541
Tracing SSL/TLS connections using eBPF
Pixie Blog
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 678 posts.
542
The world needs a software bill of materials
“Sunburst” was the most sophisticated hack the world has ever seen. One of the most urgent lessons so far learned from the attack: we need…
543
Zerotier – multiple vulnerabilities lead to private network access
Zerotier - Multiple vulnerabilities leading to identity hijacking and unauthorised private network access.
544
Stopping FTP support in Firefox 90
The File Transfer Protocol (FTP) has long been a convenient file exchange mechanism between computers on a network. While this standard protocol has been supported in all major browsers ...
545
Threat Actors Now Target Docker via Container Escape Features
We provide a technical analysis of a container abuse attack that features a payload that’s specifically crafted to be able to escape privileged Docker containers.
546
547
Unusual login activity was due to bug
As part of our commitment to security, we regularly monitor our services for actual, suspected, or attempted malicious or unusual activity. We recently investigated reports of an uptick of users recei[..]
548
How to exfiltrate code from Bitbucket
Every year or so, something compels me to start over with a fresh OS image. Most recently, that something was an unfortunate water bottle incident. Once again, I need to pull down my digital life from the internet. The code and assets for this blog currently live in a 500 MB Git repository, which was hosted on…
549
Would Rust Secure Curl?
Rewriting programs in Rust has become a bit of a meme and one program that has been discussed a lot is cURL .
550
Analysis and reverse-engineering of the original Starlink router
Honestly, I love the design of this thing. It reminds me of something from the good old sci-fi.
551
The case of the recursive resolvers: What happened during Slack’s DNSSEC rollout
On September 30th 2021, Slack had an outage that impacted less than 1% of our online user base, and lasted for 24 hours. This outage was the result of our attempt to enable DNSSEC — an extension intended to secure the DNS protocol, required for FedRAMP Moderate — but which ultimately led to a series of…
552
553
554
A distributed spam attack across the public Matrix network
Matrix, the open protocol for secure decentralised communications
555
Windows 10 RCE: The exploit is in the link
Chaining a misconfiguration in IE11/Edge Legacy with an argument injection in a Windows 10/11 default URI handler and a bypass for a previous Electron patch, we developed a drive-by RCE exploit for Windows 10. The main vulnerability in the ms-officecmd URI handler has not been patched yet and can also be triggered…
556
Inverting PhotoDNA
Ribosome inverts Microsoft PhotoDNA hashes using machine learning.
557
Vivaldi: Violating CoC on forum may close your email account
We’re building a Community that is happy, kind, and constructive. Read our Code of Conduct for and find out how you can help us get there.
558
Improving first impressions on Signal
The phenomenon of unsolicited and unwanted messaging dates back to the earliest communication platforms: from prehistoric cave graffiti and postal chain letters to popup ads and robocalls. To prevent spam, most online services rely on large-scale inspection of plaintext conversation content or de...
559
Backblaze Privacy Update: Third-Party Tracking
Read this post for a privacy update regarding third-party tracking code on our website.
560
Typed Programs Don't Leak Data
Mistral Contrastin's thought bubble, blog, and personal revelations.
561
562
563
No U PNP
Previously on Deep Space Nine, we discussed (read: I complained about) the short life and quick death of DLNA. On the way, I mentioned DLNA's dependence on UPnP as an underlying autoconfiguration protocol. Let's talk a bit more about UPnP, because it's 1) an interesting protocol, 2) widely misunderstood, and 3)…
564
Serial swatter who caused death gets five years in prison
A 18-year-old Tennessee man who helped set in motion a fraudulent distress call to police that led to the death of a 60-year-old grandfather in 2020 was sentenced to 60 months in prison today.
565
Black Lotus Labs uncovers Linux executables deployed as stealth Windows loaders
The Lumen blog and newsroom is your source for business technology news and insights, customer stories, press and media, and trending articles.
566
Why Isn’t Telegram End-to-End Encrypted by Default (2017)
telegra.ph/why-isnt-telegram-end-to-end-encrypted-by-default-08-142021127 points145 commentscited by 11Security & Privacy details
I've been getting this question more often this year. It's based on the wrong assumption that some other popular messaging apps such as WhatsApp are "end-to-end encrypted by default", while Telegram is not. This post is intended to disprove this myth that has been so carefully crafted by Facebook/WhatsApp marketing…
567
568
Multiple vulnerabilities in WP Fastest Cache plugin
We uncovered multiple vulnerabilities in WP Fastest Cache plugin that could grant attackers access to your privileged information. We strongly recommend that you update to the latest version of the plugin and have an established security solution on your site, such as Jetpack Security.
569
Fighting cryptojacking and doing good things with content security policies
If you've landed on this page because you saw a strange message on a completely different website then followed a link to here, drop a note to the site owner and let them know what happened. If, on the other hand, you're on this page because you're
570
Implant.ARM.iLOBleed.a
HP servers provide a management module called iLO (a.k.a. Integrated Lights-Out), which turns on as soon as the power cable is connected, loading a full-blown proprietary operating system. This module has full access to all the firmware, hardware, software, and operating system installed on the server. In addition to…