151
Chinese Infinite Magical Hard-Drive
Chinese Magical Hard-Drive - Thursday, 07 April 2011 - Alex's blog
New
The latest blog posts to take off on Hacker News. 184 posts.
152
OpenSSL memory use in Node.js
Last Thursday I went to the Joyent office for Node Office Hours — I wanted to talk to Isaac about running a private NPM registry .
153
154
What Location Tracking Looks Like
Your cell phone company knows everywhere you go, twenty-four hours a day, every day. How concrete is this fact for you? It's very concrete for Malte Spitz, a German politician and privacy advocate. He used German privacy law — which, like the law of many European countries, gives individuals a...
155
Hacking Twitter's Javascript
New Twitter uses a massive amount of javascript (for a webapp). Nearly 1 Megabyte of minified, obfuscated javascript powers the site's frontend.
156
MySQL.com compromised via (guess what?) SQL injection
MySQL.com (the official site for the MySQL database) was compromised via (shocking!) blind SQL injection. A post was sent today to the full disclosure list…
157
Microsoft Shuts off HTTPS in Hotmail for Over a Dozen Countries
UPDATE (3/26/11): HTTPS is again available for those in the countries discussed below. Microsoft denies deliberately blocking access to HTTPS, blaming the problem on a bug: We are aware of an issue that impacted some Hotmail users trying to enable HTTPS. That issue has now been resolved. Account...
158
Iranian hackers obtain fraudulent HTTPS certificates
On March 15th, an HTTPS/TLS Certificate Authority (CA) was tricked into issuing fraudulent certificates that posed a dire risk to Internet security. Based on currently available information, the incident got close to — but was not quite — an Internet-wide security meltdown. As this post will...
159
160
161
Hidden warning message found in Samsung’s Galaxy tablet
The authoritative information platform for the semiconductor industry. Learn why TechInsights is the most trusted source of actionable, in-depth intelligence to the semiconductor industry.
162
163
164
Bittorrent over Tor isn't a good idea
An increasing number of people are asking us about the recent paper coming out of Inria in...
165
166
Errata: Steve Gibson
a summary of Steven Gibson events and quotes demonstrating charlatan status
167
Advanced sign-in security for your Google account
Insights from Googlers into our products, technology, and the Google culture
168
169
170
171
Electronic Frontier Foundation Uncovers Widespread FBI Intelligence Violations
EFF has uncovered widespread violations stemming from FBI intelligence investigations from 2001 - 2008. In a report released today, EFF documents alarming trends in the Bureau’s intelligence investigation practices, suggesting that FBI intelligence investigations have compromised the civil...
172
How Organized Spam is Taking Control of Google's Search Results
In the past few months, I have been watching a very unsettling trend unfold in very competitive ecommerce search results on Google. It appears that huge amounts of money are put into place to systematically and successfully manipulate highly competitive search terms in order to sell fake…
173
OAuth Will Murder Your Children
Written pieces, talks, and other bits by Zach Holman.
174
Neat trick for getting private info for Facebook, GMail, Twitter and Digg users
Hidden img and script tags with onload and onerror let any site tell if you're logged into GMail, Facebook, Twitter or Digg. Google called it expected.
175
176
Free Wordpress themes coming with a price
There are so many free WordPress themes out there it can put your head in a spin. This post is the one-stop resource for info about free WordPress Themes
177
178
Sony uses DMCA to silence speech that reveals its security flaws
Co-authored by Corynne McSherry and Marcia Hofmann For years, EFF has been warning that the anti-circumvention provisions of the Digital Millennium Copyright Act can be used to chill speech, particularly security research, because legitimate researchers will be afraid to publish their results lest...
179
Tarsnap critical security bug
There's a lot to say about this, and it's entirely possible that I'll miss covering some important points in this post; if I've missed something, please email me or post a comment below and I'll do my best to add the necessary information.
180
I Can Crack Your App With Just A Shell (And How To Stop Me)
Hi, I'm Kenneth. I’m a Swiss transplant in San Francisco. I’m an angel investor, and an engineer at AngelList & CSC. Previously, I was co-founder of FreshPay and the architect behind Chartboost. When I'm not working, you can find me either photographing some remote corner of the world, or hacking away on an…