421
Incenser, or how NSA and GCHQ are tapping internet cables (2014)
A weblog about Signals Intelligence, Communications Security and top level telecommunications equipment
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 678 posts.
422
An Update on SolarWinds
We’d like to provide a further update to our customers in regards to the SolarWinds breach. At this point we reiterate the message we posted yesterday – we have not played any role in this breach, nor are we aware of any vulnerabilities in TeamCity that may have led to this breach, as we are also not aware of any…
423
Call of Duty Adds Kernel Level Driver for Anti-Cheat
RICOCHET Anti-Cheat fights unfair play across Warzone™ and Vanguard; new kernel-level driver coming first to Call of Duty: Warzone
424
How We Proved the Eth2 Deposit Contract Is Free of Runtime Errors
Consensys is a blockchain software company building the tools, infrastructure and research that power the new Era of Decentralized Finance, for a more secure and open economy
425
GitHub Actions update: Helping maintainers combat bad actors
The trustworthiness of our platform is crucial, and our team is committed to developer productivity and Actions performing the way we intended.
426
SimpleVisor – Intel VT-x hypervisor in 500 lines of C code
Simplevisor : SimpleVisor is a simple, portable, Intel VT-x hypervisor with two specific goals: using the least amount of assembly code (10 lines), and having the smallest amount of VMX-related code to support dynamic hyperjacking and unhyperjacking (that is, virtualizing the host state from within the host). It runs…
427
Managed by Bots: surveillance of gig economy workers
What if your boss was an algorithm? What would you do if your employer suddenly fired you or reduced your pay without telling you why? And without being willing to give you a reason when you ask for one?
428
No, I did not hack your MS Exchange server
New data suggests someone has compromised more than 21,000 Microsoft Exchange Server email systems worldwide and infected them with malware that invokes both KrebsOnSecurity and Yours Truly by name.
429
Amazon Assistant lets Amazon track your every move on the web
Amazon Assistant browser extension delegates its wide range of privileges to Amazon web services. The potential for misuse is enormous.
430
AWS acquires Wickr
We’re excited to share that AWS has acquired Wickr, an innovative company that has developed the industry’s most secure, end-to-end encrypted, communication technology. With Wickr, customers and partners benefit from advanced security features not available with traditional communications services – across messaging…
431
An Illustrated Guide to Elliptic Curve Cryptography Validation
Cutting-edge cyber security research from NCC Group. Find public reports, technical advisories, analyses, & other novel insights from our global experts.
432
433
Clubhouse doesn’t value privacy, security or accessibility
It is tempting to excuse Clubhouse’s flaws as growing pains, but the app’s design and rollout illustrate just how little Silicon Valley and its venture capital backers have learned.
434
A few thoughts on Fuchsia security
I want to say a few words about my current adventure. I joined the Fuchsia project at its inception and worked on the daunting task of buil...
435
Weaponizing Middleboxes for TCP Reflected Amplification
Censors pose a threat to the entire Internet.
436
Reverse Engineering a Docker Image
This started with a consulting snafu: Government organisation A got government organisation B to develop a web application. Government organisation B subcontracted part of the work to somebody. Hosting and maintenance of the project was later contracted out to a private-sector company C. Company C discovered that the…
437
438
Crypto wallet security as seen by security engineers
How to build secure crypto wallets, analysing issues found during crypto wallet security audits.
439
DraftKings: a $21B SPAC betting it can hide its black market operations
Initial Disclosure: After extensive research, we have taken a short position in shares of DraftKings, Inc. This report represents our opinion, and we encourage every reader to do their own due diligence. Please see our full disclaimer at the bottom of the report.
440
Privacy Update: Third-party Tracking
Read this post for a privacy update regarding third-party tracking code on our website.
441
It’s time to stop using SMS for security
By now most infosec professionals are aware of various ways SMS text messaging can be hijacked. For example so-called “SIM Swap” attacks…
442
OAuth 2.0 Authentication Vulnerabilities
While browsing the web, you've almost certainly come across sites that let you log in using your social media account. The chances are that this feature is ...
443
SugarCoat: Private browsing without breaking the web
A team of computer scientists at the University of California San Diego and Brave Software. have developed a tool that will increase protections for users’ private data while they browse the web.
444
macOS extensions are moving away from the kernel
Management of kernel extensions has changed significantly in Big Sur and later. This overview for users contrasts kexts with user-level extensions which are replacing them.
445
What's in email tracking links and pixels?
This investigation into email tracking attempts to deconstruct tracking links and pixels and highlight the data that is being collected. It covers Mailchimp, …
446
Analyzing the legal implications of GitHub Copilot
Explore the potential legal challenges GitHub Copilot faces regarding copyright infringement and license compliance of its code suggestions.
447
New Report Shows Cops Used Ring Cameras to Monitor Black Lives Matter Protests
San Francisco - The Electronic Frontier Foundation (EFF) has obtained emails that show that the Los Angeles Police Department (LAPD) sent at least one request—and likely many more—for Amazon Ring camera video of last summer’s Black-led protests against police violence. In a report released today,...
448
Porn Spam on Google Maps
User Generated Content is great, innit? As a company, I want users to submit photos, so I don't have to do any content curation. Moderation? Nah mate, stick some AI on there to filter out anything offensive and we're golden. *sigh* James Whatley (inactive)@WhatleydudeSurprised Loch Ness isn't trending tbqh.❤️ 7💬 0🔁…
449
Vulnerabilities in chips in 37% of smartphones
Highlights Check Point Research discovered vulnerabilities in MediaTek’s chips, embedded in 37% of all smartphones globally CPR discovered several %
450
HiveNightmare a.k.a. SeriousSAM – anybody can read the registry in Windows 10
This is the story of how all non-admin users can read the registry — and so elevate privileges and access sensitive credential information…