211
Every C99.php shell is backdoored
A Hacker's Blog of Unintended Use and Insomnia.
New
The latest blog posts to take off on Hacker News. 391 posts.
212
213
Boring SSL
Earlier this year, before Apple had too many goto fails and GnuTLS had too few , before everyone learnt that TLS heart-beat messages were a thing and that some bugs are really old , I started a tidy up of the OpenSSL code that we use at Google.
214
Why SSD Drives Destroy Court Evidence, and What Can Be Done About It (2012)
Why SSD Drives Destroy Court Evidence, and What Can Be Done About It: Explore the challenges posed by SSD drives in preserving court evidence and discover strategies to mitigate data loss risks.
215
Authentication for Single Page Apps
Wow! This takes me back! Please check the date this post was authored, as it may no longer be relevant in a modern context.
216
217
Where the term "Zero Day" comes from
After seeing a FOIA request earlier today that someone created asking for FBI training documents that teach staff how to understand/communicate using hacker leet-speak, I was reminded about something I’ve wanted to put in virtual ink for a while.
218
219
Algorithmic complexity attacks and libc qsort()
An algorithmic complexity attack is a denial of service attack that triggers worst case behaviour in code that is otherwise expected to perform well. The canonical example would be the widely published attacks against hash table implementations , where carefully crafted inputs made snappy \(O(1)\) operations…
220
Feedly gets hit by DDoS attack, refuses to give in to blackmail
Feedly reports that it is suffering from a denial-of-service attack that could impact users’ ability to catch up with the latest updates from their favourite websites.
221
The security hole I found on Amazon.com
A blog about building stuff on the web by Josh Fraser
222
223
224
Can I drop a pacemaker 0day?
Can I drop a pacemaker 0day at DefCon that is capable of killing people? Computers now run our cars. It's now possible for a hacker to i...
225
Peek Inside a Professional Carding Shop
Over the past year, I’ve spent a great deal of time trolling a variety of underground stores that sell “dumps” — street slang for stolen credit card data that buyers can use to counterfeit new cards and go shopping in big-box stores for high-dollar merchandise that can be resold quickly for cash. By way of explaining…
226
227
Judge Releases Information about Police Use of Stingray Cell Phone Trackers
A Florida judge has sided with the ACLU to order release of information about police use of “stingrays,” which are invasive surveillance devices that send out powerful signals to trick cell phones into transmitting their locations and identifying information. The Tallahassee judge’s pro-transparency decision stands in…
228
229
230
231
232
True Goodbye: ‘Using TrueCrypt Is Not Secure’
The anonymous developers responsible for building and maintaining the free whole-disk encryption suite TrueCrypt apparently threw in the towel this week, shuttering the TrueCrypt site and warning users that the product is no longer secure now that Microsoft has ended support for Windows XP .
233
Google Search/Web history disable does nothing for privacy
There seems to be some kind of misunderstanding about the Google Search/Web History disable switch that google provides to its more privacy conscious users. It’s not exactly the most advertised feature (you won’t find it in your profile page) to begin with, but once you do find it (it’s on the history page, you have…
234
235
DEFCON Capture the Flag Qualification Challenge #1
Today, we are excited to announce the introduction of Elastic Endpoint Security.
236
237
eBay customers’ personal data was compromised in March
eBay Inc. (Nasdaq: EBAY) said beginning later today it will be asking eBay users to change their passwords because of a cyberattack that compromised a database containing encrypted passwords and other non-financial data.
238
EFF Dismayed by House's Gutted USA Freedom Act
EFF and Other Civil Liberties Organizations Call on Congress to Support Uncompromising Reform Since the introduction of the USA FREEDOM Act, a bill that has over 140 cosponsors, Congress has been clear about its intent: ending the mass collection of Americans' calling records. Many members of...
239
240
Mandatory encryption on XMPP starts today
Last year Peter Saint-Andre laid out a plan for strengthening the security of the XMPP network. The manifesto, to date signed by over 70 XMPP service operators and software developers, offered a rallying point for those interested in ensuring the security of XMPP for its users. Today is the date that the manifesto…