4321
Price of a bot army revealed across online platforms
The first global index tracking real-time prices for buying fake account verifications on 500+ online platforms in every country has been launched by a team at the University of Cambridge.
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 8,771 posts.
4322
We X-Rayed a Suspicious FTDI USB Cable
That cheapo cable you bought online? Probably a counterfeit. We x-rayed a suspicious cable to show you exactly what that means, and why counterfeits work worse and wear out faster.
4323
Is Microsoft Stealing People’s Bookmarks?
I received email from two people who told me that Microsoft Edge enabled synching without warning or consent, which means that Microsoft sucked up all of their bookmarks. Of course they can turn synching off, but it’s too late. Has this happened to anyone else, or was this user error of some sort? If this is real, can…
4324
Securing Your Domain Against Seizure: Where Is Safe to Register a Domain Name?
The Gun.io blog: insights on hiring software developers, AI in engineering, distributed teams and how to build high-performing technical teams.
4325
HTTP/2 zero-day vulnerability results in record-breaking DDoS attacks
The “HTTP/2 Rapid Reset” attack exploits a weakness in the HTTP/2 protocol to generate enormous, hyper-volumetric DDoS attacks. Cloudflare has mitigated a barrage of these attacks in recent months, including an attack three times larger than any previous attack we’ve observed
4326
The phones of Ukrainian president Zelensky
Interesting telephone equipment in the offices of Ukrainian president Zelensky
4327
Let's Play a Game – find bugs in popular open-source projects
Find software and development products, explore tools and technologies, connect with other developers and more. Sign up to manage your products.
4328
Joanna Rutkowska leaves Qubes OS, joins Golem
Earlier this year, I decided to take a sabbatical. I wanted to reflect on my infosec work and decide what I would like to focus on in the coming years. As you probably know, I’ve spent the last nine years mostly fighting the battle to secure the endpoint, more specifically creating, dev...
4329
On being targeted by the NSA
As quoted in the original article on Das Erste: We've been thinking of state surveillance for...
4330
An update on Truecrypt
Several people have been asking for an update on our public audit of the Truecrypt disk encryption software. I’m happy to say that the project is on track and proceeding apace. Here I wanted …
4331
The House Intelligence Committee's Surveillance 'Reform' Bill Is a Farce
Two bills reauthorizing Section 702 of the Foreign Intelligence Surveillance Act are headed to the House floor. Meanwhile, FBI agents have used Section 702 databases to conduct millions of invasive searches for Americans’ communications, including those of protesters, racial justice activists, 19,000 donors to a…
4332
Hell is overconfident developers writing encryption code
Overconfident developers that choose to write their own cryptography code have plagued the information security industry since before it was even an industry. This in and of itself isn’t inhe…
4333
Patch OpenSSL on November 1 to avoid “critical” security vulnerability
The GlobalSign blog is the top resource to see what's trending in public key infrastructure (PKI), SSL/TSL, digital signing solutions, cybersecurity & more!
4334
Final Decision on Chromebook Case in Denmark
The Danish DPA issues an injunction in the Chromebook case
4335
4336
ProtonMail now offers elliptic curve cryptography
Proton Mail has become the first and only encrypted email provider to support elliptic curve cryptography (ECC), providing more security and performance.
4337
4338
Laptop Ban a Reaction to X-Ray Equipment Stolen by ISIS
On March 21st, 2017, the U.S. Department of Homeland Security ordered airlines flying to the U.S. out of 10 airports, mostly in Muslim-majority countries in the Middle East, to refuse to transport …
4339
How to submit an app to Apple’s App Store when it uses encryption
Carousel Apps was the company behind Watu, the application for temporary staffing agencies. It was co-founded by Julian Johnson and Pablo Fernandez. They both since have moved to other things. Julian is working on many projects, but his main one is improving education and quality of life for children in Africa which…
4340
The Dual LLM pattern for building AI assistants that can resist prompt injection
I really want an AI assistant: a Large Language Model powered chatbot that can answer questions and perform actions for me based on access to my private data and tools. …
4341
Everything you ever wanted to know about building a secure password reset (2012)
This content is now available in the Pluralsight course "Secure Account Management Fundamentals" [http://www.pluralsight.com/courses/secure-account-management-fundamentals] Recently I’ve had a couple of opportunities to think again about how a secure password reset function should operate, firstly whilst building this…
4342
4343
4344
2,800 New Data Breaches with 80M Records Added
tl;dr - a collection of nearly 3k alleged data breaches has appeared with a bunch of data already proven legitimate from previous incidents, but also tens of millions of addresses that haven't been seen in HIBP before. Those 80M records are now searchable, read on for the full story:
4345
4346
Signing Git commits with your SSH key (2021)
You could always sign Git commits with a GPG key, but now your SSH key is just as powerful!
4347
GPGMail 2 is finally here
GPG Mail 8 beta for macOS Golden Gate. Read the latest status, installation instructions, known issues and support plan information.
4348
Appeals court upholds right to post public laws online
SAN FRANCISCO—Technical standards like fire and electrical codes developed by private organizations but incorporated into public law can be freely disseminated without any liability for copyright infringement, a federal appeals court ruled Tuesday. Tuesday’s ruling by a three-judge panel of the U.S...
4349
What happens when you leak AWS credentials and how AWS minimizes the damage
I heard multiple times that AWS scans public GitHub repositories for AWS credentials and informs its users of the leaked credentials.
4350
Scaring People into Supporting Backdoors
Back in 1998, Tim May warned us of the “Four Horsemen of the Infocalypse”: “terrorists, pedophiles, drug dealers, and money launderers.” I tended to cast it slightly differently. This is me from 2005: Beware the Four Horsemen of the Information Apocalypse: terrorists, drug dealers, kidnappers, and child pornographers…