2731
Edge Case Poisoning (2020)
TLA+ Workshop Last Call The TLA+ workshop is next week! Oct 20-22, register here, use the code COMPUTRONSTUFF for $500 off. Learn how a few hours of...
New
The latest blog posts to take off on Hacker News. 8,771 posts.
2732
Attacking Firecracker: AWS' MicroVM Monitor Written in Rust
Why are more security teams adopting Firecracker? How secure is it, and how suitable is it for your organization? This guide dives into this trending innovation.
2733
Pwned, the book
The first time I ever wrote publicly about a company's security vulnerabilities, my boss came to have a word with me after seeing my name in the news headlines. One of the worst days I've ever had was right in the middle of the Have I Been Pwned
2734
A New Life for Certificate Revocation Lists
This month, Let’s Encrypt is turning on new infrastructure to support revoking certificates via Certificate Revocation Lists. Despite having been largely supplanted by the Online Certificate Status Protocol for over a decade now, CRLs are gaining new life with recent browser updates. By collecting and summarizing CRLs…
2735
TIL: You can access a user’s camera with just HTML
The HTML capture attribute is interesting because it allows you to activate a user's camera with just HTML. This article covers it in more depth.
2736
Vulnerability Management for Go
Announcing vulnerability management for Go, to help developers learn about known vulnerabilities in their dependencies.
2737
Bitwarden raises $100M
A message from the Bitwarden CEO on accelerating value for Bitwarden users and customers.
2738
The Sheer Terror of PAM
Xe Iaso's personal website.
2739
Violence-as-a-Service: Brickings, Firebombings and Shootings for Hire
A 21-year-old New Jersey man has been arrested and charged with stalking in connection with a federal investigation into groups of cybercriminals who are settling scores by hiring people to carry out physical attacks on their rivals. Prosecutors say the defendant recently participated in several of these schemes …
2740
Outlook.com is silently discarding email messages (2015)
Outlook.com and hotmail.com is silently discarding email messages from our SMTP server.
2741
Peter Eckersley, co-creator of Let’s Encrypt, dies at just 43
The Sophos Blog
2742
I ran the worlds largest DDoS-for-Hire empire and Cloudflare helped
The perils of remaining neutral on a global scale: fanning the flames and selling the extinguisher.
2743
Blocking Kiwifarms
We have blocked Kiwifarms. Visitors to any of the Kiwifarms sites that use any of Cloudflare's services will see a Cloudflare block page and a link to this post.
2744
The optimal amount of fraud is non-zero
Counterintuitively, businesses, customers, and society prefer having fraud to what they'd need to do to not have it.
2745
The quantum state of Linux kernel garbage collection
A deep dive into an in-the-wild Android exploit Guest Post by Xingyu Jin, Android Security Resea...
2746
Fog Revealed: A guided tour of how cops can browse your location data
In Part 1 of our series on Fog Data Science, we saw how when you give some apps permission to view your location, it can end up being packaged and sold to numerous other companies. Fog Data Science is one of those companies, and it has created a sleek search engine called Fog Reveal that allows cops to browse through…
2747
Tor – Arti 1.0.0 is released: Rust Tor implementation ready for production use
Arti 1.0.0 is released and ready for download.
2748
2749
macOS now scans for malware whenever it gets a chance
How macOS now has anti-malware scanners checking your Mac automatically many times each day for the most frequent malware.
2750
2751
Will California Eliminate Anonymous Web Browsing? (Comments on CA AB 2273)
I’m continuing my coverage of dangerous Internet bills in the California legislature. This job is especially challenging during an election year, when legislators rally behind the “protect the kids” mantra to pursue bills that are likely to hurt, or at...
2752
Final thoughts on Ubiquiti
Last year, I posted a series of articles about a purported “breach” at Ubiquiti. My sole source for that reporting was the person who has since been indicted by federal prosecutors for his alleged wrongdoing – which includes providing false information to the press.
2753
Things not available when someone blocks all cookies
The personal blog of Thomas Steiner
2754
AdGuard publishes the first ad blocker built on Manifest V3
We put a lot of effort into developing an experimental browser extension that could meet all the requirements of Manifest V3 (Chrome's new extension API) and block ads properly within its tight confines. Read the article to find out what we went through and what we achieved.
2755
Large scale Internet SSH brute force attacks seem to have stopped here
You're probably reading this page because you've attempted to access some part of my blog (Wandering Thoughts) or CSpace , the wiki thing it's part of. Unfortunately you're using a browser version that my anti-crawler precautions consider suspicious, most often because it's too old (most often this applies to versions…
2756
Tetsuji: Remote Code Execution on a GameBoy Colour 22 Years Later
Introduction It’s that time of year again - the Binary Golf Grand Prix is back for a third year running! You can also check out my entries to the first and second times this amazing competition ran. The theme this year was to produce a binary that crashes a given program. Bonus points for hijacking execution…
2757
2758
2759
What’s going on with security at PayPal?
PayPal's one-time login codes are a security disaster. Your account is at severe risk; remove your data or close your account immediately.
2760
Why Xen Wasn't Hit by RETBleed on Intel CPUs
An article explaining why Xen wasn't affected by the recent RETBleed security issue on Intel CPUs.