New
The latest blog posts to take off on Hacker News. 612 posts.
We didn't encrypt your password, we hashed it
You've possibly just found out you're in a data breach. The organisation involved may have contacted you and advised your password was exposed but fortunately, they encrypted it. But you should change it anyway. Huh? Isn't the whole point of encryption that it protects data when exposed
Threema Goes Open Source
Threema Goes Open Source, Welcomes New Partner
They told you not to reply (2008)
Breaking news, live coverage, investigations, analysis, video, photos and opinions from The Washington Post. Subscribe for the latest on U.S. and international news, politics, business, technology, climate change, health and wellness, sports, science, weather, lifestyle and more.
The joys of owning an ‘OG’ email account
When you own a short email address at a popular email provider, you are bound to get gobs of spam, and more than a few alerts about random people trying to seize control over the account. If your account name is short and desirable enough, this kind of activity can make the account less reliable for day-to-day…
TSA tries out another biometric system
Today the Transportation Security Administration (TSA) announced that it has launched a “pilot” at Washington National Airport (DCA) of yet another scheme for biometric identification and tracking of domestic air travelers.
Why I Actively Discourage Online Tooling like jwt.io and Online JSON Validators
Why you should be opting for local tooling when working with sensitive data, even Non-Production ones.
New Federal Court Rulings Find Geofence Warrants Unconstitutional
Update December 14, 2021: After this post was published, on June 4, 2021, a federal magistrate judge in Kansas issued another opinion denying the government's application for a geofence warrant.Update May 17, 2021: Since this post was published, the court unsealed its July 24, 2020 opinion denying...
Why Privacy Matters
MABAR69 merupakan situs judi online yang menawarkan permainan terlengkap seperti slot online, poker online, bola online, tembak ikan, sabung ayam dan casino online.
A grim outlook on the future of browser add-ons
Mozilla limiting users’ choice to 9 add-ons on mobile is only the latest development. Add-on support is degrading across all browsers and will continue to do so.
So you want to roll your own crypto?
A coworker of mine asked: How are people supposed to learn (from mistakes) if they don't roll their own crypto? The short answer is do roll ...
Sendgrid under siege from hacked accounts
Email service provider Sendgrid is grappling with an unusually large number of customer accounts whose passwords have been cracked, sold to spammers, and abused for sending phishing and email malware attacks. Sendgrid’s parent company Twilio says it is working on a plan to require multi-factor authentication for all…
Why I’m Willing to Pay a Premium for Security, Privacy, and Peace of Mind
Miguel de Icaza's Blog
Ethereum Is a Dark Forest
A horror story.
SSH Keygen – RSA, DSA, Ecdsa, EdDSA
Comparing SSH keys: RSA, DSA, ECDSA, and Ed25519 explained, with a straight algorithm recommendation and the move from keys to certificates. Read on.
Why Johnny Won't Upgrade
Software distribution has over the years gone through an enormous revolution in efficiency. Originally, software was developed on things called ‘plug boards’, a matrix of sockets that allowed quick (or so they thought) re-configuration of computing hardware to adapt it to different problems. This was soon followed by…
WebBundles harmful to content blocking, security tools, and the open web
Google is proposing a new standard called WebBundles. This standard allows websites to “bundle” resources together, and will make it impossible for browsers to reason about sub-resources by URL. While we appreciate the problems the WebBundles and related proposals aim to solve, we believe there are other, better ways…
Kindle collects a surprisingly large amount of data
Reading a book on a Kindle sends Amazon a lot of data about reading habits. How fast pages are turned, font sizes and views, and device details.
SourMint Malicious SDK
The Snyk security research team has made two significant disclosures surrounding the Mintegral SDK. Learn about these SourMint vulnerabilities.
Kali Linux 2020.3
Its that time of year again, time for another Kali Linux release! Quarter #3 - Kali Linux 2020.3. This release has various impressive updates, all of which are ready for immediate download or updating. A quick overview of what’s new since the last release in May 2020: New Shell - Starting the process to switch from…
FritzFrog: A New Generation of Peer-to-Peer Botnets
A Akamai é a empresa de cibersegurança e computação em nuvem que potencializa e protege negócios online.
US Border Patrol says they can create central repository of traveler emails
The U.S. government has taken the opportunity during the global pandemic, when people aren't traveling out of the country much, to roll out a new platform for storing information they believe they are entitled to take from people crossing the border. A new filing reveals how the U.S. Border Patrol will store data from…
Never run ‘python’ in your downloads folder
Python can execute code. Make sure it executes only the code you want it to.
KeePassXC 2.6.1
KeePassXC Password Manager
Breaking Samsung Firmware, or Turning Your S8/S9/S10 into a DIY “Proxmark”
This post is a companion to the DEF CON 28 video available here https://www.youtube.com/watch?v=aLe-xW-Ws4c Breaking the Firmware of Samsung’s NFC Chips Recently I have been looking into how to push the capabilities of my old smartphones beyond what you could traditionally do just by rooting it. Smartphones contain…