1
I fought my ISP's bad behavior and won
Just before black friday I was surfing some major retailers sites and on a whim wanted to see how they were using jav...
New
The latest blog posts to take off on Hacker News. 99 posts.
2
Snapchat - GibSec Full Disclosure
A series of nicely formatted documents about Snapchat by GibSec.
3
Telegram secret chat geolocation leak
UPD: I've just received confirmation from Telegram, that a patched version was released a few hours ago. Here is the patch on github....
4
5
BitTorrent secures and open-sources DHT bootstrap server
Arvid Norberg, chief architect for BitTorrent, Inc, introduces a new DHT bootstrap server. This latest version introduces Node ID enforcement as an important step in our development for BitTorrent Chat. It’s also now open source so that anyone can run their own bootstrap node.
6
Build WebRTC app backend services | Articles
WebRTC enables peer-to-peer communication. It requires servers so that clients can exchange metadata and coordinate communication through a process called signaling . Servers also help clients cope with network address translators (NATs) and firewalls.
7
How to send DMs on Twitter without permission
I just recalled " SMS commands " feature and tried to send a DM (private, direct message) with "Share on Twitter"-button. It works! Twitt...
8
LG TV logging filenames from network folders
After DoctorBeet’s blog post detailing his LG TV’s shady logging practices I decided to have a look at what my own was doing. To start off I couldn’t seem to find an option to disable logging…
9
10
11
12
Microsoft ‘Mortally Wounds’ SHA-1
Microsoft has announced that CAs in its root program may not issue certs signed using the SHA-1 algorithm, starting just over two years from now, and that Windows will start refusing to recognise such certs starting just over 3 years from now.
13
ZeroMQ is just sockets
Kim: Yeah, right. It's just sockets . Course, it's totally portable so you don't have to handle all the weird stuff different operating systems ask you to do.
14
15
16
Complete, Persistent Compromise of Netgear Wireless Routers
UPDATE: Turns out, Jacob Holocomb ( @rootHak42 on Twitter) of Independent Security Evaluators found this bug back in April on a different d...
17
18
Why Android SSL was downgraded from AES256-SHA to RC4-MD5 in late 2010
blog about networking, cameras, old gear, and xmpp
19
Hostnames
The idea is to come up with some kind of category, so that people have something to remember all the names by. Some categories: Geographical (countries, cities, parks, rivers, lakes, streets), entertainment (flintsones, simpsons, disney films, celebrities), companies (hotels, airports, local shops, restarants)…
20
The core Internet institutions abandon the US Government
In Montevideo, Uruguay this week, the Directors of all the major Internet organizations – ICANN, the Internet Engineering Task Force, the Internet Architecture Board, the World Wide Web Consortium, the Internet Society, all five of the regional Internet address registries – turned their back on the US government. With…
21
Whatever happened to due process?
This morning I received the following email: Classification: NOT PROTECTIVELY MARKED Dear Sir or Madam, Re: Website domain name suspension request #2 On the 24th September 2013, EasyDNS Technologies was emailed a domain suspension request for the following domain(s) that to date we have not received a reply nor seen…
22
23
24
25
We scanned the Internet for port 22
Yesterday (Sept. 12) we scanned the entire Internet for port 22 -- the port reserved for "SSH", the protocol used by sysadmins to remotely l...
26
New NSA Leak Shows MITM Attacks Against Major Internet Services
The Brazilian television show “Fantastico” exposed an NSA training presentation that discusses how the agency runs man-in-the-middle attacks on the Internet. The point of the story was that the NSA engages in economic espionage against Petrobras, the Brazilian giant oil company, but I’m more interested in the tactical…
27
HTML Live Video Streaming Via WebSockets
When I built my Instant Webcam App, I was searching for solutions to stream live video from the iPhone's Camera to browsers. There were none.
28
Why you should not trust emails sent from Google
As you might know, Google is running a vulnerability reward program , where they award researchers monetary awards or a place in their Hall of Fame when they responsibly disclose vulnerabilities. With this in mind, I was scooping around on several Google services, including Google Scholar. As I recently started a PhD…
29
Building a PGP web of trust that people will actually use
Back in the early 1990s, PGP introduced the concept of web of trust (WoT)- a means by which users of personal encryption can know whether or...
30