91
A DoS Attack Against the C# Compiler
Generics in C# are certainly very useful and I find it amazing that we almost didn’t get them:
New
The latest blog posts to take off on Hacker News. 616 posts.
92
Parity Wallet security alert
We tell the story of Parity's technical roadmap with regular blogs. Read on to find out the latest on major upgrades that are delivering scalability for the Polkadot ecosystem.
93
LavaRand in Production: The Nitty-Gritty Technical Details
As some of you may know, there's a wall of lava lamps in the lobby of our San Francisco office that we use for cryptography. In this post, we’re going to explore how that works in technical detail.
94
95
Tor's Fall Harvest: The Next Generation of Onion Services
We are hyped to present the next generation of onion services! We've been working on this project non-stop for the past 4 years and we officially launched it two weeks ago by publishing our first alpha releases. All in all, the new system is a well needed improvement that fixes many shortcomings of the old design, and…
96
How Adversarial Attacks Work
Emil Mikhailov is the founder of XIX.ai [http://XIX.ai] (YC W17). Roman Trusov is a researcher at XIX.ai. Recent studies by Google Brain have shown that any machine learning classifier can be tricked to give incorrect predictions, and with a little bit of skill, you can get them to give pretty much any result you…
97
Bypassing Browser Security Warnings with Pseudo Password Fields
It seems that there is no limit to human ingenuity when it comes to working around limitations within one's environment. For example, imagine you genuinely wanted to run a device requiring mains power in the centre of your inflatable pool - you're flat out of luck, right? Wrong! Or
98
99
Yubico announces tiny, cheap YubiHSM 2
Learn more about what's happening within the tech and cybersecurity industry and the developments in our business and security keys within our Yubico Blog.
100
Trusting transferred root certificates
Mozilla’s Root Store Program has taken the position that trust is not automatically transferable between organizations. This is specifically stated in section 8 of our Root Store Policy v2.5, which ...
101
I can no longer recommend MailChimp
MailChimp doesn’t seem to think double opt-in is a good idea for mailing lists anymore.
102
Standalone Signal Desktop
Signal Desktop is now available in a new, standalone form, and the Chrome App has been deprecated.
103
Do you need a VPN?
Early this year, the U.S. Congress rolled back Internet privacy rules, giving service providers free reign to track, store and sell browsing data. In July,
104
Firefox takes a bite out of the canvas ‘super cookie’
The Sophos Blog
105
106
The New York Times Is Now Available as a Tor Onion Service
Updated: March 4, 2025
107
Reasonably Secure Computing in the Decentralized World
Joanna Rutkowska recently gave a presentation titled “Reasonably Secure Computing in the Decentralized World (An Operating System Architect’s Perspective)” at a public event hosted by The Golem Project in Berlin, Germany called “Golem and Friends: Data, Security, Scaling and More….” The...
108
109
Suicide Linux
You know how sometimes if you mistype a filename in Bash, it corrects your spelling and runs the command anyway?* Such as when changing directory, or opening a file. I have an idea: Suicide Linux. Any time - any time - you type any remotely incorrect command, the interpreter cr...
110
111
112
Obscurity Is a Valid Security Layer
Good Obscurity vs. Bad Obscurity Camouflage OPSEC An SSH Example Reducing Impact or Probability Summary Many of us are familiar with a concept know as Security
113
Attack of the week: DUHK
Before we get started, fair warning: this is going to be a post about a fairly absurd (but non-trivial!) attack on cryptographic systems. But that’s ok, because it’s based on a fairly a…
114
Please Stop Writing Secure Messaging Tools (2015)
This is my first Patreon-supported essay, which went out a week early to my $10 and up subscribers. This was written in part in response to issues with the IWMF check-in tool, but it's something I've been concerned about for some time.
115
Welp, there go my Git signatures
Hello! If you already know about the RoCA vulnerability, and you know what I did about it (or you don’t care), then feel free to skip down to the good stuff! Signs of Trouble Monday morning,…
116
Why ProtonMail is more secure than Gmail
Proton Mail is a private email service takes a radically different approach to security. Find out how Proton Mail security compares to Gmail security.
117
118
Please Request Your Personal Data Held by Cambridge Analytica
By now, many people have probably heard about the company Cambridge Analytica . By its own admission, it played a major role in the succes...
119
The First PS4 Kernel Exploit: Adieu
Now we will step back a bit and explain how we managed to jump from the browser process into the kernel such that ps4-kexec et al. are usable.
120
Purism Librem Laptops Completely Disable Intel’s Management Engine
Purism makes premium phones, laptops, mini PCs and servers running free software on PureOS. Purism products respect people's privacy and freedom while protecting their security.