61
Mandiant Exposes APT1, One of China’s Cyber Espionage Units
Transform cyber defense with Mandiant. Engage frontline experts for incident response, threat intelligence services, and cyber risk management.
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 99 posts.
62
Details Behind Today's Internet Hacks
At 1:19pm, a researcher noticed that the New York Times' website wasn't loading. We know the New York Times tech team, so we emailed to check in. Minutes later, the CTO of the NYT called us back.
63
64
65
The realtime magic behind Moot and how we deliver all your instant notifications
Le tecnologie in tempo reale stanno trasformando il digitale. Permettono interazioni immediate e autentiche🎯 Scopri come migliorano l'esperienza utente e favoriscono il coinvolgimento.
66
67
HTML Live Video Streaming Via WebSockets
When I built my Instant Webcam App, I was searching for solutions to stream live video from the iPhone's Camera to browsers. There were none.
68
69
70
71
Building a PGP web of trust that people will actually use
Back in the early 1990s, PGP introduced the concept of web of trust (WoT)- a means by which users of personal encryption can know whether or...
72
How secure is HTTPS today? How often is it attacked? (2011)
This is part 1 of a series on the security of HTTPS and TLS/SSL HTTPS is a lot more secure than HTTP! If a site uses accounts, or publishes material that people might prefer to read in private, the site should be protected with HTTPS. Unfortunately, is still feasible for some attackers to break...
73
74
We scanned the Internet for port 22
Yesterday (Sept. 12) we scanned the entire Internet for port 22 -- the port reserved for "SSH", the protocol used by sysadmins to remotely l...
75
SpoofMAC - Spoof your MAC address in Mac OS X
Feross Aboukhadijeh is a computer security researcher, teacher, web developer, designer, long distance runner, gamer, music lover, and builder of websites that (sometimes) go viral.
76
77
Each socket should have two file descriptors
What if, instead of running a process-data program on this machine, we want to run it on another machine? No problem. We make a TCP connection to a process-data server on the remote machine. On the local machine, we have generate-data writing to the TCP connection, and consume-data reading from the TCP connection…
78
Multiple banking IP addresses hijacked
BGP multiple banking addresses hijacked, Author: Adrien de Beaupre
79
Bypassing Gogo’s Inflight Internet Authentication
Two weeks ago I attended SIGCSE 2012 in Raleigh, NC. The plane on my return flight had Internet access through Gogo’s Inflight Internet. While I think it’s incredibly awesome that Internet access is readily available to those who travel by plane, I personally feel it is not worth …
80
Let's remove verbs from HTTP 2.0
I shit you not – SPACEJUMP was a verb.
81
How to botch TLS forward secrecy
There's been some discussion about forward secret TLS recently, spurred, I think, by this piece from Declan McCullagh on CNET.
82
Where did all the HTTP referrers go?
Good (and bad news): the general consensus in the web developer community is that any and every website should be HTTPS by default. Why? HTTP by itself isn't encrypted, leaving it open to eavesdropping, message tampering, and man-in-the-middle attacks. HTTPS, if you use it consistently , prevents these issues.
83
Queueing in the Linux Network Stack
Things that interest me
84
85
86
Snapchat - GibSec Full Disclosure
A series of nicely formatted documents about Snapchat by GibSec.
87
88
BitTorrent secures and open-sources DHT bootstrap server
Arvid Norberg, chief architect for BitTorrent, Inc, introduces a new DHT bootstrap server. This latest version introduces Node ID enforcement as an important step in our development for BitTorrent Chat. It’s also now open source so that anyone can run their own bootstrap node.
89
Microsoft ‘Mortally Wounds’ SHA-1
Microsoft has announced that CAs in its root program may not issue certs signed using the SHA-1 algorithm, starting just over two years from now, and that Windows will start refusing to recognise such certs starting just over 3 years from now.
90
Telegram secret chat geolocation leak
UPD: I've just received confirmation from Telegram, that a patched version was released a few hours ago. Here is the patch on github....