151
Investigating TLS Blocking in India
We ran experimental TLS blocking measurements in India
New
The latest blog posts to take off on Hacker News. 612 posts.
152
Cloudflare keeps sending emails over a year after account was cancelled
It has been over a year since I cancelled my Cloudflare account. They keep emailing me and haven't taken me off their marketing lists despite repeated requests. Their CTO told me he would investigate, but nothing changed. Their Data Protection Office hasn't respond to my requests. Cloudflare do not appear to respect…
153
How to properly manage SSH keys for server access
This article was on the hacker news frontpage. You can find the related discussion here. Every developer needs access to some servers for example to check the application logs. Usually, this is done using public-private key encryption where each developer generates their own public-private key pair. The public keys of…
154
155
The fresh smell of ransomed coffee
How a simple coffee maker became a cybersecurity nightmare
156
157
158
Tor Browser 10
Tor Browser 10.0 for Desktop is now available from the Tor Browser download page and also from our distribution directory.
159
160
I asked an online tracking company for all of my data (2018)
It’s 15:10 pm on April 18, 2018. I’m in the Privacy International office, reading a news story on the use of facial recognition in Thailand. On April 20, at 21:10, I clicked on a CNN Money Exclusive on my phone.
161
Moving your SSH port isn’t security by obscurity
I just came across another post on Hacker News talking about why you shouldn’t move your SSH port off of 22 because it’s Security by Obscurity. Ther
162
Let's Encrypt's New Root and Intermediate Certificates
On Thursday, September 3rd, 2020, Let’s Encrypt issued six new certificates: one root, four intermediates, and one cross-sign. These new certificates are part of our larger plan to improve privacy on the web, by making ECDSA end-entity certificates widely available, and by making certificates smaller. Given that we…
163
Revisiting Apple Notes (6): The Protobuf
TL;DR : This post explains portions of two protobufs used by Apple, one for the Note format itself and another for embedded objects. More importantly, it explains how you can figure out the structure of protobufs.
164
How I bypassed Cloudflare's SQL Injection filter
astrocamel, Blog, Portfolio, George Skouroupathis
165
Backdoors and other vulnerabilities in HiSilicon based hardware video encoders
Serious vulnerabilities (including a backdoor) in IPTV/H.264/H.265 video encoders based on HiSilicon hi3520d hardware.
166
The Infosec Apocalypse
The rise of tooling for vulnerability detection combined with pressure driven by Vendor Due Diligence is causing a massive enterprise freezeout for non-mainstream technologies across the board. Of particular concern is the impact this will have on the adoption of functional programming in enterprise and small business…
167
168
When you browse Instagram and find Tony Abbott's passport number
Do not get arrested challenge 2020
169
We View Nikola’s Response as a Tacit Admission of Securities Fraud
Milton should be working with the formerly big 3. He is just another fraud like musk…
170
Tracking users via CSS
I try to be a friendly citizen of the web. I try to keep my site in good shape. It should load quickly, track nothing beyond your basic server logs, not hassle you about cookies, GDPR or my newsletter. I do have a newsletter but it won't pop up in your face here. I try to stay firmly on the side of friendly and a good…
171
Your Phone Is Your Castle
Purism makes premium phones, laptops, mini PCs and servers running free software on PureOS. Purism products respect people's privacy and freedom while protecting their security.
172
Researchers exploit HTTP/2, WPA3 protocols to stage ‘timeless timing’ attacks
We enable the world to secure the web. Burp Suite, the Web Security Academy, and world-leading research from PortSwigger — the AppSec community’s home.
173
Security by obscurity is underrated
Some thoughts about cyber security, technology and life - https://utkusen.com/. Click to read Utku Sen’s Substack, a Substack publication with hundreds of subscribers.
174
Nikola: How to Parlay an Ocean of Lies into a Partnership with GM
Initial Disclosure: After extensive research, we have taken a short position in shares of Nikola Corp. This report represents our opinion, and we encourage every reader to do their own due diligence. Please see our full disclaimer at the bottom of the report.
175
Intercepting Zoom's encrypted data with BPF
How to use Rust and BPF to intercept the data sent and received by programs that use OpenSSL.
176
Letsencrypt, the Good, the Bad and the Ugly
Letsencrypt is a pretty neat concept: free secure certificates for web servers, in order to increase the adoption of HTTPS across the web. The basic idea is that certificates should be free, that the barrier to install them should be as low as possible and that updating certificates should be automated. It protects…
177
More people are searching for an inbox that protects their privacy
Google searches for privacy-focused Gmail alternatives have steadily increased since 2019. We examine the numbers and potential reasons why.
178
ProtonDrive Security Model
Learn how Proton Drive uses end-to-end encryption to protect your photos, documents, and other sensitive data.
179
GDPR Violation: Scribd acquires PII on 500M users in a deal with LinkedIn
TL;DR: If you have a LinkedIn account, you were signed up to SlideShare automatically without your knowledge or consent. Your account including all your personal information will be sold to ScribD …
180
TikTok and WeChat: Curating and controlling global information flows
Curating and controlling global information flows What’s the Problem? While most major international social media networks remain banned from the Chinese market in the People’s Republic of China (PRC), Chinese social media companies are expanding overseas and building up large global audiences. Some of those…