1471
Practical Web Cache Poisoning
In this paper I'll show you how to compromise websites by using esoteric web features to turn their caches into exploit delivery systems
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 2,089 posts.
1472
Self driving cars and beyond
The story of technology is not unlike what often happens in dramatic stories and plays, where a “deus ex machina” or character drops down magically from the skies onto our world stage. But in reality, technology never comes so suddenly, or in such an isolated manner: There’s an entire ecosystem that grows up around…
1473
EU GDPR – Another reason for SaaS to reconsider on-premise
We review GDPR's impact on SaaS vendors and data collection practices and how it may reduce the cost disparity between hosted SaaS and on-premises Private SaaS.
1474
1475
Introducing Telegram Passport
Meet Telegram Passport – a unified authorization method for services that require personal identification.
1476
1477
Evolution of the English Alphabet
Buy the poster | Watch a video explanation
1478
Google Data Collection research
While the public has been focused on the ongoing Facebook and Cambridge Analytica scandal, Google has largely avoided public scrutiny about its data collection practices despite having the ability to collect far more personal data about consumers across a variety of touchpoints. In the new report “Google Data…
1479
1480
New North American Trade Deal Has Bad News for Canadian Copyright
Earlier this week, the U.S. Trade Representative announced a replacement deal for the North American Free Trade Agreement, the nearly 25-year-old trade deal between the U.S., Mexico, and Canada. Amid the long list of tariff-free products and restriction-free cheese names [PDF] in the new trade deal...
1481
Firefox: Retained Display Lists
Hot on the heels of Off-Main-Thread Painting, our next big Firefox graphics performance project is Retained Display Lists! I you haven’t already read it, I highly recommend reading David’s post abo…
1482
Introducing the Apollo GraphQL Platform
We started Apollo in 2016 with the objective of lowering the barriers to making high-quality, modern apps. Since then, we have seen tremendous growth in our community with nearly 500,000 downloads per week and companies like Audi, the New York Times, Airbnb, and CNBC all making strategic commitments to GraphQL. With…
1483
First Lightning mainnet release
Today, we at Lightning Labs are announcing the release of lnd 0.4-beta ! This release marks the 4th major release of lnd and the first Lightning mainnet beta, an important milestone. With this release, lnd has gained a considerable feature set, deeper cross-implementation compatibility, a new specialized wallet seed…
1484
SQLite: Infinite loop due to the ‘order by limit’ optimization
Verify that you are human by typing in the 8-character text password shown below.
1485
Mailinator.com: Anatomy of a Spammy Campaign
Mailinator is a popular disposable email service. It's also become a great tool for QA Teams to test email receipt, acknowledgment, authen...
1486
1487
You can't contain me: elevation-of-privilege vulnerability in Docker for Windows
I have been continuing my journey of searching for windows breakout vulnerabilities in popular applications and one that I discovered in March I found intere...
1488
1489
How JPEG actually works (2006)
Access to this page requires authorization. You can try signing in or changing directories .
1490
1491
1492
1493
An overview of the top web hacking techniques of 2017
The verdict is in! Following 37 nominations whittled down to a shortlist of 15 by a community vote, our panel of experts has conferred and selected the top 10 web hacking techniques of 2017 (and 2016)
1494
TunnelBear Joins McAfee
TunnelBear joins McAfee but will continue to develop the bear-filled products you've come to know and love.
1495
1496
Our Use of Haskell and Elm
Over the last year, our team has built a beautiful and advanced Smart Cities system using functional languages. I wrote this document to explain our technology choices to stakeholders and partners.
1497
How Spam Filtering Works: From SPF to DKIM to Blacklists
There is no one key to making sure WordPress site emails are sent reliably and stay out of the recipient’s spam folder. A common recommendation is to use a dedicated…
1498
Bringing Vulkan everywhere
gfx-rs is a project bringing efficient cross-platform graphics to rust. This blog supposedly hosts the major milestones, concepts, and recaps of the project.
1499
Qubes OS 4.0 has been released
After nearly two years in development and countless hours of testing, we’re pleased to announce the stable release of Qubes OS 4.0! Major changes in version 4.0 Version 4.0 includes several fundamental improvements to the security and functionality of Qubes OS: The Qubes Admin API Qubes...
1500