181
I lost my OpenBSD full-disk encryption password
The other day I set up a new OpenBSD instance with a nice RAID array, encrypted with Full Disk Encryption. And promptly proceeded to forget part of the passphrase.
New
The latest blog posts to take off on Hacker News. 578 posts.
182
NSA Hacked French President’s House
“Keith Alexander (Director of the NSA) told me he was disappointed because he never thought we would detect them and he even added: You guys are good.” Bernard Barbier French newspaper …
183
Running a Tor Exit Node for Fun and E-mails
The Tor Project is a non-profit organization in the United States that created Tor, The Onion Router, a free software that creates an open network of volunteers which helps people anonymize their traffic by routing it through three or more other computers before it reaches its final destination.
184
185
EFF to Court: Government Must Inform People That It’s Accessing Their Data
Seattle, Washington—The Electronic Frontier Foundation (EFF) told a federal court today that the government is violating the U.S. Constitution when it fails to notify people that it has accessed or examined their private communications stored by Internet providers in the cloud. EFF is supporting...
186
Linux.Rex.1 – A multifunctional self-replicating Trojan for Linux written in Go
A multifunctional self-replicating Trojan for Linux written in Go. The Trojan implements the ВРЕ protocol to share data with other P2P botnet’s nodes and is launched as a node that receives and processes RPC messages. Probably, this malware program’s modification is still under development because ...
187
Chrome is warning users about insecure pages
First transition in Google's HTTPS-everywhere plans is done
188
WoSign's secret purchase of StartCom: WoSign threatened legal actions
This website is for sale! percya.com is your first and best source for information about percya. Here you will also find topics relating to issues of general interest. We hope you find what you are looking for!
189
190
191
192
193
The Dropbox hack is real
Earlier today, Motherboard reported on what had been rumoured for some time, namely that Dropbox had been hacked [http://motherboard.vice.com/read/hackers-stole-over-60-million-dropbox-accounts] . Not just a little bit hacked and not in that "someone has cobbled together a list of credentials that work
194
Google's login page accepts a vulnerable GET parameter
In hope that public disclosure will encourage Google to fix this, despite refusing to, here goes...
195
Chinese CA WoSign faces revocation after possibly issuing fake certificates
This website is for sale! percya.com is your first and best source for information about percya. Here you will also find topics relating to issues of general interest. We hope you find what you are looking for!
196
CloudFlare, SSL and unhealthy security absolutism
Let's start with a quick quiz: Take a look at haveibeenpwned.com [https://haveibeenpwned.com/] (HIBP) and tell me where the traffic is encrypted between: You see HTTPS which is good so you know it's doing crypto things in your browser, but where's the other end of
197
Hardening Compiler Flags for NixOS
In the past year some Mayflower colleagues have started using and contributing to NixOS, a purely functional GNU/Linux distribution that combines package and configuration management. We decided that we would give it a try in production but stumbled upon some issues that had to be resolved first. We have added new…
198
Hacked: Investigating an Intrusion on My Server
tl;dr I have received a nice “your server is sending spam” email on a Saturday morning, this is what happened next. As a foreword, this server is not holding critical information and his mostly used to host static content and maintain former projects. Basically this is what happens when you leave upgrade undone on…
199
Advanced Deanonymization Attacks
News posted by Whonix staff. The Whonix Blog. Stay Tuned. (rss)
200
The target=“_blank” vulnerability by example
Instagram leaves its users open to a simple phishing attack
201
The NSA Is Hoarding Vulnerabilities
The National Security Agency is lying to us. We know that because data stolen from an NSA server was dumped on the Internet. The agency is hoarding information about security vulnerabilities in the products you use, because it wants to use it to hack others’ computers. Those vulnerabilities aren’t being reported, and…
202
Taking Over DigitalOcean Domains via a Lax Domain Import System
A Hacker's Blog of Unintended Use and Insomnia.
203
HackedThat: Breaking in to a hardened server via the back door
Earlier this summer, the team atInversoft published a comprehensive andsophisticatedguide to user data security. Theguide spans from hardening servers from p...
204
NSO Group's iPhone Zero-Days used against a UAE Human Rights Defender
Ahmed Mansoor was targeted by NSO Group, an Israel-based “cyber war” company that sells Pegasus, a government-exclusive “lawful intercept” spyware product.
205
Why the NSA Dump Isn't from an Insider
Between Lies and Bad Analysis
206
207
208
209
We Shouldn’t Wait Another 15 Years for a Conversation About Government Hacking
With high-profile hacks in the headlines and government officials trying to reopen a long-settled debate about encryption, information security has become a mainstream issue. But we feel that one element of digital security hasn’t received enough critical attention: the role of government in...
210
Bitcoin 0.13.0 Binary Safety Warning
Bitcoin.org has reason to suspect that the binaries for the upcoming Bitcoin Core release will likely be targeted by state sponsored attackers. As a website, Bitcoin.org does not have the technical resources to guarantee that we can defend ourselves from attackers of this calibre. We ask the Bitcoin community, and in…