Every blog post that took off on Hacker News, ranked by the votes of its best submission. 8,771 posts.
Introduction This post is going to be discussing how I was able to get the primary/hidden email address for any Facebook user. This also happens to be my first accepted bug to the Facebook Bug Bounty Program. Background Back in September I got an email notification from Facebook stating
Kaspersky Password Manager uses a unique approach to maximize the attack surface. A quick introduction.
TouchEn nxKey is supposed to combat keyloggers. Instead, this application made writing a keylogger extremely simple, allowed attacking banking websites and more.
Up until mid-2010, any rogue website could get a good sense of your browsing habits by specifying a distinctive :visited CSS pseudo-class ...
A gentle introduction to reverse-engineering vintage synthesiser ROMs using the Ghidra disassembler.
Aaron’s law, the proposed law named in honor of Internet hero Aaron Swartz was reintroduced last week by Rep. Zoe Lofgren (D-Calif.) and Senator Wyden (D-Ore.), with new co-sponsor Senator Rand Paul (R-Ky.). This bill is the same as the one introduced in 2013 and we call upon Congress to move it...
Last Thursday I went to the Joyent office for Node Office Hours — I wanted to talk to Isaac about running a private NPM registry .
Basic security precautions for non-profits and journalists in the United States, early 2019.
During his first term, President Barack Obama declared October 2009 to be “National Information Literacy Awareness Month,” emphasizing that, for students, learning to navigate the online world is as important a skill as reading, writing and arithmetic. It was a move that echoed his predecessor's...
You're probably reading this page because you've attempted to access some part of my blog (Wandering Thoughts) or CSpace , the wiki thing it's part of. Unfortunately you're using a browser version that my anti-crawler precautions consider suspicious, most often because it's too old (most often this applies to versions…
The Google Distributed Cloud air-gapped appliance is an integrated hardware and software solution that lets you run workloads at the tactical edge.
Today, almost everything about our lives is digitally recorded and stored somewhere. Each credit card purchase, personal medical diagnosis, and preference about music and books is recorded and then used to predict what we like and dislike, and—ultimately—who we are. This often happens without our...
And it's so much worse than you think
It's fascinating to see how creative people can get with breached data. Of course there's all the nasty stuff (phishing, identity theft, spam), but there are also some amazingly positive uses for data illegally taken from someone else's system. When I first built Have I Been Pwned
the vent for my mind
This post describes the implementation and use of pledge() and unveil() in SerenityOS.
On 30th September 2021, the root certificate that Let's Encrypt are currently using, the IdentTrust DST Root CA X3 certificate, will expire. You may or may not need to do anything about this Root CA expiring, but I'm betting a few things will probably break on that day
I was recently asked whether it was safe to store session tokens using Web Storage (sessionStorage/localStorage) instead of cookies. Upon googling this I found the top results nearly all assert that w
Secret Manager is a new GCP product that securely and conveniently stores API keys, passwords, certificates, and other sensitive data.
Maersk is the world’s largest integrated shipping and container logistics company.
During October 2015 the curl web site sent out 1127 gigabytes of data. This was the first time we crossed the terabyte limit within a single month. Looking at the stats a little closer, I noticed that in July 2015 a particular single package started to get very popular. The exact URL was…
Recent years have seen a boom in the adoption of surveillance technology by governments around the world, including spyware that provides its purchasers the unchecked ability to target remote Internet users' computers, to read their personal emails, listen in on private audio calls, record...
In the past few years, a technique called browser fingerprinting has received a lot of attention because of the risks it can pose to privacy. What is it? How is it used? What is Tor Browser doing against it? In this blog post, I’m here to answer these questions.
