New
The latest blog posts to take off on Hacker News. 91 posts.
Intercepting Predator Video
Sometimes mediocre encryption is better than strong encryption, and sometimes no encryption is better still. The Wall Street Journal reported this week that Iraqi, and possibly also Afghan, militants are using commercial software to eavesdrop on U.S. Predators, other unmanned aerial vehicles, or UAVs, and even piloted…
Schneier's response to Eric Schmidt
Schmidt said: I think judgment matters. If you have something that you don’t want anyone to know, maybe you shouldn’t be doing it in the first place. If you really need that kind of privacy, the reality is that search engines—including Google—do retain this information for some time and it’s important, for example…
Schneier: The Value of Privacy
Last week, revelation of yet another NSA surveillance effort against the American people has rekindled the privacy debate. Those in favor of these programs have trotted out the same rhetorical question we hear every time privacy advocates oppose ID checks, video cameras, massive databases, data mining, and other…
Media Temple Hacked
I don’t normally do negative posts about another person or company, but I feel this needs to get out there. A few hours ago I received an email from MediaTemple , where I host several of my clients. It was an automated message informing me that:
Virtual Mafia in Online Worlds
If you allow players in an online world to penalize each other, you open the door to extortion: One of the features that supported user socialization in the game was the ability to declare that another user was a trusted friend. The feature involved a graphical display that showed the faces of users who had declared…
Cryptographic voting system developed by MIT prof has first real world trial
A new system for ensuring accurate election tallies, which MIT researchers helped to develop, passed its first real-world test last Tuesday.
How Credit Card Numbers Are Generated
Visa,Master Card,Discover, and American Express credit card validation and generation techniques using the luhn algorithm.
H(m || k) also insecure, you really should use HMAC
The HMAC construction turns a cryptographic hash algorithm into a keyed hash. It is commonly used for integrity protection when the sender and recipient share a secret key. It was developed to addr…
Arbitrary code execution via ldd utility
The `ldd` utility is more vulnerable than you think. It's frequently used by programmers and system administrators to determine the dynamic library dependencies of executables. Sounds pretty innocent, right? Wrong! In this article I am going to show you how to create an executable that runs arbitrary code if it's...
New iPhone app piracy over week one.
If you know your way around a professional writers' room, you know how to use WritersRoom Pro ®
A Tour Of A “Pay to Download Firefox” Site
At Mozilla , we regularly get anguished emails from people who have paid to download Firefox, and have then discovered a) that it's actually free, and b) that it's very hard to get the company they paid to stop charging their credit card. For those who have never had the misfortune to visit one of these trap sites, I…
Evil Maid goes after TrueCrypt
From time to time it’s good to take a break from all the ultra-low-level stuff, like e.g. chipset or TXT hacking, and do something simple, y...
Advanced SSH Techniques
At one site where I provide technical assistance, access to the network is all done via ssh over the Internet. However, one can't get access to the machines directly; one must first make an ssh connection to a gateway box I'll call martha. martha doesn't allow one to use regular passwords or keys, though. We're all…
Critical Django security updates released (0day, exploit in the wild)
Posted by James Bennett on Oct. 9, 2009
My GMail password scares me with its power
Google’s GMail blog has some “handy” advice on how pick a good password to project your email account. Don’t use dictionary words, use mixed case,…
Red Hat Asks Supreme Court to Review Software Patents
Search for and read the latest Red Hat news and press releases about the people and products shaping the future of open source and open hybrid cloud technology.
Abusing Amazon Images
Created May 21, 2005. Last updated January 10, 2014. Thanks to Aryeh Leib Taurog for the hover code.