541
Intelligent Tracking Prevention 2.1
Note: Read about past updates to this technology in other blog posts about Intelligent Tracking Prevention, and the Storage Access API.
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 579 posts.
542
Cracking LUKS/dm-crypt passphrases
Linux uses dm-crypt in order to provide transparent disk or partition encryption. What are the options in case you need to recover passphrase from such encryption? There are already ready-made tools, but we have also produced and published our own in order to support newer LUKS format/ciphers/hashing.
543
The Information Apocalypse (2018)
My friend Aviv was recently the subject of a popular Buzzfeed article about the possibility of an impending “information apocalypse”. tl;dr: Aviv extrapolates from the fake news crisis that started in 2016 to a world in which anyone can create AI-assisted misinformation campaigns indistinguishable from reality to the…
544
545
546
Ransomware gangs now outing victim businesses that don't pay
As if the scourge of ransomware wasn’t bad enough already: Several prominent purveyors of ransomware have signaled they plan to start publishing data stolen from victims who refuse to pay up. To make matters worse, one ransomware gang has now created a public Web site identifying recent victim companies that have…
547
548
BPF port-based firewall for systemd services
The first post introduced the IPIngressFilterPath and IPEgressFilterPath feature for the upcoming systemd release 243 to support custom BPF programs as firewall for services. There was a simple example for a minimal BPF program written in C and how to load it for a systemd service. Then there was a standalone program…
549
x86 API Hooking Demystified (2012)
Simak Live Draw SDY Tercepat Hari Ini, Hasil Live SDY, Live Result Sidney, Dan Rekap Togel SDY Lengkap Dan Akurat Hanya Di Sini.
550
Information Security Mental Models
Mental models frame how we think about the world. This article describes how they work and why we need more of them in information security.
551
iPhone Apps Surreptitiously Communicated with Unknown Servers
Long news article (alternate source) on iPhone privacy, specifically the enormous amount of data your apps are collecting without your knowledge. A lot of this happens in the middle of the night, when you’re probably not otherwise using your phone: IPhone apps I discovered tracking me by passing information to third…
552
553
554
Obfuscated JavaScript, scam emails, and American Express
Reverse-engineering an obfuscated American Express phishing campaign from email to exfiltration endpoint.
555
556
Hidden Cam Above Bluetooth Pump Skimmer
Tiny hidden spy cameras are a common sight at ATMs that have been tampered with by crooks who specialize in retrofitting the machines with card skimmers. But until this past week I’d never heard of hidden cameras being used at gas pumps in tandem with Bluetooth-based card skimming devices.
557
558
559
Tightening up Privacy in Matrix
Matrix, the open protocol for secure decentralised communications
560
561
562
Modchips of the State
Collection of my projects and hacks.
563
AMD products are not susceptible to SPOILER exploit
Download drivers and software for AMD products — includes Windows and Linux support, auto-detect tools & detailed guides for installation.
564
Coalfire Comments on Penetration Tests for Iowa Judicial Branch
Coalfire is a cybersecurity and compliance services company that works with enterprises and tech businesses in FedRAMP, cloud migration, AI Risk, pen…
565
A dive into the world of MS-DOS viruses
This post is a textual version of a talk I gave at The 35th Chaos Computer Congress at the end of 2018. You can watch the talk that was recorded by the wonderful C3VOC team below if that’s your preferred medium:
566
EFF Statement on Assange Indictment and Arrest
While the indictment of Julian Assange centers on an alleged attempt to break a password—an attempt that was not apparently successful—it is still, at root, an attack on the publication of leaked material and the most recent act in an almost decade-long effort to punish a whistleblower and the...
567
Cybersecurity Checklist for Political Campaigns
Short-lived political campaigns rarely build formal security programs and often assume they're too small to attract serious attackers, but campaigns across the United States have been targeted by document theft and credential phishing. Six observed attacker tactics map to a short list of defensive priorities, starting…
568
Keyringless GnuPG
My favorite music player is Audacious . It follows the Winamp Classic tradition of not trying to manage my music library. Instead it waits patiently for me to throw files and directories at it. These selections will be informally grouped into transient, disposable playlists of whatever I fancy that day.
569
WireGuard for Windows Pre-Alpha Is Available
Users of kernels < 5.6 may also choose wireguard-lts or wireguard-dkms + linux-headers , depending on which kernel is used.
570
