What does a PGP signature on a Git commit prove?
With git, a cryptographic signature on a commit provides strong integrity guarantees of the entire history of that branch going backwards...
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 8,771 posts.
With git, a cryptographic signature on a commit provides strong integrity guarantees of the entire history of that branch going backwards...
It fell to the UK Tories to actually implement the Nanny State. Too bad Nanny Tory does not want kinds to read up on tech web sites, or civi...
The year 2024 was a resurgent year for decompilation. Academic publications from that year made up nearly 30% of all top publications ever made in decompilation. In this post, I do a summarization and retrospective of both the academic and ideological progress of decompilation in 2024. Hint: decompilation research is…
On March 26, 2019, a malicious version of the popular bootstrap-sass package, that has been downloaded a total of 28 million times to date, was published to the official RubyGems repository.
The case of David Miranda got a lot of attention around the world after UK authorities were accused of abusing an anti-terrorism law to evade the normal constitutional restrains on police power and question someone because of their political associations. Well, a very similar abuse of power appears to have happened…
Earlier this week we revoked our trust in the DigiNotar certificate authority from all Mozilla software. This is not a temporary suspension, it is a complete removal from our trusted ...
Encryption is privacy incarnate – don’t ban it
On Friday, MIT Technology Review published an article on the cryptocurrency IOTA. However, we at the Media Lab have issues with the story
Ten years ago, after it became clear to almost everyone that all our online activity was being tracked and stored, I wrote a blog post about simple steps a person could take to improve their privacy online .
Use Tailscale's nginx-auth for secure Single Sign-On (SSO) to internal services, reducing the need for internal account systems.
A bipartisan group of congressional leaders has reintroduced the USA Freedom Act. The bill is an attempt to rein in the intelligence community's "Collect It All" strategy, and passing USA Freedom is a first, small step in the right direction. However, it has serious faults that should be addressed...
It’s a bit hard to even know where to begin with this one, perhaps at the start and then I’ll try and piece all the bits together as best I can. As you may already know if you’re familiar with this blog, I run the service Have
Over two years ago I installed Acronis True Image for Crucial in order to migrate my data to a new SSD I had just purchased. It worked. I then left True Image installed “just in case”, and what har…
Stack Overflow traffic during DEF CON shows what technologies are trending in the hacker community
EFF joined more than sixty civil liberties organizations and public interest groups from across the world yesterday in calling upon the world's governments to support the creation of a United Nations Special Rapporteur on the right to privacy. The special rapporteurs are independent experts...
There are indications that U.S. healthcare giant Change Healthcare has made a $22 million extortion payment to the infamous BlackCat ransomware group (a.k.a. “ ALPHV “) as the company struggles to bring services back online amid a cyberattack that has disrupted prescription drug services nationwide for weeks. However…
The YubiKey Bio Series delivers secure second factor and passwordless logins for desktop-based FIDO-supported services and applications.