151
New
The latest blog posts to take off on Hacker News. 473 posts.
152
153
154
Exploitable vulnerabilities found in Kaspersky Anti-Virus
Posted by the notorious Tavis Ormandy.We’ve talked before about how we use Google scale to ...
155
Researchers Could Have Uncovered Volkswagen’s Emissions Cheat If Not for DMCA
Automakers argue that it’s unlawful for independent researchers to look at the code that controls vehicles without the manufacturer’s permission. We’ve explained before how this allows manufacturers to prevent competition in the markets for add-on technologies and repair tools. It also makes it harder for watchdogs to…
156
157
158
Improved Digital Certificate Security
Posted by Stephan Somogyi, Security & Privacy PM, and Adam Eijdenberg, Certificate Transparency PM On September 14, around 19:20 GMT, Syma...
159
Popular Chinese iOS apps compromised in malware attack
自2011年以来用技术对抗审查。我们使用AI监控审查并在全球范围内扩大言论自由。
160
161
Candy Japan hit with credit card fraud
What is credit card fraud, how we noticed it and how it impacted our business.
162
163
Disabling SSLv3 and RC4
Posted by Adam Langley, Security Engineer As the previously announced transition to SHA-256 certificates is nearing completion, we are p...
164
165
Our First Certificate Is Now Live
Let’s Encrypt passed another major milestone by issuing our first certificate. You can see it in action here. Our cross signature is not yet in place, however this certificate is fully functional for clients with the ISRG root in their trust store. When we are cross signed, approximately a month from now, our…
166
Tracking a Bluetooth Skimmer Gang in Mexico (Part I)
-Sept. 9, 12:30 p.m. CT, Yucatan Peninsula, Mexico: Halfway down the southbound four-lane highway from Cancun to the ancient ruins in Tulum, traffic inexplicably slowed to a halt. There was some sort of checkpoint ahead by the Mexican Federal Police. I began to wonder whether it was a good idea to have brought along…
167
Reverse engineering an ancient wireless security keypad using RTL-SDR
A few weeks ago, some friends and I decided that our houses weren’t crammed full enough with useless crap and so we embarked on a journey to a large junk shop surplus warehouse. The place was a vast hangar brimming with old and curious pieces of technology ranging from IBM keyboards to VHS video editing …
168
169
Introducing Heroku Private Spaces
As the world becomes more cloud-centric, and more of our apps and business depend on its capabilities, the trust, control and management of cloud services
170
How we cracked millions of Ashley Madison passwords
Not long after the release of the Ashley Madison leaks, many groups and individuals attempted to crack the bcrypt hashes. Since t...
171
TSA Master Keys
Someone recently noticed a Washington Post story on the TSA that originally contained a detailed photograph of all the TSA master keys. It’s now blurred out of the Washington Post story, but the image is still floating around the Internet. The whole thing neatly illustrates one of the main problems with backdoors…
172
173
174
175
176
W^X policy violation affects Windows drivers compiled in VS 2013 and previous
Back in June, I was doing some analysis on a Windows driver and discovered that the INIT section had the read, write, and executable characteristics flags set. Windows executables (drivers included…
177
Tarsnap email confirmation bypass
One consequence of these unsolicited security scans is that — since they feed a variety of inputs to forms, including the account creation form — I see a lot of obviously fake signup attempts (alas, none yet from the world's most obviously fake domain name ). These are harmless, since the signup code sends out a…
178
Safe from what?
What does it mean for a baby monitor to be safe? Some things are clearly essential: It should not explode; it should not release significant quantities of dangerous gasses; if it's designed to be placed within reach of a baby, it should not pose an electrocution or choking hazard. Less obviously, if it has data or…
179
PayPal does not know how to detect fraud
Contact with an owner of tooltrainer.com domain name.
180
Flash-Free Clipboard for the Web
As part of our effort to grow the Web platform and make it accessible to new devices, we are trying to reduce the Web's dependence on Flash. As part of ...