8521
Stuxnet: A Breakthrough
Broadcom Community - VMTN, Mainframe, Symantec, Carbon Black
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 8,773 posts.
8522
Red Hat Asks Supreme Court to Review Software Patents
Search for and read the latest Red Hat news and press releases about the people and products shaping the future of open source and open hybrid cloud technology.
8523
8524
8525
8526
Intercepting Predator Video
Sometimes mediocre encryption is better than strong encryption, and sometimes no encryption is better still. The Wall Street Journal reported this week that Iraqi, and possibly also Afghan, militants are using commercial software to eavesdrop on U.S. Predators, other unmanned aerial vehicles, or UAVs, and even piloted…
8527
A Tour Of A “Pay to Download Firefox” Site
At Mozilla , we regularly get anguished emails from people who have paid to download Firefox, and have then discovered a) that it's actually free, and b) that it's very hard to get the company they paid to stop charging their credit card. For those who have never had the misfortune to visit one of these trap sites, I…
8528
Return-Oriented Programming without Returns (on the x86)
We show that on the x86 it is possible to mount a return-oriented programming attack without using any return instructions. Our new attack instead makes use of certain instruction sequences that behave like a return; we show that these sequences occur with sufficient frequency in large Linux libraries to allow…
8529
Schneier on Security: Software Problems with a Breath Alcohol Detector
This is an excellent lesson in the security problems inherent in trusting proprietary software: After two years of attempting to get the computer based source code for the Alcotest 7110 MKIII-C, defense counsel in State v. Chun were successful in obtaining the code, and had it analyzed by Base One Technologies, Inc…
8530
Advanced SSH Techniques
At one site where I provide technical assistance, access to the network is all done via ssh over the Internet. However, one can't get access to the machines directly; one must first make an ssh connection to a gateway box I'll call martha. martha doesn't allow one to use regular passwords or keys, though. We're all…
8531
The PGP problem (2019)
The PGP problem
8532
8533
8534
Europe: The end of the privacy of digital correspondence
The End of the Privacy of Digital Correspondence The EU wants to oblige providers to search all private chats, messages, and emails automatically for suspicious content - generally and indiscriminately. The stated aim: To prosecute child pornography. The result: Mass surveillance by means of full
8535
From kafkatrap to honeytrap
The short version is: if you are any kind of open-source leader or senior figure who is male, do not be alone with any female, ever, at a technical conference. Try to avoid even being alone , ever, because there is a chance that a “women in tech” advocacy group is going to try to collect your scalp.
8536
My GMail password scares me with its power
Google’s GMail blog has some “handy” advice on how pick a good password to project your email account. Don’t use dictionary words, use mixed case,…
8537
Overclocking SSL
(This is a write up of the talk that I gave at Velocity 2010 last Thursday. This is a joint work of myself, Nagendra Modadugu and Wan-Teh Chang.)
8538
8539
8540
8541
Apple seeking to patent spyware
It looks like Apple, Inc., is exploring a new business opportunity: spyware and what we're calling "traitorware." While users were celebrating the new jailbreaking and unlocking exemptions, Apple was quietly preparing to apply for a patent on technology that, among other things, would allow Apple...
8542
8543
Massive Twitter Cross-Site Scripting Vulnerability
I bet 10 years ago none of us thought that 140 characters would change the landscape of Social Media quite so much. However, with close to 289,000,000 active users sending around 6,000 tweets every second Twitter has proven its critics wrong. Obviously, having gotten over …
8544
Block AI bots, scrapers and crawlers with a single click
To help preserve a safe Internet for content creators, we’ve just launched a brand new “easy button” to block all AI bots. It’s available for all customers, including those on our free tier
8545
8546
Arbitrary code execution via ldd utility
The `ldd` utility is more vulnerable than you think. It's frequently used by programmers and system administrators to determine the dynamic library dependencies of executables. Sounds pretty innocent, right? Wrong! In this article I am going to show you how to create an executable that runs arbitrary code if it's...
8547
Schneier on Security: Technology Shouldn't Give Big Brother a Head Start
China is the world’s most successful Internet censor. While the Great Firewall of China isn’t perfect, it effectively limits information flowing in and out of the country. But now the Chinese government is taking things one step further. Under a requirement taking effect soon, every computer sold in China will have to…
8548
8549
Linux being secure is a common misconception
Linux being secure is a common misconception in the security and privacy realm. Linux is thought to be secure primarily because of its source model, popular usage in servers, small userbase and confusion about its security features. This article is intended to debunk these misunderstandings by demonstrating the lack…
8550
