151
New
The latest blog posts to take off on Hacker News. 431 posts.
152
Detaining David Miranda
Last Sunday, David Miranda was detained while changing planes at London Heathrow Airport by British authorities for nine hours under a controversial British law—the maximum time allowable without making an arrest. There has been much made of the fact that he’s the partner of Glenn Greenwald, the Guardian reporter whom…
153
Deterministic Builds Part One: Cyberwar and Global Compromise
I've spent the past few months developing a new build system for the 3.0 series of the Tor...
154
TextSecure: Forward secrecy for asynchronous messages
Traditionally, asynchronous messaging systems such as email have relied on protocols like PGP or S/MIME for cryptographic security. These protocols work the way most people are familiar with: one who wishes to receive encrypted email advertises a public key, and those wishing to send encrypted e...
155
Court Opinion Finding NSA Surveillance Unconstitutional to be released
Update: In response to EFF's FOIA lawsuit, the government has released the 2011 FISA court opinion ruling some NSA surveillance unconstitutional. For over a year, EFF has been fighting the government in federal court to force the public release of an 86-page opinion of the secret Foreign...
156
Containers and Docker: how secure are they?
Docker is a founding member of the Blueprint Alliance, a 12-company reference architecture for securing AI agents, built around four governance questions.
157
The NSA: ‘The Abyss from Which There Is No Return’
The Rutherford Institute, a nonprofit civil liberties organization based in Charlottesville, Va.
158
Two-Factor Authentication and the Police State
In Britain - and many other countries - the police can legally force you to divulge your passwords. Whether it's to an encrypted file, a social network, or your email account, the state can legally rifle through your most intimate thoughts and (potentially) pose as you online. As we've recently seen, this can be done…
159
160
UK Authorities Destroy Guardian's Hard Drives
Fresh off the news that UK authorities detained the partner of Guardian journalist Glenn Greenwald for nine hours yesterday, Guardian editor-in-chief Alan Rusbridger has published an extraordinary report of government pressure and intimidation that should send chills down the spine of anyone who cares about a free…
161
Node.js incorrectly parses HTTP methods
One who writes code
162
163
164
Facebook vulnerability 2013
Click here to share This article on facebook Facebook Exploit [ post to facebook users even they are not in friend...
165
Introducing FuzzDB
FuzzDB is an open source database of attack patterns, predictable resource names, regex patterns for identifying interesting server responses, and documentation resources. It's most often used testing the security of ...
166
Edward Snowden and Gen Y: a sign of leaks to come?
(Before I begin: there are participants in the discourse who would say that we're supposed to natter on about Edward Snowden , and not the contents of his disclosures, because turning it into a personal issue rather than a political one is useful to the machineries of state. But the point I'm about to make here is…
167
The NSA is Commandeering the Internet
It turns out that the NSA’s domestic and world-wide surveillance apparatus is even more extensive than we thought. Bluntly: The government has commandeered the Internet. Most of the largest Internet companies provide information to the NSA, betraying their users. Some, as we’ve learned, fight and lose. Others…
168
UK courts have not been forthcoming with access to website blocking orders
A few weeks ago, ORG published the website 451unavailable.
169
Google confirms Java and OpenSSL crypto PRNG on Android are broken
News and insights on the Android platform, developer tools, and events.
170
Deceptions, Misinformation, and Word Games Used to Mislead About Surveillance
It’s been two months since President Barack Obama first said that he welcomes a debate about NSA surveillance, which he once again reiterated last week at his press conference. Unfortunately, it’s very hard to have a real debate about a subject when the administration constantly and intentionally...
171
Hacking the OS X Kernel for Fun and Profiles
My last post described how user-level CPU profilers work, and specifically how Google’s pprof profiler gathers its CPU profiles with the help of the operating system. The specific feature needed from the operating system is the profiling timer provided by setitimer (2) and the SIGPROF signals that it delivers.
172
PingFS
shysecurity blog
173
Google Fiber Continues Awful ISP Tradition of Banning “Servers”
Update (10/16/2013): Google Fiber has made a change to their Acceptable Use Policy that clarifies that some non-commercial uses for running servers are permitted. We applaud Google for making this change, but note that there are still provisions to take issue with in the policy, such as the...
174
Hacking Transcend WiFi SD Cards
UPDATE : This post has been featured in the Hacker News front page! Thanks! I have also updated this post with additional information (at t...
175
Android RNG Weakness Renders Bitcoin Wallets Insecure
We recently learned that a component of Android responsible for generating secure random numbers contains critical weaknesses , that render all Android wallets generated to date vulnerable to theft. Because the problem lies with Android itself, this problem will affect you if you have a wallet generated by any Android…
176
The Factoring Cryptopocalypse
The key detail to understand about the work in the Joux papers is that it is limited to solving discrete logarithm problems over fields of small characteristic . As interesting as the work is, mathematically, it should not be a great surprise to cryptographers: We've known for over a decade that small-characteristic…
177
178
Open Source Backdoor – Copyrighted Under GNU GPL
Malware code can be very small, and the impact can be very severe! In our daily tasks we find a lot of web-based malware that…
179
180