8281
Letting users block injected third-party DLLs in Firefox
Users can now block poorly behaving third-party DLLs in Firefox to improve stability and performance.
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 8,773 posts.
8282
Building a backdoor with Node.js
A backdoor in our code that can perform OS injection is a considerable threat.
8283
Fuzzing FFmpeg for fun and profit
One of the great things about having rack-space in our new office is that we can now support open source projects using our equipment such as FFmpeg and Libav. They are critical parts of our software as well as underpin much of multimedia processing in the world today.
8284
Attacks on machine learning models
HN discussion
8285
Viking Horde: A New Type of Android Malware on Google Play
Viking Horde Android malware conducts ad fraud, but can also be used for other attack purposes such as DDoS attacks, spam messages, and more.
8286
Recover Apple Keychain
Yes, I do—and probably more than I should admit. But a few things led to this situation. For one, I’d gotten too used to relying on Touch ID. As a result, if my muscle memory failed me, I was stuck. On top of that, I kept entering my office Active Directory (AD) password instead of my Mac password—again, muscle memory…
8287
Windows Hello face recognition is vulnerable to the Jedi mind trick
Practical development throughout the evolution of Windows.
8288
Using bubblewrap to add sandboxing to NetBSD
As of the time of writing, there is no real sandboxing technique available to NetBSD. There is chroot , which can be considered a weak sandbox because it modifies the root directory of the process, effectively restricting the process' view of the file system, but it doesn't isolate anything else, so all networking…
8289
Exceptional failure: breaking the STM32F1 read-out protection
The firmware of microcontrollers usually contains valuable data such as intellectual property and, in some cases, even cryptographic material. In order to protect the confidentiality of these assets,
8290
Apple’s New ‘Child Safety’ Initiatives, and the Slippery Slope
The stakes are incredibly high, and Apple knows it. Whatever you think of Apple’s decision to implement these features, they’re not doing so lightly.
8291
Introduction to sysclean(8)
sysclean(8) is a system tool designed for help system administrator to keep their OpenBSD clean after upgrade.
8292
OpenSSL Heartbleed Security Update
Yesterday the OpenSSL Project released an update to address the CVE-2014-0160 vulnerability, nicknamed “Heartbleed.” This serious vulnerability affects a..
8293
Cryptographic Agility
( These are notes that I wrote up from a talk that I gave at the National Academies Forum on Cyber Resilience . You can tell that it was in Washington, DC because of the “cyber”.
8294
A Statement from The Tor Project on Software Integrity and Apple
The Tor Project exists to provide privacy and anonymity for millions of people, including human...
8295
One parser, two bugs, many routers: Exploiting Broadcom WiFi across eCos, Linux
A vulnerability in Broadcom’s proprietary WPS implementation enables unauthenticated attackers within WiFi range to leak memory and achieve unauthenticated remote code execution on millions of routers. This post covers its discovery through agentic vulnerability research, exploitation across eCos and Linux platforms…
8296
Why Certificate Lifecycle Automation Matters
If you’ve perused the ActivityPub feed of certificates whose keys are known to be compromised , and clicked on the “Show More” button to see the name of the certificate issuer, you may have noticed that some issuers seem to come up again and again. This might make sense – after all, if a CA is issuing a large volume…
8297
x86 API Hooking Demystified (2012)
Simak Live Draw SDY Tercepat Hari Ini, Hasil Live SDY, Live Result Sidney, Dan Rekap Togel SDY Lengkap Dan Akurat Hanya Di Sini.
8298
Glitching a microcontroller to unlock the bootloader
Back in the summer I was lucky enough to finagle my boss into letting me take Dmitry Nedospasov ( @nedos )’s hardware hacking training . In it I cut my teeth on using an FPGA to interface with target hardware. After implementing a UART we implemented a module that could parse part of Apple’s OneWire, used to negotiate…
8299
Pwned Certificates on the Fediverse
As well as the collection and distribution of compromised keys , the pwnedkeys project also matches those pwned keys against issued SSL certificates. I’m excited to announce that, as of the beginning of 2024, all matched certificates are now being published on the Fediverse , thanks to the botsin.space Mastodon server.
8300
Mozilla launches massive campaign on digital surveillance
Additional Perspectives from Mozilla: Mitchell Baker’s post, “Total Surveillance” Ben Adida’s post, “No User is an IslandR
8301
8302
Amazon GuardDuty – Continuous Security Monitoring and Threat Detection
Threats to your IT infrastructure (AWS accounts & credentials, AWS resources, guest operating systems, and applications) come in all shapes and sizes! The online world can be a treacherous place and we want to make sure that you have the tools, knowledge, and perspective to keep your IT infrastructure safe & sound…
8303
EnclaveDB: A secure database using SGX
EnclaveDB: A secure database using SGX Priebe et al., IEEE Security & Privacy 2018 This is a really interesting paper (if you’re into this kind of thing I guess!) bringing together the security…
8304
8305
Driving forward in Android drivers
Posted by Seth Jenkins, Google Project ZeroIntroduction Android's open-source ecosystem has ...
8306
Sending Data over Offline Finding Networks
The following is a summary of an internal research project conducted by Hudson H. and Andrew G.
8307
Information Security Mental Models
Mental models frame how we think about the world. This article describes how they work and why we need more of them in information security.
8308
Adding code to an existing ELF file
Recently I was reverse-engineering an Android app [ a ] . The relevant details are as follows:
8309
Race you to the kernel
Posted by Ian Beer of Google Project ZeroThe OS X and iOS kernel code responsible for loading a s...
8310
Google Chrome HTTPS Address Bar Spoofing
The Fixed Bounty Bug Revealed Last month Google awarded our security analyst Luka Treiber a Chromium Security Reward for a high-severity ...