2401
Gmail E2E is as terrible as expected
Recently, Google introduced E2E encryption in Gmail. It went bad.
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 4,335 posts.
2402
Getting debug access on a Brother printer over Telnet
As it turns out, the Brother NC-8700w Command Console is more interesting than it first appears.
2403
RTFM 0day in iOS apps
DIN INFO IP Adresse ( IPv4 eller IPv6) 104.165.132.197 Port: 47376 Hostnavn: 104.165.132.197 X-Forward IP Adresse(r): Browser (UserAgent): Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 Forespørgsels Timestamp (Unix tid): 1793882617 Forespørgsels…
2404
How I could delete any video on YouTube
About Vulnerability Research Grants and a little story how I could delete any video on YouTube.
2405
2406
Evading Airport Security
The news is reporting about Evan Booth, who builds weaponry out of items you can buy after airport security. It’s clever stuff. It’s not new, though. People have been explaining how to evade airport security for years. Back in 2006, I—and others—explained how to print your own boarding pass and evade the photo-ID…
2407
Google Forcing Nest Cameras’ Visual Indicator Light To Be On
Google Forcing Nest Cameras Visual Indicator Light To Be On
2408
Remote Code Execution in Marvel Rivals Game
Reverse Engineering: I discovered a serious Remote Code Execution (RCE) vulnerability in a popular game that could let attackers run code on your PC. Watch how I found it, reported it, and what you can do to stay safe.
2409
Flurry of Calls Among Saudi Staff and Spy Coincided with 9/11 Hijackers’ Arrival
Future al Qaeda cleric Anwar al-Awlaki also connected
2410
500M Avira antivirus users introduced to cryptomining
Many readers were surprised to learn recently that the popular Norton 360 antivirus suite now ships with a program which lets customers make money mining virtual currency . But Norton 360 isn’t alone in this dubious endeavor: Avira antivirus — which has built a base of 500 million users worldwide largely by making the…
2411
How Ethereum can be stolen through DNS rebinding
The Post has been moved here
2412
2413
2414
OkCupid's “Removed” Visitor API
A blog about programming, the tech industry, and tech education.
2415
A peek into Reddit's anti-spam internals
How Reddit accidentally leaked its spamurai system.
2416
2417
Apple Has Begun Scanning Your Local Image Files Without Consent
Preface: I don’t use iCloud. I don’t use an Apple ID. I don’t use the Mac App Store. I don’t store photos in the macOS “Photos” application, even locally. I…
2418
Xcode constantly phones home
Building StopTheMadness Pro in Xcode is usually very fast, because my project doesn't use any Swift. It's a combination of Objective-C, which compiles much more quickly than Swift, and JavaScript, which doesn't need to be compiled. However, sometimes the builds were very slow for some strange reason. Checking the…
2419
Common LibreSSL porting mistakes
The other day I wrote an article discussing LibreSSL , and the common mistakes being made by those thinking they know how to port it to oth...
2420
SELinux bypasses
This post aims at giving an overview of what SELinux is, how it is implemented, and how to bypass it, from the point of view of Android kernel exploitation.
2421
2422
2423
RSA chief believed cryptographers’ warnings on Dual EC DRBG lacked merit (2014)
"When, last September, it became possible that concerns raised in 2007 might have merit as part of a strategy of exploitation, NIST as the...
2424
Zero Knowledge Proofs: An illustrated primer
One of the best things about modern cryptography is the beautiful terminology. You could start any number of punk bands (or Tumblrs) named after cryptography terms like ‘hard-core predicate&#…
2425
2426
Three ways formally verified code can go wrong in practice
"Correct" doesn't mean "correct" when correctly using "correct"
2427
Anonymous message to NATO
Greetings, members of NATO. We are Anonymous. In a recent publication, you have singled out Anonymous as a threat to “government and th...
2428
2429
Gone (Almost) Phishin'
This is a little embarrassing to share, but I’d rather someone else be able to spot a dangerous scam before they fall for it. So, here goes. One evening last month, my Apple Watch, iPhone, and Mac …
2430
8M GitHub profiles were leaked from GeekedIn's MongoDB
Let me make it crystal clear in the opening paragraph: this incident is not about any sort of security vulnerability on GitHub's behalf, rather it relates to a trove of data from their site which was inappropriately scraped and then inadvertently exposed due to a vulnerability in another service.