New
The latest blog posts to take off on Hacker News. 184 posts.
"Schneier's Law"
Back in 1998, I wrote: Anyone, from the most clueless amateur to the best cryptographer, can create an algorithm that he himself can’t break. In 2004, Cory Doctorow called this Schneier’s law: …what I think of as Schneier’s Law: “any person can invent a security system so clever that she or he can’t think of how to…
Yet Another "People Plug in Strange USB Sticks" Story
I’m really getting tired of stories like this: Computer disks and USB sticks were dropped in parking lots of government buildings and private contractors, and 60% of the people who picked them up plugged the devices into office computers. And if the drive or CD had an official logo on it, 90% were installed. Of course…
EFF: forced disclosure of encryption password violates 5th Amendment
San Francisco - The Electronic Frontier Foundation (EFF) urged a federal court in Colorado today to block the government's attempt to force a woman to enter a password into an encrypted laptop, arguing in an amicus brief that it would violate her Fifth Amendment privilege against self-incrimination...
Electronic Arts Hates Strong Passwords
EA does not allow passwords longer than 16 characters or passwords that contain symbols. However passwords like cool, pass and love are totally acceptable.
OS X – Safe, yet horribly insecure
Introduction I have had this article planned since the end of 2009 and have had it as a skeleton since then. I wanted to point out the many problems with OS X security and debunk the baseless myth …
House Keys copyable from 200 ft away via camera
 UC San Diego computer scientists have built a software program that can perform key duplication without having the key. Instead, the computer scientists only need a photograph of the key.
DOM Snitch: Google's passive in-the-browser reconnaissance tool
By Radoslav Vasilev from Google Zurich Every day modern web applications are becoming increasingly sophisticated, and as their complexity ...
Dropbox Cofounder & CTO Arash Ferdowsi responds to yesterday's bug
Modern work can be frustrating and chaotic—if you don’t have the right tools. From context engineering to multimodal search, go behind the scenes and hear how Dropbox engineers are building AI that actually understands you, so you can focus on the work that matters most.
A possible flaw in open-source bcrypt implementations
[NOTE: See updates below and here .] I'm working on an application that requires a secure password hash. The state of the art is Colin Perc...
My Email Canary
Despite the fact that I use really long passwords and two-factor authentication wherever it's available I still worry that someone might b...
Anonymous message to NATO
Greetings, members of NATO. We are Anonymous. In a recent publication, you have singled out Anonymous as a threat to “government and th...
A brief Sony password analysis
So the Sony saga continues. As if the whole thing about 77 million breached PlayStation Network accounts [http://www.theage.com.au/digital-life/games/playstation-privacy-breach-77-million-customer-accounts-exposed-20110427-1dvhf.html] wasn’t bad enough, numerous other security breaches…
Sony Music Brazil hacked
I hate to pick on Sony, but they got hacked again (and no, I am not talking about the Lulzsec + sonypictures, this is another…
Google uncovers major account-hijacking campaign targeting senior US officials
Insights from Googlers into our products, technology, and the Google culture