8431
Put your SSH keys in your TPM chip
Published: 10-04-2026 19:37 | Author: Remy van Elst | Text only version of this article
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 8,773 posts.
8432
Critiques of the DHS and FBI’s Grizzly Steppe Report
On December 29 th , 2016 the White House released a statement from the President of the United States (POTUS) that formally accused Russia of interfering with the US elections, amongst other activities. This statement laid out the beginning of the US’ response including sanctions against Russian military and…
8433
8434
Increasing Google and Alphabet VRP rewards
The reward amounts on offer by the Google VRP have undergone a major overhaul: We're increasing reward amounts by up to 5x (with maximum rewards of up to $151,515)!
8435
My gym forced a social media down my throat. So I reverse-engineered its app
Extracting my gym’s QR check-in from its Flutter app, with a rooted phone and a lot of ripgrep.
8436
How Dropbox sacrifices user privacy for cost savings
Note: This flaw is different than the authentication flaw in Dropbox that Derek Newton recently published . Summary Dropbox , the popular cl...
8437
Why DRM is such a fucking stupid idea
Digital comics publisher JManga is collapsing . Two weeks from now you will no longer be able to "purchase" anything from them. Two months from now, anything that was "purchased" from them will cease to exist. If you spent hundreds of pounds in their store then, well, that's bad luck for you. This…
8438
8439
8440
8441
Better slow than sorry – VirtualBox 3D acceleration considered harmful
The 3 - d acceleration feature of VirtualBox has had a bit of a rough time this year . One could argue that technically this component might not be considered attack surface in VirtualBox, due to the big warning put out in the documentation recommending against its use (emphasis mine):
8442
Coalfire Comments on Penetration Tests for Iowa Judicial Branch
Coalfire is a cybersecurity and compliance services company that works with enterprises and tech businesses in FedRAMP, cloud migration, AI Risk, pen…
8443
WhatsApp Security Vulnerability
Back in March, Rolf Weber wrote about a potential vulnerability in the WhatsApp protocol that would allow Facebook to defeat perfect forward secrecy by forcibly change users’ keys, allowing it—or more likely, the government—to eavesdrop on encrypted messages. It seems that this vulnerability is real: WhatsApp has the…
8444
Why you should delete WhatsApp and install Signal
WhatsApp is not private or secure. Please consider using Signal instead.
8445
New and improved Linux Random Number Generator ready for testing
We enable the world to secure the web. Burp Suite, the Web Security Academy, and world-leading research from PortSwigger — the AppSec community’s home.
8446
Why to use Twitter, Facebook and Google Plus share links and not buttons
Use share buttons for Facebook, Twitter and Google Plus in your blog, that does not expose your users to tracking, or violate their privacy. Use share links to do this
8447
Jump Servers
Today we're going to talk about how jump servers work and how hoop can be a great alternative to them. Jump Servers are nodes that will grant access to your underline infra-structure services. Imagine that someone from your company need to access a database or an application inside your internal infra-structure…
8448
Bank of America Telephone Access Security Hole
"I can assure you that they would not be able to do that with the Bank of America security." The words of the Bank of America supervisor echoed in our
8449
Most TOR servers are vulnerable (NSA crackable)
After more revelations, and expert analysis, we still aren't precisely sure what crypto the NSA can break. But everyone seems to agree that...
8450
A dive into the world of MS-DOS viruses
This post is a textual version of a talk I gave at The 35th Chaos Computer Congress at the end of 2018. You can watch the talk that was recorded by the wonderful C3VOC team below if that’s your preferred medium:
8451
8452
Systemd's DynamicUser feature is currently dangerous
You're probably reading this page because you've attempted to access some part of my blog (Wandering Thoughts) or CSpace , the wiki thing it's part of. Unfortunately you're using a browser version that my anti-crawler precautions consider suspicious, most often because it's too old (most often this applies to versions…
8453
Probably check on your smart appliances
TL;DR: is your refrigerator running malware? If so, you better catch it!
8454
; Echo “Shell Injection”
This is an introductory article about shell injection, a security vulnerability allowing an attacker to execute arbitrary code on the user's machine. This is a well-studied problem, and there are simple and efficient solutions to it. It's relatively easy to design library API in such a way as to shield the application…
8455
Port forwarding
At AzireVPN, we are dedicated to providing our users with advanced features that enhance their online experience. We are thrilled to announce the launch of our latest addition: Port forwarding. In this blog post, we will delve into what Port forwarding is and how it can be leveraged to open
8456
EFF Statement on Assange Indictment and Arrest
While the indictment of Julian Assange centers on an alleged attempt to break a password—an attempt that was not apparently successful—it is still, at root, an attack on the publication of leaked material and the most recent act in an almost decade-long effort to punish a whistleblower and the...
8457
8458
UTorrent.com compromised, malware added to installer
This morning on 9/13/2011 at approximately 4:20 a.m. Pacific Daylight Time (UTC -7), the uTorrent.com and BitTorrent.com Web servers were compromised. Our standard Windows software download was replaced with a type of fake antivirus “scareware” program. (UPDATE: See below for removal instructions.) Just…
8459
Hacked: Investigating an Intrusion on My Server
tl;dr I have received a nice “your server is sending spam” email on a Saturday morning, this is what happened next. As a foreword, this server is not holding critical information and his mostly used to host static content and maintain former projects. Basically this is what happens when you leave upgrade undone on…
8460
Live2D Is a Security Trainwreck
derailed by dangling pointers