2641
Patch OpenSSL on November 1 to avoid “critical” security vulnerability
The GlobalSign blog is the top resource to see what's trending in public key infrastructure (PKI), SSL/TSL, digital signing solutions, cybersecurity & more!
New
The latest blog posts to take off on Hacker News. 8,770 posts.
2642
The Iran Firewall: A preliminary report
The Internet is easily censored. The neo-liberal's got their arses kicked. The big players like Google/Apple/AWS are partly to blame. China runs the GFI.
2643
Apple security bounty upgraded
Apple’s Security Bounty program has paid nearly $20 million in rewards to security researchers in just two and a half years. Our new site makes it easier than ever for researchers to submit reports on the web, get real-time updates from Apple engineering, and earn recognition for helping to improve security for the…
2644
Towards the next generation of XNU memory safety: kalloc_type
Improving software memory safety is a key security objective for engineering teams across the industry. Here we begin a journey into the XNU kernel at the core of iOS and explore the intricate work our engineering teams have done to harden the memory allocator and make our software much more difficult to exploit.
2645
Making an SSH client the hard way
Explore Tailscale SSH Console, a web-based SSH client that simplifies connecting to your devices. Learn how Tailscale integrates WebAssembly, WireGuard, and SSH for secure, password-free access right from your browser."
2646
Ad blocking is under attack (2017)
Well, this is huge, so I'd like to draw your attention to what's happening right now. This is a very alarming case, and it concerns every ad blocker user.
2647
Where did all the “reject” buttons come from?
More and more websites have added an option to say “no” to cookies and other tracking- as foreseen by the GDPR. Where did this trend come from?
2648
SiriSpy – iOS bug allowed apps to eavesdrop on your conversations with Siri
Gui Rambo writes about his coding and reverse engineering adventures.
2649
2650
Ring0VBA – Getting Ring0 Using a Word Document
Hey hey! Welcome to my little corner of the internet. I am also known as 'Diz'! I made this site to document my research and contributions throughout the years, and other fun stuff I could come up with. Hope you're having a good day/afternoon/night wherever you are!
2651
Brave New Trusted Boot World
Posts and writings by Lennart Poettering
2652
How to request removal of your contact info from Google search results
A new tool in Google Search can help you easily control whether your personally-identifiable information can be found in Search results.
2653
I recorded user behaviour on my competitor’s websites (2018)
A test that hijacked the Chrome back button to send visitors to a fake Google results page, then to mirrored competitor pages where heatmaps, sessions and typing were recorded. Google de-indexed the whole domain.
2654
Stranger Strings: An exploitable flaw in SQLite
Trail of Bits is publicly disclosing CVE-2022-35737, which affects applications that use the SQLite library API. CVE-2022-35737 was introduced in SQLite version 1.0.12 (released on October 17, 2000) and fixed in release 3.39.2 (released on July 21, 2022). CVE-2022-35737 is exploitable on 64-bit systems, and…
2655
Chromium based browsers leak user local IP via WebRTC foundation attribute
This script uses a pregenerated foundation lookup table to find local IP address for ICE candidates that render local mDNS hostnames seen as xx-xxx-xxx-xx.local .
2656
Ssss: Shamir's Secret Sharing Scheme (2006)
Shamir's Secret Sharing Scheme
2657
Security through obscurity is underrated (2020)
Some thoughts about cyber security, technology and life - https://utkusen.com/. Click to read Utku Sen’s Substack, a Substack publication with hundreds of subscribers.
2658
Google has most of my email because it has all of yours (2014)
Republished by Slate. Translations available in French (Français), Spanish (Español), Chinese (中文) For almost 15 years, I have run my own email server which I use for all of my non-work corresponde…
2659
Global Encryption Day: Demand End-to-End Encryption in DMs
Today is Global Encryption Day, a day to highlight why encryption is critical for a safe, private internet.
2660
SHA-3 Buffer Overflow
Update: This result appeared in the proceedings of CT-RSA 2023. A preprint is available.
2661
Battle with bots prompts purge of Amazon, Apple employee accounts on LinkedIn
On October 10, 2022, there were 576,562 LinkedIn accounts that listed their current employer as Apple Inc. The next day, half of those profiles no longer existed. A similarly dramatic drop in the number of LinkedIn profiles claiming employment at Amazon comes as LinkedIn is struggling to combat a significant uptick in…
2662
Social engineering dos and don'ts
Another day, another success at sneaking into a building and pretending to be staff. I do so love drinking other people’s expensive office coffee. No fruit bowls though. Close, but no banana. It got me thinking, again, about what makes for good social engineering (SE), and what advice would I give my younger self…
2663
EasyList is in trouble and so are many ad blockers
One of the world’s most popular ad blocking filter lists, EasyList, has run into a serious issue that threatens to tank it, as well as many open-source projects that rely on it. See if this affects you personally, and how you can help.
2664
Brave browser now blocks cookie banners
New versions of Brave will hide—and, where possible, completely block—cookie consent notifications. Brave's approach is distinct and more privacy-preserving than similar systems used in other browsers.
2665
IDA cybersecurity software provider Hex-Rays acquired
Liège (BE), October 14, 2022 – Hex-Rays, a Belgian cybersecurity company that develops advanced reverse engineering software solutions, has been acquired by a consortium of investors led by Smartfin, a leading European venture capital and private equity investor, and including co-investors SFPIM and SRIW. Ilfak…
2666
Fine-grained personal access tokens for GitHub
Fine-grained personal access tokens offer enhanced security to developers and organization owners, to reduce the risk to your data of compromised tokens.
2667
Firefox Private Browsing mode upgrade
October is one of our favorite months of the year with autumn and Cybersecurity Awareness Month. We’re supporting Cybersecurity Awareness with Private Br
2668
Abuse prevention is tradecraft
It’s sunday evening; there’s a lot to be said for being a stay-at-home-dad, and honestly I actually like having stuff like meal-prep and laundry to do, after 35+ years of “All Uni…
2669
Reverse Engineer’s Perspective on the Boeing 787 ‘51 days’ Directive
Uncover the implications of hacking a Boeing 787 as we analyze recent FAA directives and aviation technology concepts.
2670
How to hide your IP address
A field guide to VPNs, proxies, and traffic relaying