511
A Unikernel Firewall for QubesOS
QubesOS provides a desktop operating system made up of multiple virtual machines, running under Xen. To protect against buggy network drivers, the …
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 578 posts.
512
Chrome 56 Beta: “Not Secure” Warning, Web Bluetooth, and CSS Position: Sticky
Unless otherwise noted, changes described below apply to the newest Chrome Beta channel release for Android, Chrome OS, Linux, Mac, and Wi...
513
Apple's desensitisation of people to fundamental security practices
My son turned 7 earlier this month. I've been getting him into coding [https://www.troyhunt.com/kids-and-code-simple-programming-on/] and teaching him the fundamentals of using a PC which I reckon is a pretty essential life skill these days. Part of that is helping him
514
Mozilla shouldn't copy Chrome's permission prompt for extensions
As Mozilla’s Web Extensions project is getting closer towards being usable, quite a few people seem to expect some variant of Chrome’s permission prompt to be implemented in Firefox. So instead of just asking you whether you want to trust an add-on Firefox should list exactly what kind of permissions an add-on needs…
515
516
Do Evil with ESP8266: Slow Down the WiFi
While hackers do good most of the time, we occasionally do evil and play a prank. The ESP8266, unlike JSON , allows me to do evil. Thus, I programmed the microcontroller for an evil purpose: slow down the WiFi.
517
Front-End Performance: The Dark Side
The latest news about Opera web browsers, tech trends, internet tips.
518
400Gbps: Winter of Whopping Weekend DDoS Attacks
Over the last month, we’ve been watching some of the largest distributed denial of service (DDoS) attacks ever seen unfold. As CloudFlare has grown we've brought on line systems capable of absorbing and accurately measuring attacks.
519
Hypernetes: Bringing Security and Multi-Tenancy to Kubernetes
While many developers and security professionals are comfortable with Linux containers as an effective boundary, many users need a stronger degree of isolation, particularly for those running in a multi-tenant environment. Sadly, today, those users are forced to run their containers inside virtual machines, even one…
520
Implementing a Tor relay from scratch in golang (2015)
Update from the author, over a decade later: Go has improved and so have my own skills. The conclusion of this article was that Go isn't the right language for the task I gave it, and that's no longer true today, but also wasn't true when I wrote the article. This article is user error, not a language issue.
521
522
Fuzzing with AFL is an Art
Using one of the test cases from the previous post , I examine what affects AFL's ability to find a bug placed by LAVA in a program. Along ...
523
How we fought bad ads in 2015
Here are some of the top areas we focused on in our fight against bad ads in 2015.
524
525
526
Some OS X Applications Vulnerable to MITM Attacks
Facebook bug bounty and story behind a vulnerability
527
Canary Watch, One Year Later
We announced Canary Watch a year ago as a coalition project to list Warrant Canaries and monitor them for changes or removal. Canary Watch was a joint project, with EFF, Freedom of the Press Foundation, NYU Law, Calyx and the Berkman Center.Along the way, the project has been part of the massive...
528
Android Full Disk Encryption Cold Boot Attack (2012)
At the end of 2011, Google released version 4.0 of its Android operating system for smartphones. For the first time, Android smartphone owners were supplied with a disk encryption feature that…
529
530
ProtonMail now the maintainer of OpenPGPjs email encryption library
OpenPGPjs is the world's most popular JavaScript PGP email encryption library and is used by millions of end users and hundreds of developers.
531
Signal: Safety number updates
The latest Signal release includes some changes to the way safety numbers work. Safety numbers allow Signal users to verify the privacy of their communication with a contact, either by comparing a number or by scanning a single QR code. We recently introduced this new design as an update to Sign...
532
A tale of a DNS exploit: CVE-2015-7547
A buffer overflow error in GNU libc DNS stub resolver code was announced last week as CVE-2015-7547. While it doesn't have any nickname yet (last year's Ghost was more catchy), it is potentially disastrous.
533
Practical Reverse Engineering Part 4 - Dumping the Flash
Fourth post in the series, detailing how to dump the router's flash chip directly with an SPI programmer, then split and decompress the resulting image into ...
534
The Sad State of HTML Email Input Fields and IDNs
Chrome and Firefox disagree on IDN addresses in type=email inputs: punycode, validity and the value JavaScript sees. Feature detection is the workaround.
535
536
Why the NSA Dump Isn't from an Insider
Between Lies and Bad Analysis
537
The Million-Key Question: Investigating the Origins of RSA Public Keys
Petr Švenda, Matúš Nemec, Peter Sekan, Rudolf Kvašňovský, David Formánek, David Komárek, and Vashek Matyáš, Masaryk University
538
Reproducible Signal builds for Android
As of our latest Android release, Signal builds are reproducible. Reproducible builds help to verify that the source code in our GitHub repository is the exact source code used to build the compiled Signal APK being distributed through Google Play.
539
540
UDP for games – encryption and DDoS protection
Quote: Yes, you DO need to encrypt your UDP traffic. And no, using UDP is NOT a valid excuse to skip encryption Another Quote: Personally, I prefer to think ...