61
$300k for Cracking Telegram Encryption
$300,000 for cracking #Telegram encryption
New
The latest blog posts to take off on Hacker News. 391 posts.
62
Verizon Injecting Perma-Cookies to Track Mobile Customers, Bypassing Privacy Controls
Verizon users might want to start looking for another provider. In an effort to better serve advertisers, Verizon Wireless has been silently modifying its users' web traffic on its network to inject a cookie-like tracker. This tracker, included in an HTTP header called X-UIDH, is sent to every...
63
How I created two images with the same MD5 hash
I posted the following images the other day which although looking totally different have exactly the same MD5 hash ( e06723d4961a0a3f950e...
64
New NSA Documents Shine More Light into Black Box of Executive Order 12333
What is arguably the most powerful of the U.S. government’s surveillance authorities is also the most secretive, and it operates with the least amount of oversight.
65
66
67
I’m Terrified of My New TV
From facial recognition to personal data collection, this thing is downright scary -- and so are the implications.
68
69
Government Authority Intended for Terrorism is Used for Other Purposes
The Patriot Act continues to wreak its havoc on civil liberties. Section 213 was included in the Patriot Act over the protests of privacy advocates and granted law enforcement the power to conduct a search while delaying notice to the suspect of the search. Known as a “sneak and peek” warrant, law...
70
71
Don't run 'strings' on untrusted files
Many shell users, and certainly most of the people working in computer forensics or other fields of information security, have a habit of ru...
72
How Verizon's Advertising Header Works
Over the past couple of days, there’s been an outpouring of concern about Verizon’s advertising practices. Verizon Wireless is injecting a unique identifier into web requests, as data transits the network. On my phone, for example, here’s the extra HTTP header. 1
73
Hey Paypal, why do you need access to my microphone, camera and photos?
Who actually checks the permissions of applications they’re installing? A little while ago a Paypal update stalled because it required extra permissions. This is what happens if an app you have already installed wants more power. I was more than a little surprised with what I found.
74
Why Samsung Knox Isn't Really a Fort Knox
UPDATE #2: Apparently Samsung said in their press release that user should try out My Knox, as Knox Personal is deprecated. I just tried t...
75
The Case of the Modified Binaries
SUMMARY After creating and using a new exitmap module, I found downloaded binaries being patched through a Tor exit node in Russia. Tor is a wonderful tool for protecting the identity of journalists, their sources, and even regular users around the world; however, anonymity does
76
EFF Relaunches Surveillance Self-Defense Guide
We’re thrilled to announce the relaunch of Surveillance Self-Defense (SSD), our guide to defending yourself and your friends from digital surveillance by using encryption tools and developing appropriate privacy and security practices. The site launches today in English, Arabic, and Spanish, with...
77
New AWS Directory Service
Virtually every organization uses a directory service such as Active Directory to allow computers to join domains, list and authenticate users, and to locate and connect to printers, and other network services including SQL Server databases. A centralized directory reduces the amount of administrative work that must…
78
Troubling Arguments from the Government in Smith v. Obama
We’ve filed our reply brief in the appeal of Smith v. Obama, our case challenging the NSA’s mass telephone records collection on behalf of Idaho nurse Anna Smith. The case will be argued before the Ninth Circuit Court of Appeal on December 8, 2014 in Seattle, and the public is welcome to attend....
79
Strengthening 2-Step Verification with Security Key
2-Step Verification offers a strong extra layer of protection for Google Accounts. Once enabled, you’re asked for a verification code from...
80
China collecting Apple iCloud data
Fighting censorship with technology since 2011. We use AI to monitor censorship and expand free speech worldwide.
81
FFS SSL
wingolog: article: ffs ssl
82
Tor Browser 4.0 is released
Update (Oct 22 13:15 UTC): Windows users that are affected by Tor Browser crashes might try to...
83
Docker 1.3 is out
Docker is a founding member of the Blueprint Alliance, a 12-company reference architecture for securing AI agents, built around four governance questions.
84
Drupal 7 SQL Injection Vulnerability
SektionEins GmbH www.sektioneins.de -= Security Advisory =- Advisory: Drupal - pre Auth SQL Injection Vulnerability Release Date: 2014/10/15 Last
85
86
87
Passwordless authentication: Secure, simple, and fast to deploy
Passwordless is an authentication middleware for Node.js that improves security for your users while being fast and easy to deploy. The last months were very exciting for everyone interested in ...
88
89
90
This POODLE bites: exploiting the SSL 3.0 fallback
Today we are publishing details of a vulnerability in the design of SSL version 3.0. This vulnerability allows the plaintext of secure conn...