241
What Is the PCI of Bank Payments?
Credit card users today can transact online with peace of mind because card-accepting merchants are subject to Payment Card Industry Data Security Standard (PCI DSS).
New
The latest blog posts to take off on Hacker News. 612 posts.
242
Why Credit Card Fraud Is Still a Thing
Most of the civilized world years ago shifted to requiring computer chips in payment cards that make it far more expensive and difficult for thieves to clone and use them for fraud. One notable exception is the United States, which is still lurching toward this goal. Here’s a look at the havoc that lag has wrought, as…
243
244
Mitigating Spectre and Other Security Threats: The Cloudflare Workers Security Model
Cloudflare is a security company, and the heart of Workers is, in my view, a security project. Running code written by third parties is always a scary proposition, and the primary concern of the Workers team is to make that safe.
245
Zoom Security Exploit: Cracking private meeting passwords
Short version: Zoom meetings were default protected by a 6 digit numeric password, meaning 1 million maximum passwords. I discovered a vulnerability in the Zoom web…
246
247
The Rise of Synthetic Audio Deepfakes
Nisos Resources Library is full of interesting case studies, client success stories, infographics, videos and more. Click to see what we do.
248
249
How to effectively evade the GDPR and the reach of the DPA
Musings on Information Security and Privacy Risk Management - Thierry Zoller.
250
Cryptography is not magic
Crypto is often treated like a black art only anointed experts can hope to wield safely. It's not. There are laws, and we can learn them.
251
Smartphone contact tracing has failed everywhere
Even the ‘successful’ contact tracing apps have fallen well below expectations, and incapable of discovering their effectiveness.
252
Thinking of a Cybersecurity Career?
Thousands of people graduate from colleges and universities each year with cybersecurity or computer science degrees only to find employers are less than thrilled about their hands-on, foundational skills. Here’s a look at a recent survey that identified some of the bigger skills gaps, and some thoughts about how…
253
On Liberating My Smartwatch from Cloud Services
I’ve often said that if we convince ourselves that technology is magic, we risk becoming hostages to it . Just recently, I had a brush with this fate, but happily, I was saved by open source.
254
255
Bitwarden second security audit report
Bitwarden will continue to uphold high cybersecurity standards through annual third-party security audits of the Bitwarden product and service.
256
Swiss police automated crime predictions but has little to show for it
A review of 3 automated systems in use by the Swiss police and judiciary reveals serious issues. Real-world effects are impossible to assess due to a lack of transparency.
257
On the Twitter Hack
Twitter was hacked this week. Not a few people’s Twitter accounts, but all of Twitter. Someone compromised the entire Twitter network, probably by stealing the log-in credentials of one of Twitter’s system administrators. Those are the people trusted to ensure that Twitter functions smoothly. The hacker used that…
258
The German Problem with Tor
EAs of the 5th July 2020, there are 1357 Tor bridges available for users in countries who censor the Tor network to use. Having just over 1,000 IP addresses is not a lot for such a big privacy network as Tor is, especially considering that the number of Tor Bridges peaked at 4,227 on the 4th January 2015. That means…
259
Data-Transfer-Project
Since 2010, we have offered Download Your Information to allow people who use our services to access a secure copy of the data they have shared with Facebook. In 2018, we announced our participatio…
260
261
262
Who’s behind Wednesday’s epic Twitter hack?
Twitter was thrown into chaos on Wednesday after accounts for some of the world’s most recognizable public figures, executives and celebrities starting tweeting out links to bitcoin scams. Twitter says the attack happened because someone tricked or coerced an employee into providing access to internal Twitter…
263
No, you couldn't have made more money than the Twitter hacker
Analysis of various approaches to monetizing the Twitter hack
264
Reverse engineering a camera protocol for fun and profit
Way back in late 2019 , I dissected a Reolink B800 IP camera to demonstrate the various parts of an embedded Linux system. It’s fairly nice hardware, actually—it has a 4K video sensor, a microphone, power over Ethernet, and is nominally waterproof. And yes, it runs Linux.
265
Everything you need to know about OAuth 2.0
OAuth provides third party applications limited access to user resources without compromising the user's data. Find out exactly how in this blog.
266
The Fake Cisco
True cyber security combines advanced technology and best practice. Get tips and read articles on how to take your online security even further.
267
Lies, damn lies, and front-end tracking
I’m here to warn you about the dangers of front-end user tracking. Not because Google is tracking you, but because it doesn’t track you quite well enough.
268
How SHA-2 works step-by-step (SHA-256)
Learn to code from scratch with hands-on lessons, a structured curriculum, and real projects. Stop watching tutorials, start writing code for free now.
269
Confidential VMs
Google Cloud will now offer the ability to encrypt data in use, while it’s being processed in a Google data center
270
Hacking with environment variables
How malicious environment variables can trick scripting language interpreters into executing arbitrary commands, a Linux exploitation technique.