6031
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 8,771 posts.
6032
An update on attempted man-in-the-middle attacks
Posted by Heather Adkins, Information Security Manager Today we received reports of attempted SSL man-in-the-middle (MITM) attacks again...
6033
Anonymity Is Hard
Anonymity in the real world is very hard In late 2011 Hezbollah rolled up a CIA spy ring in Lebanon. This provides an interesting lesson in CIA …
6034
6035
New “Terrorist Content” Regulations: A Grim Day for Digital Rights in Europe
Despite waves of calls and emails from European Internet users, the European Parliament today voted to accept the principle of a universal pre-emptive copyright filter for content-sharing sites, as well as the idea that news publishers should have the right to sue others for quoting news items...
6036
Unpacking the Benefits of Zero Trust Architecture as Defined by NIST
NIST has released a draft of SP 1800-35 , Implementing a Zero Trust Architecture. The lengthy documents lay out their definition of Zero Trust Architecture (ZTA) , the benefits, why it’s important, a few examples of how an organization can implement them, expected results associated with their example builds, and a…
6037
How to fight the surveillance economy
Stop supporting data harvesting business models by picking alternative services and ad channels. Also, please don’t share this on Facebook.
6038
The Fake Cisco
True cyber security combines advanced technology and best practice. Get tips and read articles on how to take your online security even further.
6039
Distributed Authorization
Using local data to answer authorization questions with Oso Cloud
6040
Mitigating a DDoS on Mastodon
<p>TLDR:</p> <!-- raw HTML omitted --> <p>This will mainly be a story into how I experienced and reacted to my first real-time attack. As you may or may not ...
6041
Trying to Keep the Internet Safe from Warrantless NSA Surveillance
Next month, President-elect Trump will be handed the keys to the NSA’s vast spying apparatus. As a candidate, he supported mass surveillance of Americans’ phone calls, called for expanded spying on American Muslims, and even invited Russia to hack the emails of his political opponent. With these threats to privacy and…
6042
Hardening attack surfaces with formally proven binary format parsers
With an eye toward performance, interoperability, or legacy concerns, low-level system software often must parse binary encoded data formats. Few tools are available for this task, especially since the formats involve a mixture of arithmetic and data dependence, beyond what can be handled by typical parser generators…
6043
On the modern web, ISPs are one of your threats (2015)
You're probably reading this page because you've attempted to access some part of my blog (Wandering Thoughts) or CSpace , the wiki thing it's part of. Unfortunately you're using a browser version that my anti-crawler precautions consider suspicious, most often because it's too old (most often this applies to versions…
6044
Xcode Constantly Phones Home
Building StopTheMadness Pro in Xcode is usually very fast, because my project doesn't use any Swift. It's a combination of Objective-C, which compiles much more quickly than Swift, and JavaScript, which doesn't need to be compiled. However, sometimes the builds were very slow for some strange reason. Checking the…
6045
Predicting the next Math.random() in Java
A while back a friend of mine hosted a programming competition where you were given 9 random numbers one at a time and you had to guess the rank (the sorted position amongst the 9) of each as they are coming in. The goal was to submit a strategy in Java that will maximize the number of these games won. The best…
6046
10 Years SeL4: Still the Best, Still Getting Better
A week ago, on 29 July, we at Trustworthy Systems celebrated seL4 Freedom Day, the 5th anniversary of the open-sourcing of seL4. Furthermore it was seL4’s 10th birthday – the annive…
6047
Fingerprinting iPhones
This clever attack allows someone to uniquely identify a phone when you visit a website, based on data from the accelerometer, gyroscope, and magnetometer sensors. We have developed a new type of fingerprinting attack, the calibration fingerprinting attack. Our attack uses data gathered from the accelerometer…
6048
Understanding Email Encryption (2025)
A comprehensive overview of how email is encrypted, the benefits, and the trade-offs.
6049
6050
China Spying on Undersea Internet Cables
Supply chain security is an insurmountably hard problem. The recent focus is on Chinese 5G equipment, but the problem is much broader. This opinion piece looks at undersea communications cables: But now the Chinese conglomerate Huawei Technologies, the leading firm working to deliver 5G telephony networks globally…
6051
6052
The State of SSL Stacks
The SSL landscape has shifted dramatically. In this paper, we examine OpenSSL 3.x, BoringSSL, LibreSSL, WolfSSL, and AWS-LC with HAProxy.
6053
EFF to Court: The First Amendment Protects the Right to Record First Responders
The First Amendment protects the right of members of the public to record first responders addressing medical emergencies, EFF argued in an amicus brief filed in the federal trial court for the Northern District of Texas. The case, Adelman v. DART, concerns the arrest of a Dallas freelance press...
6054
Searching statically-linked vulnerable library functions in executable code
Helping researchers find 0ld daysPosted by Thomas Dullien, Project ZeroExecutive summarySoftware ...
6055
EU doubles down on penalising privacy-friendly and encrypted messaging services
An updated version of the methodology to be used in the Child Sexual Abuse Regulation, leaked by the news portal Contexte, reveals more details on the approach pursued by the Belgian Council Presidency: The text doubles-down on services that allow people to protect themselves. If services are used t
6056
Operation Triangulation: iOS devices targeted with previously unknown malware
While monitoring the traffic of our own corporate Wi-Fi network, we noticed suspicious activity that originated from several iOS-based phones. Since it is impossible to inspect modern iOS devices from the inside, we created offline backups of the devices, inspected them and discovered traces of compromise.
6057
6058
6059
Securitybot: Open Sourcing Automated Security at Scale
Dash knows your context, your team, and your work, so your team can stay organized, easily find and share knowledge, and keep projects secure, all from one place.
6060
