New
The latest blog posts to take off on Hacker News. 184 posts.
1 Database Containing 35,000,000 Google Profiles. Implications?
UPDATE 2012-02-16: raver1975 released a SQL database w/35M Google Profiles as .torrent on The Pirate Bay. UPDATE 2011-06-10: Central question in the Google discussion is whether mass-aggregation of profile data…
Repairing Corrupted ZIP Files by Brute Force Scanning in C
My brother is a wonderful photographer , and took 14 gigabytes of photos at my recent graduation from Columbia, some of which I hope to post on PhotoFloat -- my web 2.0 photo gallery done right via static JSON & dynamic javascript .
EFF: Apple Should Stand Up and Defend Its Developers
Update II: Apparently not frightened off by Apple's letter defending its developers, Lodsys went ahead and sued at least seven developers in the Eastern District of Texas for patent infringement. In its original cease-and-desist letters, Lodsys gave developers 21 days to respond. But – apparently...
FBI: If We Told You . . . (Part II)
Yesterday, we posted a troubling explanation from the FBI of why it doesn’t want you to know whether your phone and internet providers are cooperating in the most expansive surveillance program that Congress has ever enacted: You might sue.
The Final Answer For What To Do To Prevent Piracy [of Indie Games]
(For some reason, Blogger deleted this post. I have recreated it. Sorry for any comments that were lost.) This article is my decisive sta...
Google Chrome Hacked?
VUPEN Security provides vulnerability management and intelligence solutions (advisories, analysis, exploits).
Schneier: The Dishonest Minority: Security and its Role in Modern Society
Three months ago, I announced that I was writing a book on why security exists in human societies. This is basically the book’s thesis statement: All complex systems contain parasites. In any system of cooperative behavior, an uncooperative strategy will be effective—and the system will tolerate the uncooperatives—as…
LastPass Disclosure Shows Why We Can't Have Nice Things
Response to the media's hysteria surrounding LastPass' responsible security warning.
FBI chastened by court for lying about existence of surveillance records
An order from the U.S. District Court for the Central District of California has revealed the FBI lied to the court about the existence of records requested under the Freedom of Information Act (FOIA), taking the position that FOIA allows it to withhold information from the court whenever it thinks...
DHS asks Mozilla to take down MafiaaFire add-on
From time to time, we receive government requests for information, usually market information and occasionally subpoenas. Recently the US Department of Homeland Security contacted Mozilla and reque…
Public key pinning coming in Chrome 13
Starting with Chrome 13, we'll have HTTPS pins for most Google properties. This means that certificate chains for, say, https://www.google.com , must include a whitelisted public key. It's a fatal error otherwise. Credit goes to my colleague, Chris Evans, for much of this.
De-anonymizing Apple UDIDs with OpenFeint
Every iPhone, iPad and iPod touch has an associated Unique Device Identifier (UDID). You can think of the UDID as a serial number burned into the device - one that can't be removed or changed 1 . This number is exposed to app developers through an API, without requiring the device owner's permission or knowledge.
Tor project decides to fork Firefox
In a random bar about two years ago, a Google Chrome developer asked me why Torbutton didn't...
Google's Backdoor Access System into Gmail Accounts
Google made headlines when it went public with the fact that Chinese hackers had penetrated some of its services, such as Gmail, in a politically motivated attempt at intelligence gathering. The news here isn’t that Chinese hackers engage in these activities or that their attempts are technically sophisticated—we knew…
Rootkit on a Brand new Toshiba laptop
Rootkit on a brand new Toshiba Laptop - Saturday, 30 April 2011 - Alex's blog
Dropbox Lack of Security
Miguel de Icaza's Blog
Why the password "this is fun" is 10 times more secure than "J4fS!2"
Baekdal is your premium site for media reports and trend analysis. Subscribe from €7.55/month
How Dropbox sacrifices user privacy for cost savings
Note: This flaw is different than the authentication flaw in Dropbox that Derek Newton recently published . Summary Dropbox , the popular cl...