241
New
The latest blog posts to take off on Hacker News. 391 posts.
242
How I bypassed 2-Factor-Authentication on Google, Facebook, Yahoo, LinkedIn
I remember fondly two years ago, when 2-Factor-Authentication (2FA) became popular and well used across major web applications (Google, Facebook, Yahoo and others). I found, my naive sixteen year old self unable to come to terms for why the genius idea had not been thought of before. At
243
Pervasive Monitoring Is an Attack
That’s the title of RFC 7258 , also known as BCP 188 (where BCP stands for “Best Current Practice”); it represents Internet Engineering Task Force consensus on the fact that many powerful well-funded entities feel it is appropriate to monitor people’s use of the Net, without telling those people. The consensus is…
244
If You Can Read This, You're SNIing
When TLS was defined, it didn’t allow more than one hostname to be available on a single IP address / port pair, leading to “virtual hosting” issues; each Web site (for example) now requires a dedicated IP address.
245
246
Free Your Android
After all the recent NSA revelations, it's been even more important to use Free Software on our mobile phones. Let me express this in another way: We should be very careful about what software we use on a device that is always on and in our pocket 24h a day. Starting from the very basic thing tha...
247
248
249
Hacking the Samsung NX300 "Smart" Camera
blog about networking, cameras, old gear, and xmpp
250
251
252
TextSecure's Private Group Messaging
One of the major features we introduced in the TextSecure v2 release was private group chat. We believe that group chat is an important feature for encrypted communications projects, so we wanted to try to summarize some of the existing work in this area, as well as how TextSecure’s group chat pr...
253
Chrome's experiment of hiding the URL is great for security
iOS has hidden the pathname of URLs for some time now, but recently Chrome Canary introduced something similar behind a flag.
254
255
Common LibreSSL porting mistakes
The other day I wrote an article discussing LibreSSL , and the common mistakes being made by those thinking they know how to port it to oth...
256
Help EFF test Privacy Badger, our new browser extension for privacy
EFF is launching a new extension for Firefox and Chrome called Privacy Badger. Privacy Badger automatically detects and blocks spying ads around the Web, and the invisible trackers that feed information to them. You can try it out today: Privacy Badger is EFF's answer to intrusive and objectionable...
257
You Don't Want XTS
XTS is the de-facto standard disk encryption mode, which makes it look like a good general-purpose one. It isn't. What disk encryption actually promises, and why XTS's guarantees don't travel.
258
Introducing Anonymous Login and an Updated Facebook Login
Improved privacy options put better controls in your hands.
259
260
Android betrays tethering data
Software engineer, Free, Open Source Software Consultant, Innovator, Fedora & Debian Developer
261
262
HipChat Will Grant Employers Access To 1-to-1 Chat History
Atlassian and Slack have forged a new strategic partnership.
263
264
Speeding up and strengthening HTTPS connections for Chrome on Android
Posted by Elie Bursztein, Anti-Abuse Research Lead Earlier this year, we deployed a new TLS cipher suite in Chrome that operates three tim...
265
Spoofing the Samsung Smart TV Internet Check
So it looks like Samsung is offline this morning . This shouldn't bother me - I don't work for them and their network isn't my problem. However it turns out that my Samsung Smart TV thinks there's no internet if there's no www.samsung.com :( - using tcpdump I started looking at what the TV was trying to contact when I…
266
No, don't enable revocation checking
Revocation checking is in the news again because of a large number of revocations resulting from precautionary rotations for servers affected by the OpenSSL heartbeat bug. However, revocation checking is a complex topic and there's a fair amount of misinformation around. In short, it doesn't work and you are no more…
267
The Government is Silencing Twitter and Yahoo, and It Won't Tell Us Why
The government is using shaky legal arguments to silence major Internet companies without giving them – or the public – the opportunity to respond. In three separate recent cases, the government has sent a grand jury subpoena to Yahoo or Twitter and requested a gag order from a magistrate judge, attempting to bar…
268
Chrome users oblivious to Heartbleed revocation tsunami
Explore thought leadership, industry insights, and other resources related to cybercrime detection, disruption, and takedowns.
269
270
The Linux Security Circus: On GUI isolation
There certainly is one thing that most Linux users don't realize about their Linux systems... this is the lack of GUI-level isolation, and ...