181
New
The latest blog posts to take off on Hacker News. 431 posts.
182
Restoring Trust in Government and the Internet
In July 2012, responding to allegations that the video-chat service Skype—owned by Microsoft—was changing its protocols to make it possible for the government to eavesdrop on users, Corporate Vice President Mark Gillett took to the company’s blog to deny it. Turns out that wasn’t quite true. Or at least he—or the…
183
EFF: "Parallel construction" is really intelligence laundering
UPDATE: Add the IRS to the list of federal agencies obtaining information from NSA surveillance. Reuters reports that the IRS got intelligence tips from DEA's secret unit (SOD) and were also told to cover up the source of that information by coming up with their own independent leads to recreate...
184
PuTTY 0.63 released, fixing four security holes
Home | FAQ | Feedback | Licence | Updates | Mirrors | Keys | Links | Team Download: Stable · Snapshot | Docs | Privacy | Changes | Wishlist
185
Play Framework Security Advisory
Play Framework - The High Velocity Web Framework For Java and Scala
186
Security advisory: Breach and Django
Posted by Jacob Kaplan-Moss on Aug. 6, 2013
187
188
189
Computer scientists develop 'mathematical jigsaw puzzles' to encrypt software
The "software obfuscation" system encrypts software so that it only allows someone to use a program as intended while preventing any deciphering of the code behind it.
190
Xerox scanners and photocopiers randomly alter numbers in scanned documents
Xerox scanners/photocopiers randomly alter numbers in scanned documents Please see the “condensed time line” section (the next one) for a time line of how the Xerox saga unfolded. It for example depicts that I did not push the thing to the public right away, but gave Xerox a lot of time before I did so. <iframe…
191
192
193
Hard drive hack provides root access, even after reinstall
Apart from this article, I also gave a talk at OHM2013 about this subject. The video of that talk (minus the first few minutes) is now online .
194
195
196
Everything you wanted to know about SQL injection (but were afraid to ask)
This content is now available in the Pluralsight course "Ethical Hacking: SQL Injection" [http://www.pluralsight.com/courses/ethical-hacking-sql-injection]Put on your black hats folks, it’s time to learn some genuinely interesting things about SQL injection. Now remember – y’all play nice with the bits and
197
Multiple banking IP addresses hijacked
BGP multiple banking addresses hijacked, Author: Adrien de Beaupre
198
Mail from the (Velvet) Cybercrime Underground
Over the past six months, “fans” of this Web site and its author have shown their affection in some curious ways. One called in a phony hostage situation that resulted in a dozen heavily armed police surrounding my home . Another opened a $20,000 new line of credit in my name. Others sent more than $1,000 in bogus…
199
200
Lifetimes of cryptographic hash functions
Quick summary of my recommendations on compare-by-hash: If you are using compare-by-hash to generate addresses for data that can be supplied by malicious users, you should have a plan to migrate to a new hash every few years. For example, BitTorrent falls into this category, but rsync doesn't. Keep in mind that new…
201
202
Chromecast: Exploiting the Newest Device By Google
On Wednesday, July 24th Google launched the Chromecast. As soon as the source code hit we began our audit. Within a short period of time we had multiple items to look at for when our devices arrived. Then we received our Chromecasts the following day and were able to confirm that one of the bugs existed in the build…
203
204
Sleepwalking into censorship
The essential detail is that they will assume you want filters enabled across a wide range of content, and unless you un-tick the option, network filters will be enabled.
205
Applied Cryptography Engineering
Applied Cryptography taught two generations of developers what they know about crypto, and it is a dreadful instruction manual. The book to replace it with, and what you still have to learn after.
206
GPGMail 2 is finally here
GPG Mail 8 beta for macOS Golden Gate. Read the latest status, installation instructions, known issues and support plan information.
207
Android Bug Superior to Master Key
Assuming you enjoy this article, I encourage you to read the next one in the series: Yet Another Android Master Key Bug .
208
As Feds Demand the Keys, Preparing for the Death of Public-Key Encryption
With further confirmation of the longstanding rumor that the U.S. government (and, we can safely assume, other governments around the world) have been pressuring major Internet firms to provide their "master" SSL keys for government surveillance purposes, we are rapidly approaching a critical technological crossroad.
209
How HTTPS Stops Attackers: What Every Web Dev Should Know
Hartley writes about full stack software engineering and AI-driven software development.
210
