151
New
The latest blog posts to take off on Hacker News. 233 posts.
152
Olympics 2012: A Bruce Schneier Moment
An east London estate, where 700 people live, has received leaflets saying a "Higher Velocity Missile system" could be placed on a water tower. ...
153
Qwest CEO: NSA Punished Qwest for Refusing to Participate in Illegal Surveillance--Pre-9/11!
When Qwest refused the NSA’s illegal request that it hand over its customers’ data without a warrant, the NSA wasn’t happy. According to former Qwest CEO Joseph Nacchio, the government hit back for the telecom’s refusal by denying them lucrative contracts (log-in required) worth hundreds of...
154
155
How I attacked myself using Google and I ramped up a $1000 bandwidth bill
It all started with an email. From: Amazon Web Services LLC Subject: Review of your AWS Account Estimated Month to Date Billing Charges...
156
157
158
The Twitter "Patent Hack"
Yesterday Twitter announced that they plan to amend the assignments agreements that they sign with their employees. They call this proposed amendment the Innovator's Patent Agreement. I've been aware of this effort inside of Twitter for a while and I like to call this move the "Twitter Patent Hack" because I think…
159
160
161
162
163
Zxcvbn: realistic password strength estimation
Dash knows your context, your team, and your work, so your team can stay organized, easily find and share knowledge, and keep projects secure, all from one place.
164
165
Hotel Wifi JavaScript Injection
So I’m checking my blog on the hotel wifi, like ya do, and I notice something a little off with the style. There’s a dark colored bar at the top of the page that shouldn’t be there. That’s funny. Maybe a recent Firefox update changed how they treat CSS?
166
167
168
Charlie Stross on Girls Around Me
There is an app, currently on the Apple app store as a free download, called Girls Around Me .
169
#1 CSRF Is A Vulnerability In All Browsers
Navigation: #1 CSRF Is A Vulnerability In All Browsers - You MUST Deny It ASAP. #2 top secret(will be published on April 1) #3 Another Ra...
170
Chrome addons hacking: Bye Bye AdBlock filters
Continuing the Chrome extension hacking (see part 1 and 2), this time I'd like to draw you attention to the oh-so-popular AdBlock extension. It has over a million users, is being actively maintained and is a piece of a great software (heck, even I use it!). However - due to how Chrome extensions work in general it is…
171
172
Schneier removed from TSA oversight meeting at TSA request
I was supposed to testify today about the TSA in front of the House Committee on Oversight and Government Reform. I was informally invited a couple of weeks ago, and formally invited last Tuesday: The hearing will examine the successes and challenges associated with Advanced Imaging Technology (AIT), the Screening of…
173
174
175
Random Number Bug in Debian Linux
This is a big deal: On May 13th, 2008 the Debian project announced that Luciano Bello found an interesting vulnerability in the OpenSSL package they were distributing. The bug in question was caused by the removal of the following line of code from md_rand.c MD_Update(&m,buf,j); [ .. ] MD_Update(&m,buf,j); /* purify…
176
Run your own CTF: Stripe publishes VM images
Online payment processing for internet businesses. Stripe is a suite of payment APIs that powers commerce for businesses of all sizes.
177
Cybersecurity Bill Broad Enough to Use Against WikiLeaks and The Pirate Bay
Congress is doing it again: they’re proposing overbroad regulations that could have dire consequences for our Internet ecology. The Cyber Intelligence Sharing and Protection Act of 2011 (H.R. 3523), introduced by Rep. Mike Rogers and Rep. Dutch Ruppersberger, allows companies or the government[fn]...
178
Don't use bcrypt
(Edit: Some numbers for you people who like numbers) If you're already using bcrypt, relax, you're fine, probably. However, if you're ...
179
180
