2101
Verizon, caught red-handed
Verizon has now on multiple occasions refused to connect my Google Nexus 7 LTE tablet, though the device was publicized widely as working on Verizon and...
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 4,335 posts.
2102
Online Cheating Site AshleyMadison Hacked
Large caches of data stolen from online cheating site AshleyMadison.com have been posted online by an individual or group that claims to have completely compromised the company’s user databases, financial records and other proprietary information. The still-unfolding leak could be quite damaging to some 37 million…
2103
"No way to prevent this" say users of only language where this regularly happens
Xe Iaso's personal website.
2104
A story about bypassing air Canada's in-flight network restrictions
1 Prologue A while ago, I took a flight from Canada back to Hong Kong - about 12 hours in total with Air Canada. Interestingly, the plane actually had WiFi: However, the WiFi had restrictions. For Aeroplan members who hadn’t paid, it only offered Free Texting, meaning you could only use messaging apps like WhatsApp…
2105
Microsoft has released software updates to plug at least 570 security holes
Microsoft Corp. today released software updates to plug at least 570 security holes in its Windows operating systems and other software, almost triple the number of vulnerabilities the software giant fixed in its record-smashing Patch Tuesday release last month. Microsoft attributed the burgeoning patch counts to…
2106
Joe Biden tried to ban email encryption back in 1991
There are rumors that the Obama campaign used an Ubuntu-based Linux distribution, though further analysis seems to indicate that these images were fakes. It would be great if someone from the Obama…
2107
Prompt injection attacks against GPT-3
Riley Goodside, yesterday: Exploiting GPT-3 prompts with malicious inputs that order the model to ignore its previous directions. pic.twitter.com/I0NVr9LOJq- Riley Goodside (@goodside) September 12, 2022 Riley provided several examples. Here’s …
2108
Encrypted Backup Shootout
Recently I have been spending time on improving the performance of bupstash (my encrypted backup tool), and wanted to compare it to some existing tools to try and find its relative performance in the backup tool landscape.
2109
PayPal's Beautiful Demonstration of Extended Validation FUD
Sometimes the discussion around extended validation certificates (EV) feels a little like flogging a dead horse. In fact, it was only September that I proposed EV certificates are already dead [https://www.troyhunt.com/extended-validation-certificates-are-dead/] for all sorts of good reasons that have only been…
2110
2111
Jerks on the Internet: what my first DDoS taught me
Ambitious software engineer
2112
NTP Pool Bad Actors: The Rising Sophistication of Network Scanning
Gone are the days when computers didn't need firewalls. We are now living in an internet security arms race and your personal information ...
2113
How I block all 26M of your curl requests
A journey in packet filtering
2114
Déjà vu: Ghostly CVEs in my terminal title
As I've spoken and written about all modern terminals are actually "emulating" something dating from the 1970s.
2115
2116
Reverse-Engineering YouTube: Revisited
Back in 2017 I wrote an article in which I attempted to explain how YouTube works under the hood, how it serves streams to the client, and also how you can exploit that knowledge to download videos from the site. The primary goal of that write-up was to…
2117
Advanced web security topics
(Updated 22 May 2020) This post discusses web security issues that I come across – so far thankfully mostly by reading about them. It is a work in progress which I’ll keep updating. The…
2118
Security through obscurity is not bad
Why security through obscurity still matters: not as your only defence, but as a practical layer that raises attacker cost.
2119
Secret Service Warns of Chip Card Scheme
The U.S. Secret Service is warning financial institutions about a new scam involving the temporary theft of chip-based debit cards issued to large corporations. In this scheme, the fraudsters intercept new debit cards in the mail and replace the chips on the cards with chips from old cards. When the unsuspecting…
2120
OS X – Safe, yet horribly insecure
Introduction I have had this article planned since the end of 2009 and have had it as a skeleton since then. I wanted to point out the many problems with OS X security and debunk the baseless myth …
2121
Bypassing Gmail's spam filters with ChatGPT
If you haven’t been living under a rock, you probably already know what ChatGPT is. I am an operator of high bandwidth Tor exit relays, and with that, I get a lot of abuse complaints. Combined with the fact that I have ai lease on a “/24” of IPv4 space, basically a block of 256 IP addresses, I have the IP space’s…
2122
Fake emergency search warrants draw scrutiny from Capitol Hill
On Tuesday, KrebsOnSecurity warned that hackers increasingly are using compromised government and police department email accounts to obtain sensitive customer data from mobile providers, ISPs and social media companies. Today, one of the U.S. Senate’s most tech-savvy lawmakers said he was troubled by the report and…
2123
Cities panic over having to release mass surveillance recordings
Flock's 'licence plate readers' read much more than license plates. A judge says what they record must be released.
2124
Attack of the Week: Airdrop Tracing
It’s been a while since I wrote an “attack of the week” post, and the fault for this is entirely mine. I’ve been much too busy writing boring posts about Schnorr signatures!…
2125
European Parliament Voted to Ban Remote Biometric Surveillance
It’s not actually banned in the EU yet—the legislative process is much more complicated than that—but it’s a step: a total ban on biometric mass surveillance. To respect “privacy and human dignity,” MEPs said that EU lawmakers should pass a permanent ban on the automated recognition of individuals in public spaces…
2126
Anti-fingerprinting extensions tend to make fingerprinting easier
Browser extensions claiming to protect against fingerprinting will typically result in more data available for fingerprinting.
2127
2128
How SMS fraud works and how to guard against it
or why Twitter disabled SMS 2FA 💬
2129
2130
The iPhone 11 Pro’s Location Data Puzzler
One of the more curious behaviors of Apple’s new iPhone 11 Pro is that it intermittently seeks the user’s location information even when all applications and system services on the phone are individually set to never request this data. Apple says this is by design, but that response seems at odds with the company’s…