on UAE to Ban BlackBerrys
The United Arab Emirates—Dubai, etc.—is threatening to ban BlackBerrys because they can’t eavesdrop on them. At the heart of the battle is access to the data transmitted by BlackBerrys. RIM processes the information through a handful of secure Network Operations Centers around the world, meaning that most governments…
PDF exploit in iOS 4
Link to: http://www.loopinsight.com/2010/08/01/jailbreakme-returns-offers-jailbreak-for-iphone-4-and-ipad/
Homoglyph attacks: How to create an internet hoax
For decades, social psychologists have understood that the link between attitudes and conduct is convoluted, if not weak. Both online and offline, this is
Redirect to sslh
My homepage for projects, jokes and bunnies.
I know your name, where you work, and live (Safari v4 & v5)
Update 07.30.2010 : Apple patched Safari ( CVE-ID: CVE-2010-1796 ) Right at the moment a Safari user visits a website, even if they’ve never...
Post from "weev" (AT&T/ipad data hacker) on his arrest and treatment
A while ago, someone came to me and gave me some data involving AT&T iPad customers to publicize, the full story of which I’m sure you’re all familiar with from my previous excellent blog posts. I was subsequently raided by the FBI and arrested , though I have been under gag orders and haven’t been able to discuss the…
It's Your Data, It's Your Bot: It's Not A Crime
Can public websites decide who is and is not a criminal through their terms of service? A brief EFF filed yesterday argues no. The amicus brief is a follow-up to one we filed last month in Facebook v. Power Ventures. Facebook claims that Power breaks California criminal law by offering users a tool...