3661
The Fraud Supply Chain
Fraud is largely conducted by professionals operating in specialized firms, which have their own ecosystem of evil.
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 8,770 posts.
3662
Campaign “Reclaim Your Face” Calls for a Ban on Biometric Mass Surveillance
Civil society across Europe launches the “Reclaim Your Face” campaign, demanding that local and national authorities listen to their communities about the serious risks of using facial recognition and other biometric technologies in public spaces. The newly formed coalition calls to ban biometric mass surveillance, in…
3663
How NSA and GCHQ are tapping internet cables
A weblog about Signals Intelligence, Communications Security and top level telecommunications equipment
3664
3665
An Open Letter to Pixsy CEO Kain Jones, Who Keeps Sending Me Legal Threats
Once is happenstance. Twice is coincidence. Three times is enemy action.
3666
Is Your VirtualBox Reading Your E-Mail? Reconstruction of FrameBuffers from VRAM
This document describes a method of reading and displaying previously used framebuffers from a variety of popular graphics cards. In all 4 tested laptops the content of the VRAM was not erased upon reboot. It is also possible to show that the content of the host VRAM can be accessed from a VirtualBox guest, thereby…
3667
About the supposed factoring of a 4096 bit RSA key
This blog is written by Hanno Böck. Unless noted otherwise, its content is licensed as CC0 .
3668
The poisoned NUL byte, 2014 edition
Posted by Chris Evans, Exploit Writer Underling to Tavis OrmandyBack in this 1998 post to the Bug...
3669
Why Telegram is insecure (2015)
Telegram, the encrypted messaging app loved by terrorists, has been in the news lately. Terrorists have long used existing commercial and…
3670
Letsencrypt, the Good, the Bad and the Ugly
Letsencrypt is a pretty neat concept: free secure certificates for web servers, in order to increase the adoption of HTTPS across the web. The basic idea is that certificates should be free, that the barrier to install them should be as low as possible and that updating certificates should be automated. It protects…
3671
3672
Avoid Consumer Routers
Consumer Routers are not secure
3673
How to effectively evade the GDPR and the reach of the DPA
Musings on Information Security and Privacy Risk Management - Thierry Zoller.
3674
3675
The Curious Case of MD5
Recently I came across a puzzling fact: the International Criminal Court hashes electronic evidence with MD5, even though MD5 is badly broken. So, why are lawyers using broken, outdated technology? The answer involves the common law system, cultural isolation, and a single man named Don L. Lewis.
3676
Unintended consequences of blocking IP addresses
A discussion about IP blocking: why we see it, what it is, what it does, who it affects, and why it’s such a problematic way to address content online.
3677
3678
Preparing Rustls for Wider Adoption
It’s time for the Internet to move on to more secure software, and that’s why our Memory Safety Initiative is coordinating work to make further improvements to the Rustls TLS library.
3679
3680
How encryption for Cinema Movies works
The Cinema Industry is using its own standards for creating and distributing movies in a secure way. The DCI (Digital Cinema Initiatives) specification defines everything from file formats and encryption to the projection systems itself.
3681
Sei pays out $2M bug bounty
In April 2024, I found and reported two critical bugs to Sei Network concerning their layer-1 blockchain. One of these issues impacted the chain’s availability, and the other its integrity. The Sei Foundation awarded me $75,000 and $2,000,000 respectively for these reports.
3682
SSH as a Sudo Replacement
A major caveat in tools like sudo and doas for that matter is that they rely on setuid binaries and privilege escalation in order to run commands as root.
3683
The ways we contain Claude across products
As agents grow more capable, so does their potential blast radius. Here's what we learned building containment for claude.ai, Claude Code, and Cowork.
3684
Tor Browser 10
Tor Browser 10.0 for Desktop is now available from the Tor Browser download page and also from our distribution directory.
3685
3686
Cryptic Rumblings Ahead of First 2020 Patch Tuesday
Sources tell KrebsOnSecurity that Microsoft Corp. is slated to release a software update on Tuesday to fix an extraordinarily serious security vulnerability in a core cryptographic component present in all versions of Windows . Those sources say Microsoft has quietly shipped a patch for the bug to branches of the U.S…
3687
The funny rules of SpamAssassin in 2023
This investigation was surprising to me so I thought it would be interesting to share my findings and I hope you'll like it.
3688
Homeland Security’s New Database to Include Faces, DNA, and Relationships
So why do we know so little about it?The U.S. Department of Homeland Security (DHS) is quietly building what will likely become the largest database of biometric and biographic data on citizens and foreigners in the United States. The agency’s new Homeland Advanced Recognition Technology (HART)...
3689
Piercing Through WhatsApp’s Encryption
WhatsApp has been plagued by numerous issues in their security: easily stolen passwords, unencrypted messages and even a website that can change anyone’s status. But that streak is not yet over.
3690
Rule 41 Proposes to Grant New Hacking Powers to the Government
The government hacking into phones and seizing computers remotely? It’s not the plot of a dystopian blockbuster summer movie. It’s a proposal from an obscure committee that proposes changes to court procedures—and if we do nothing, it will go into effect in December. The proposal comes from the...