2611
New
The latest blog posts to take off on Hacker News. 8,770 posts.
2612
Why CVE-2022-3602 was not detected by fuzz testing
So recently a very hyped memory corruption security vulnerability was discovered in the OpenSSL punycode parser. Some folks including Hanno ...
2613
Spiral’s Homomorphic Encryption – Is This the Future of Privacy?
Find out how homomorphic encryption works and why it could be the future of (crypto) data privacy
2614
2615
Some notes on the Stable Diffusion safety filter
How deep learning models are moderated
2616
Researchers quietly cracked Zeppelin ransomware keys
Peter is an IT manager for a technology manufacturer that got hit with a Russian ransomware strain called “ Zeppelin ” in May 2020. He’d been on the job less than six months, and because of the way his predecessor architected things, the company’s data backups also were encrypted by Zeppelin. After two weeks of…
2617
Hardening unused (sub)domains
Proper implementation of email hardening techniques can be beneficial even to (sub)domains that are not intended to be used with email.
2618
GitHub Copilot isn't worth the risk
Copilot may be a glimpse into the future of AI, but it comes with a lot of legal and security baggage.
2619
Security concerns with the e-Tugra certificate authority
Certificate authorities (CAs) are a critical backbone of internet security; when they are compromised, users lose the ability to securely connect to websites without fear of interception. Websites cannot insulate themselves against a fully-compromised CA, even if they normally use other CAs.
2620
2621
AWS IAM Roles, a tale of unnecessary complexity
This is going to be a highly opinionated blog post. I think AWS is great and use it daily, but their implementation of IAM is unnecessarily complicated.
2622
GrapheneOS attestation compatibility guide
Guide on using remote attestation in a way that's compatible with GrapheneOS.
2623
Block web scanners with ipset and iptables
Anybody who runs an internet-facing webserver has seen their fair share of spammy scanners in the logs. It varies server to server, but some of mine get up to 15,000 scans per day. Almost all of these are harmless network mappers, but they still annoy me. Many are compromised hosts or belong to hackers & organized…
2624
French court: refusing to disclose mobile passcode to law enforcement is a crime
The French Court of Cassation has ruled that people who are suspected or accused of a crime are obliged to reveal the passcode of their mobile phone to the investigative authorities.
2625
Accidental Google Pixel Lock Screen Bypass
David Schütz's bug bounty writeups
2626
So I lost my OpenBSD FDE password (2016)
The other day I set up a new OpenBSD instance with a nice RAID array, encrypted with Full Disk Encryption. And promptly proceeded to forget part of the passphrase.
2627
2628
Microsoft is phoning home the content of PowerPoint slides
Were you aware of it: Microsoft is phoning home the content of your PowerPoint slides. Don't just take my word for it: open up the network monitor of your...
2629
2630
Portmaster 1.0 – Open-Source Network Monitor and Privacy Firewall
Portmaster is a free and open-source application that puts you back in charge over all your computer's network connections. Increase your privacy and security. Get peace of mind.
2631
2632
A large collection of fraudulent web stores
It started simply enough...
2633
An AWS account just for getting into other AWS accounts
“An AWS account just for getting into other AWS accounts” has moved to https://src-bin.com/substrate/blog/an-aws-account-just-for-getting-into-other-aws-accounts/ .
2634
Why did the OpenSSL punycode vulnerability happen?
We look at how fuzzing should have caught the OpenSSL Punycode vulnerability, and why that code was even necessary in the first place.
2635
2636
A few of my favourite things about the OpenBSD Packet Filter tools
Guest Post: How to use PF features and tools.
2637
OpenSSL 3.0.7 fixes X.509 email address buffer overflows
Today we published an advisory about CVE-2022-3786 (“X.509 Email Address Variable Length Buffer Overflow”) and CVE-2022-3602 (“X.509 Email Address 4-byte Buffer Overflow”).
2638
Bring Your Own Password Manager: Portable BitWarden on a Pi Zero
BYOPM is a self hosted portable Password Manager implementation based on BitWarden and Raspberry PI Zero.
2639
SMS Multifactor Authentication in Antarctica
Issues pertaining to SMS (for multifactor auth) in Antarctica.
2640
Mitmproxy 9: WireGuard Mode
We’re excited to announce the release of mitmproxy 9, a free and open source interactive HTTPS proxy. This release brings support for raw UDP and DTLS, a new WireGuard proxy mode, and major usability improvements.