211
New
The latest blog posts to take off on Hacker News. 431 posts.
212
Snowden's Dead Man's Switch
Edward Snowden has set up a dead man’s switch. He’s distributed encrypted copies of his document trove to various people, and has set up some sort of automatic system to distribute the key, should something happen to him. Dead man’s switches have a long history, both for safety (the machinery automatically stops if…
213
Police Documents on License Plate Scanners Reveal Mass Tracking
Automatic license plate readers are the most widespread location tracking technology you’ve probably never heard of. Mounted on patrol cars or stationary objects like bridges, they snap photos of every passing car, recording their plate numbers, times, and locations. At first the captured plate data was used just to…
214
Tiny, cheap, and dangerous: Inside a fake iPhone charger
Thoughts on the death of Ma Ailun According to reports , a woman in China was tragically electrocuted using her iPhone while it was char...
215
Malware Hidden Inside JPG EXIF Headers
A few days ago, Peter Gramantik from our research team found a very interesting backdoor on a compromised site. This backdoor didn’t rely on the…
216
EFF sues the NSA Over Illegal Surveillance
firstunitarianvnsa-final.pdf
217
Yahoo's Fight for its Users Earns the Company Special Recognition by EFF
Each year, EFF’s Who Has Your Back campaign assesses the policies and practices of major Internet companies as a way to encourage and incentivize those companies to take a stand for their users in the face of government demands for data. Normally, when a company demonstrates it has a policy or...
218
Set up an email server in two hours
You may be concerned that the NSA is reading your e-mail. Is there really anything you can do about it though? After all, you don’t really want to move off of GMail / Google Apps. And no plac…
219
Bills Introduced by Congress Fail to Fix Unconstitutional NSA Spying
In the past two weeks Congress has introduced a slew of bills responding to the Guardian's publication of a top secret court order using Section 215 of the PATRIOT Act to demand that Verizon Business Network Services give the National Security Agency (NSA) a record of every customer's call history...
220
Bruce Schneier awarded fellowship at Harvard's Berkman Center
I have been awarded a fellowship at the Berkman Center for Internet and Society at Harvard University, for the 2013–2014 academic year. I’m excited about this; Berkman and Harvard is where a lot of the cool kids hang out, and I’m looking forward to working with them this coming year. In particular, I have three goals…
221
Use "Amazon 1 Button" Chrome extension to sniff all HTTPS websites
A blog on security, malware, cryptography, pentesting, javascript, php and whatnots
222
Don't be evil: Moving everything off of Google
Wherein I move many of my internet services away from Google Apps.
223
224
VLC threatens to sue Secunia over full disclosure
Protect your technology from cyber threats and vulnerabilities…
225
226
227
228
The Strange Story of Dual_EC_DRBG – suspected NSA backdoor (2007)
Random numbers are critical for cryptography: for encryption keys, random authentication challenges, initialization vectors, nonces, key-agreement schemes, generating prime numbers and so on. Break the random-number generator, and most of the time you break the entire security system. Which is why you should worry…
229
230
231
EFF: Show Support for the Fourth Amendment
This Fourth of July, EFF will be demonstrating our commitment to your Constitutional right of privacy from government surveillance by displaying the text of the Fourth Amendment on our website. This demonstration is a visual symbol of our opposition to the illegal and unconstitutional surveillance...
232
233
Lockdown
Officially, Google killed Reader because “over the years usage has declined”. 1 I believe that statement, especially if API clients weren’t considered “usage”, but I don’t believe that’s the entire reason.
234
235
NSA E-Mail Eavesdropping
More Snowden documents analyzed by the Guardian—two articles—discuss how the NSA collected e-mails and data on Internet activity of both Americans and foreigners. The program might have ended in 2011, or it might have continued under a different name. This is the program that resulted in that bizarre tale of Bush…
236
Restore the Fourth Organizes Protests Against Unconstitutional Surveillance
The right of the people to be secure in their persons, houses, papers, and effects, against unreasonable searches and seizures, shall not be violated, and no Warrants shall issue, but upon probable cause, supported by Oath or affirmation, and particularly describing the place to be searched, and...
237
Motorola cell phones are regularly phoning home
If you have a Motorola Android device, there is a good chance it is silently sending a great deal of your personal information (including email addresses and passwords) to Motorola.
238
How to build (and how not to build) a secure “remember me” feature
This content is now available in the Pluralsight course "Secure Account Management Fundamentals" [http://www.pluralsight.com/courses/secure-account-management-fundamentals] Here’s the scenario – a user logs in to your website, comes back tomorrow and… has to log in again. The idea of the “remember me” feature – and
239
Why to use Twitter, Facebook and Google Plus share links and not buttons
Use share buttons for Facebook, Twitter and Google Plus in your blog, that does not expose your users to tracking, or violate their privacy. Use share links to do this
240
A Hacker's Replacement for Gmail
Note: Since writing this I’ve replaced Exim with Postfix and Courier with Dovecot. This is outlined in the Addendum, but the main text is unchanged. Please read the whole guide before starting, as you can skip some of the steps and go straight to the final system.