121
Chromium Blog: A Tale Of Two Pwnies (Part 2)
When we wrapped up our recent Pwnium event, we praised the creativity of the submissions and resolved to provide write-ups on how the two e...
New
The latest blog posts to take off on Hacker News. 233 posts.
122
Researchers Connect Flame to Stuxnet
The Securelist blog houses Kaspersky’s threat intelligence reports, malware research, APT analysis and statistics
123
Lessons learned from cracking 2 million LinkedIn passwords
A community of security professionals discussing IT security and compliance topics and collaborating with peers.
124
Why you should never use hash functions for message authentication
The general thrust of this post is: use a MAC function like HMAC to sign data, don’t use hash functions. Although not all hash functions suffer from the problem I’m going to illustrate, in general using a hash function for message authentication comes with a lot of potential problems because those functions aren’t…
125
One way to fix your rubbish password database
Suppose for a moment that you are running a web site that has a poorly implemented password database that stores password hashes using some...
126
CWI cryptanalist discovers new cryptographic attack in Flame spy malware
Cryptanalyst Marc Stevens from the Centrum Wiskunde & Informatica (CWI) in Amsterdam, known for breaking the https security in 2008 using a cryptanalytic attack on MD5, analyzed the recent Flame virus this week.
127
128
Storing Passwords Securely
Why "SHA 256-bits enterprise-grade password encryption" is only slightly better than storing passwords in plain text, and better ways to do it.
129
Hacking an ATM
At the Black Hat conference in 2010, an ATM designed and built by my employer was setup on stage, and a security researcher demonstrated an ...
130
Gmail security warnings for suspected state-sponsored attacks
Posted by Eric Grosse, VP Security Engineering We are constantly on the lookout for malicious activity on our systems, in particular attem...
131
The Critical Security Flaws that Resulted in Last Friday's Hack
A core value CloudFlare is that security information should be shared between organizations to make the entire Internet safer. That is how CloudFlare's systems work: if one site is attacked, data about that attack is immediately shared with the rest of the network so other sites can be safe.
132
133
Microsoft Certificate used to sign "Flame"
Microsoft Emergency Bulletin: Unauthorized Certificate used in "Flame" , Author: Johannes Ullrich
134
Using Twitter to Build a Password Cracking List - 1978 passwords out of 4400
This is going to be a quick one. We're going to show how to use twitter to build a word list for cracking passwords. We'll use John the Rip...
135
136
Cloudflare Attack Post Mortem; Apparent Google Apps/Gmail Vulnerability
This morning a hacker was able to access a customer's account on CloudFlare and change that customer's DNS records. The attack was the result of a compromise of Google's account security procedures.
137
138
Apple's Crystal Prison and the Future of Open Platforms
Two weeks ago, Steve Wozniak made a public call for Apple to open its platforms for those who wish to tinker, tweak and innovate with their internals. EFF supports Wozniak's position: while Apple's products have many virtues, they are marred by an ugly set of restrictions on what users and...
139
Bogus story: no Chinese backdoor in military chip
Today's big news is that researchers have found proof of Chinese manufacturers putting backdoors in American chips that the military uses. T...
140
Backdoor found in a China-made US military chip
The latest news on hardware security research and achievements
141
Protecting a Laptop from Simple and Sophisticated Attacks
How I secured a ThinkPad: a Windows honeypot with Prey for thieves, TRESOR against cold boot, a USB boot stick for evil maids, and a separate Firefox user.
142
143
144
A Tale of Two Pwnies (Part 1)
Just over two months ago, Chrome sponsored the Pwnium browser hacking competition. We had two fantastic submissions , and successfully bloc...
145
A Git Horror Story: Repository Integrity With Signed Commits
(Note: This article was written at the end of 2012 and is out of date. I will update it at some point, but until then, please keep that in perspective.)
146
147
And the privacy invasion award goes to …
Who’s playing fast and loose with your data? The Big Brother Awards, billed as the “Oscars for data leeches” by the hackers and privacy advocates who hand out the prizes, shine a high-intensity spotlight on companies and individuals with poor privacy track records. Since 1998, Privacy International...
148
"Adobe has released Adobe Photoshop CS6, which addresses these vulnerabilities"
Adobe applies hundreds of security processes and controls to help us comply with industry-accepted standards.
149
New PHP Vulnerability:?-s may expose source code for mod_cgi
PHP is a popular general-purpose scripting language that powers everything from your blog to the most popular websites in the world.
150
Passwords For Your Facebook Account
This is interesting. You can log into your Facebook account using three passwords – one is the main password that you created and the other passwords can…