91
Confidant: an open-source secret management service
I’m pleased to announce the initial open source release of Confidant, a secret management service for AWS users, built by engineers at…
New
The latest blog posts to take off on Hacker News. 473 posts.
92
From kafkatrap to honeytrap
The short version is: if you are any kind of open-source leader or senior figure who is male, do not be alone with any female, ever, at a technical conference. Try to avoid even being alone , ever, because there is a chance that a “women in tech” advocacy group is going to try to collect your scalp.
93
Introducing 1Password for Teams
The ultimate password keeper for business, 1Password simplifies team security. Secure your company's data with our business password vault.
94
Signal for Android: RedPhone and TextSecure in one app
Today we’ve started rolling out Signal for Android, which unites simple private messaging and simple private calling into a single app on Android. This is the culmination of our effort to combine TextSecure and RedPhone into one app, which we began on iPhone and are now bringing to completion on ...
95
CSS Based Attack fontface
In this post, I would like to share about new CSS based attack with unicode-range descriptor of @font-face rule . Using this technique, an...
96
Fuzzing FFmpeg for fun and profit
One of the great things about having rack-space in our new office is that we can now support open source projects using our equipment such as FFmpeg and Libav. They are critical parts of our software as well as underpin much of multimedia processing in the world today.
97
Your own Debian Mail Server (part II): how to prove you are not a spammer
TL;DR: check mail-tester.com or Spam Checker. If you don't get 10/10, read this post. In a previous post, we saw how to configure a Debian mail server with Postfix and Dovecot, but we did not address an important issue: spam. Major e-mail providers are defending their users …
98
Breaches, traders, plain text passwords, ethical disclosure and 000webhost
It’s a bit hard to even know where to begin with this one, perhaps at the start and then I’ll try and piece all the bits together as best I can. As you may already know if you’re familiar with this blog, I run the service Have
99
Tor Messenger Beta: Chat Over Tor, Easily
WARNING STARTS As of March 2018, Tor Messenger is no longer maintained and you should NOT use...
100
What Happens When You Enter the Witness Protection Program?
The history of the Witness Protection Program is full of Hollywood-worthy intrigue. It also challenges our assumptions about crime and identity.
101
Sustaining Digital Certificate Security
Posted by Ryan Sleevi, Software Engineer This post updates our previous notification of a misissued certificate for google.com Followin...
102
Copy-Pasting URLs from Google Search Can Leak Previous Searches
Note: This information has been disclosed to Google appropriately, they have chosen to not fix this behavior.
103
Onion names reserved by the IETF
The Internet Engineering Task Force (IETF), the body that sets standards for the Internet, has...
104
CISA passes Senate
CISA passed the Senate today in a 74-21 vote. The bill is fundamentally flawed due to its broad immunity clauses, vague definitions, and aggressive spying authorities. The bill now moves to a conference committee despite its inability to address problems that caused recent highly publicized...
105
Intel x86 considered harmful – survey of attacks against x86 over last 10 years
Back in summer I have read a new bookpublished by one of the core Intel architects about the Management Engine (ME).I didn’t quite like what I read there. In...
106
107
108
Stop forcing arbitrary password rules
Arbitrary password rules are a vain attempt to increase security by forcing unnecessary complexity
109
OAuth Has Ruined Everything
Save time building sleek web, mobile and desktop apps with professional .NET UI Components, JavaScript UI Libraries, Reporting and Automated Testing solutions.
110
A riddle wrapped in a curve
If you’re looking for a nice dose of crypto conspiracy theorizing and want to read a paper by some very knowledgeable cryptographers, I have just the paper for you. Titled “A Riddle Wrapped in an E…
111
112
The Collapse of the US-EU Safe Harbor
When people who care about technology look back at the year 2015, they will remember October as the month when the EU-U.S. Safe Harbor collapsed. An international legal agreement that has been in place for 15 years was invalidated in a single day. On Oct. 6, the Court of Justice of the European Union struck...
113
BoringSSL
We recently switched Google's two billion line repository over to BoringSSL , our fork of OpenSSL . This means that BoringSSL is now powering Chromium (on nearly all platforms), Android M and Google's production services. For the first time, the majority of Google's products are sharing a single TLS stack and making…
114
Let's Encrypt is Trusted
We’re pleased to announce that we’ve received cross-signatures from IdenTrust, which means that our certificates are now trusted by all major browsers. This is a significant milestone since it means that visitors to websites using Let’s Encrypt certificates can enjoy a secure browsing experience with no special…
115
116
117
118
1Password Leaks Your Data
Seriously.
119
120
How to Protect Yourself from NSA Attacks on 1024-bit DH
In a post on Wednesday, researchers Alex Halderman and Nadia Heninger presented compelling research suggesting that the NSA has developed the capability to decrypt a large number of HTTPS, SSH, and VPN connections using an attack on common implementations of the Diffie-Hellman key exchange...