8551
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 8,774 posts.
8552
Input type="password" Needs to Grow Up
Thoughts and musings of Dennis Forbes, expert software developer/architect and AI engineer
8553
PDF exploit in iOS 4
Link to: http://www.loopinsight.com/2010/08/01/jailbreakme-returns-offers-jailbreak-for-iphone-4-and-ipad/
8554
8555
Android security model is inadequate, and it needs a firewall
I have an Android phone, and while it’s good that Android does have some sandboxing, permissions and security against rogue apps, I’m not very happy with the security model and how it a…
8556
Detecting and Preventing Distillation Attacks
We identified coordinated distillation attacks using ~24,000 fraudulent accounts to extract Claude's capabilities.
8557
Schneier on UAE to Ban BlackBerrys
The United Arab Emirates—Dubai, etc.—is threatening to ban BlackBerrys because they can’t eavesdrop on them. At the heart of the battle is access to the data transmitted by BlackBerrys. RIM processes the information through a handful of secure Network Operations Centers around the world, meaning that most governments…
8558
Tempest: Transmit Radio Waves via a PC Video Card with No Extra Hardware
the quality of the music is not exactly what you are used to :-) but at least it works!
8559
EFF to Verizon: Etisalat Certificate Authority Threatens Web Security
EFF will soon be launching the SSL Observatory project, an effort to monitor and secure the cryptographic infrastructure of the World Wide Web. There is much work to be done, and we will need the help of many parties to make the HTTPS-encrypted web genuinely trustworthy. To see why, you can read...
8560
Bittorrent over Tor isn't a good idea
An increasing number of people are asking us about the recent paper coming out of Inria in...
8561
Schneier on Filming the Police
In at least three U.S. states, it is illegal to film an active duty policeman: The legal justification for arresting the “shooter” rests on existing wiretapping or eavesdropping laws, with statutes against obstructing law enforcement sometimes cited. Illinois, Massachusetts, and Maryland are among the 12 states in…
8562
Firesheep, a day later
Most importantly, I certainly never expected there would be this much attention all at once, and within the first 24 hours.
8563
Careful when hosting 3rd party apps on subdomains, or how I hacked Facebook
In the past few years it has become common for site owners to run 3rd party tools on their site. A good example would be Wordpress or other ...
8564
8565
EFF vs. Facebook: Part 2: "Facebook's Connections"
"Connections." It's an innocent-sounding word. But it's at the heart of some of the worst of Facebook's recent changes.Facebook first announced Connections a few weeks ago, and EFF quickly wrote at length about the problems they created. Basically, Facebook has transformed substantial personal...
8566
How Claude's text watermarking works
Future Claude models will generate text that contains a watermark to comply with the EU AI Act. We answer questions about how it works and whether it affects outputs.
8567
8568
Mozilla acquires privacy-focused ad tech company Anonym
Mozilla has acquired Anonym, a trailblazer in privacy-preserving digital advertising. This strategic acquisition enables Mozilla to help raise the bar for
8569
Protect Your Site with a Blackhole for Bad Bots
Tutorial shows how to setup a blackhole bot trap using PHP in just a few easy steps.
8570
8571
8572
Due to concerns about malicious applications, GPT2 will not be released (2019)
We’ve trained a large-scale unsupervised language model which generates coherent paragraphs of text, achieves state-of-the-art performance on many language modeling benchmarks, and performs rudimentary reading comprehension, machine translation, question answering, and summarization—all without task-specific training.
8573
Why Rust for safe systems programming
In this series , we have explored the need for proactive measures to eliminate a class of vulnerabilities and walked through some examples of memory safety issues we’ve found in Microsoft code that could have been avoided with a different language. Now we’ll peek at why we think that Rust represents the best…
8574
8575
Bcrypt is now obsolete
I am speaking today at BSDCan'09 about my work on the scrypt key derivation function. In the context of hardware brute-force attacks, scrypt is thousands of times more secure than existing "best practice" solutions such as bcrypt and PBKDF2; in fact, under reasonable assumptions it is provably as strong as possible…
8576
Critical Django security updates released (0day, exploit in the wild)
Posted by James Bennett on Oct. 9, 2009
8577
8578
8579
8580