1
New
The latest blog posts to take off on Hacker News. 431 posts.
2
On Hacking MicroSD Cards
Today at the Chaos Computer Congress ( 30C3 ), xobs and I disclosed a finding that some SD cards contain vulnerabilities that allow arbitrary code execution — on the memory card itself. On the dark side, code execution on the memory card enables a class of MITM (man-in-the-middle) attacks, where the card seems to be…
3
The UK "Porn" Filter Blocks Kids' Access To Tech, Civil Liberties Websites
It fell to the UK Tories to actually implement the Nanny State. Too bad Nanny Tory does not want kinds to read up on tech web sites, or civi...
4
XSS in Gmail through Rapportive
A blog on security, malware, cryptography, pentesting, javascript, php and whatnots
5
Snapchat - GibSec Full Disclosure
A series of nicely formatted documents about Snapchat by GibSec.
6
Telegram secret chat geolocation leak
UPD: I've just received confirmation from Telegram, that a patched version was released a few hours ago. Here is the patch on github....
7
8
9
Who's Selling Credit Cards From Target
The previous two posts on this blog have featured stories about banks buying back credit and debit card accounts stolen in the Target hack and that ended up for sale on rescator[dot]la , a popular underground store. Today’s post looks a bit closer at open-source information on a possible real-life identity for the…
10
Geohot presents an evasi0n7 writeup
Hi, I'm on a plane from SFO to New York, and made something for you. Not even a rap song. ******* geohot( @tomcr00se ) presents an evasi0n7 writeup ******* == Intro == I was bored, reversed, wrote this write-up, and wanted to do something with it. I tried to sell it to the Chinese for $7 and a trip to the Pizza Hut…
11
12
13
Blackmail fail
In which the author receives surprising offers from kind strangers
14
Crowdsourcing a More Secure Future
A guy from Russia just earned $100,000. Crowdsourcing a More Secure Future
15
Smartphone can use its microphone to extract RSA decryption key from laptop
This is neat: Here, we describe a new acoustic cryptanalysis key extraction attack, applicable to GnuPG’s current implementation of RSA. The attack can extract full 4096-bit RSA decryption keys from laptop computers (of various models), within an hour, using the sound generated by the computer during the decryption of…
16
17
18
An update on Truecrypt
Several people have been asking for an update on our public audit of the Truecrypt disk encryption software. I’m happy to say that the project is on track and proceeding apace. Here I wanted …
19
Browser Extension Password Managers Exposing Passwords Everywhere
Advancements in password cracking and frequent theft of password databases endanger single-factor password authentication systems. Password managers are one of the only tools available that can help users remember unique high-entropy passwords, and other secrets such as credit card numbers, for a large number of…
20
Trevor Perrin requests removal of NSA from IETF Crypto Review
Search IETF mail list archives
21
GnuPG - 16 Years of protecting privacy
In case you are not automatically redirected, please follow this link to https://gnupg.org/blog .
22
23
24
The Fallacy of Cracking Contests (1998)
In this issue: The Fallacy of Cracking Contests How to Recognize Plaintext News The Doghouse: Iomega Zip Disks Counterpane Systems News Final Report from the Commerce Department Technical Advisory Committee on Key Recovery Comments From Readers About "CRYPTO-GRAM"
25
26
Bitcoin Private Key Necromancy
tl;dr: https://github.com/pierce403/keyhunter ~ The Longer Version ~ A few weeks ago, a friend came to me with a problem. Way back...
27
28
BitHub = Bitcoin + GitHub. An experiment in funding privacy OSS
At Open Whisper Systems, we often get emails from people who’d like to donate money to the project. For an OSS project, particularly one that aspires to a collective sense of ownership, handling donations is not always entirely straightforward. The fundamental contradiction is that while donatio...
29
30
