Topics /
The most popular blog posts about security & privacy on Hacker News. 260 posts.
If you have ever tried scanning or photocopying a banknote, you may have found that your software—such as Adobe Photoshop, or the embedded software in the photocopier—refused to let you do so. That's because your software is secretly looking for security features such as EURion dots in the...
Last week, the ACLU filed a welcome additional challenge to the NSA’s warrantless Internet backbone surveillance (aka “Upstream” surveillance) on behalf of Wikimedia and a number of other media and human rights organizations. We applaud all of those involved in bringing the case. It adds another...
Posted by the notorious Tavis Ormandy.We’ve talked before about how we use Google scale to ...
There is a flood of appliances which could be connected - and some are connected - without a second thought as to whether or not it’s necessary or secure.
Docker Hub is a central repository for Docker developers to pull and push container images. We performed a detailed study on Docker Hub images to understand how vulnerable they are to security threats. Surprisingly, we found that more than 30% of images in official repositories are highly susceptible to a variety of…
The most common questions we get from developers who already know their stuff
In a recent paper, we showed that coding style is present in source code and can be used to de-anonymize programmers. But what if only compiled binaries are available, rather than source code? Today we are releasing a new paper showing that coding style can survive compilation. Consequently, we can utilize these…
Little by little, the government is opening up about its use of computer security vulnerabilities. Last month, the NSA disclosed that it has historically “released more than 91% of vulnerabilities discovered in products that have gone through our internal review process and that are made and used...
...and that you'll wish you knew about earlier too
We’re happy to share today that Facebook is the newest Gold sponsor of Let’s Encrypt. Facebook has taken multiple important steps to support and advance encryption this year, and we are glad to see Let’s Encrypt as the latest example. According to Alex Stamos, Chief Security Officer at Facebook, “Making it easier for…
The keys and certificates that will underlie Let’s Encrypt have been generated. This was done during a key ceremony at a secure facility today. The following objects were created: Key pair and self-signed cert for the ISRG root Key pair and certificate for the ISRG root’s OCSP Key pairs and certificates for two Let’s…
San Francisco—The Electronic Frontier Foundation (EFF) filed a complaint today with the Federal Trade Commission (FTC) against Google for collecting and data mining school children’s personal information, including their Internet searches—a practice EFF uncovered while researching its “Spying on...
Nowadays many companies and organizations (non-profits, units of governmental and educational institutions, etc) believe that running their own mail servers has become an impossible task, due both to the large amount of inbound spam and to the continuous attempts by spammers to send outbound spam through their mail…
It is no secret that we at CloudFlare love Go. We use it, and we use it a LOT. There are many things to love about Go, but what I personally find appealing is the ability to write assembly code!
This month, CloudFlare and EFF pushed back against major music labels’ latest strategy to force Internet infrastructure companies like CloudFlare to become trademark and copyright enforcers, by challenging a broad court order that the labels obtained in secret. Unfortunately, the court denied...
San Francisco - The Electronic Frontier Foundation (EFF) today filed a Freedom of Information Act (FOIA) lawsuit to shine light on the U.S. Marshals Service's (USMS) use of small aircraft mounted with controversial cell-phone tracking systems. The Wall Street Journal revealed last year that the...
The Senate passed the USA Freedom Act today by 67-32, marking the first time in over thirty years that both houses of Congress have approved a bill placing real restrictions and oversight on the National Security Agency’s surveillance powers. The weakening amendments to the legislation proposed by...
Learn about the features in NGINX and NGINX Plus that make them a valuable part of a solution for DDoS attack mitigation.
Upcoming plans revealed from two of the largest commercial CAs
We do penetration testing, source code auditing and vulnerability assessments
Obama’s position on encryption is now public, as reported by the Washington Post. According to Ellen Nakashima and Andrea Peterson of the Post, Obama “will not —for now—call for legislation requiring companies to decode messages for law enforcement.” Instead, the Post reports, the “administration...
8:30 : Wake up and get out of bed. Open the curtains to see the sun shining, put a dressing gown on and go downstairs to make some coffee.
San Francisco - People have a Fourth Amendment right to privacy when it comes to their genetic material, the Electronic Frontier Foundation (EFF) argues in an amicus brief filed this week with the Supreme Court of the United States. EFF is asking the Supreme Court to hear arguments in Raynor v....
Aaron’s law, the proposed law named in honor of Internet hero Aaron Swartz was reintroduced last week by Rep. Zoe Lofgren (D-Calif.) and Senator Wyden (D-Ore.), with new co-sponsor Senator Rand Paul (R-Ky.). This bill is the same as the one introduced in 2013 and we call upon Congress to move it...
