121
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 187 posts.
122
Your Wireless Router Is Broken – Help Us Fix It At DEF CON
As part of our Open Wireless Movement, we set out to create router software that would make it easier for people to safely and smartly share part of their wireless network. Protecting hosts, so their security is not compromised because they offer open networks, is one of the goals of the router...
123
124
125
Gradually sunsetting SHA-1
Cross-posted on the Chromium Blog The SHA-1 cryptographic hash algorithm has been known to be considerably weaker than it was designed t...
126
Incident Report – DDoS Attack
On Monday, December 1st, 2014, we experienced a major volumetric DDoS attack aimed at a customer's domain. Here is our full report.
127
128
TrueCrypt Master Key Extraction And Volume Identification
One of the disclosed pitfalls of TrueCrypt disk encryption is that the master keys must remain in RAM in order to provide fully transparent...
129
Libtls – New TLS API from LibreSSL
tls_init , tls_config_new , tls_config_free , tls_config_error — initialize TLS client and server API
130
Microsoft Says: Come Back with a Warrant, Unless You’re Microsoft
Update (March 28, 2014): Microsoft has announced a new policy which is described in a new post. EFF has long argued that law enforcement agencies must get a warrant when they ask Internet companies for the content of their users’ communications. In 2013, as part of our annual Who Has Your Back...
131
An Update to End-To-End
Posted by Stephan Somogyi, Product Manager, Security and Privacy In June, we announced and launched End-To-End , a tool for those who need...
132
TextSecure's Private Group Messaging
One of the major features we introduced in the TextSecure v2 release was private group chat. We believe that group chat is an important feature for encrypted communications projects, so we wanted to try to summarize some of the existing work in this area, as well as how TextSecure’s group chat pr...
133
Dropbox wasn't hacked
At Dropbox, security is our highest priority. Find out how Dropbox secures your files and data, and why millions of people trust us with what matters most.
134
135
136
DEFCON Router Hacking Contest Reveals Major Vulnerabilities
"I could take down the internet with that, and so could you." Dan Geer, Chief Information Security Officer of CIA’s venture capital arm, didn't mince words when he mentioned the security flaws in home routers during his keynote address at last month's Black Hat conference in Las Vegas. But he also...
137
Apple CoreGraphics framework logging input data to /tmp
Security researcher Kent Howard reported an Apple issue present in OS X 10.10 (Yosemite) where log files are created by the CoreGraphics framework of OS X in the /tmp local directory. These log files contain a record of all inputs into Mozilla programs during their operation. In versions of OS X from versions 10.6…
138
139
Chaos Computer Club Supports Chelsea Manning and Edward Snowden
Since its founding more than thirty years ago, the Chaos Computer Club (CCC) holds strong beliefs in the freedom of information. Consequentially, freedom fighters and whistleblowers deserve our...
140
141
Government Authority Intended for Terrorism is Used for Other Purposes
The Patriot Act continues to wreak its havoc on civil liberties. Section 213 was included in the Patriot Act over the protests of privacy advocates and granted law enforcement the power to conduct a search while delaying notice to the suspect of the search. Known as a “sneak and peek” warrant, law...
142
143
It’s time to extend the US Privacy Act to EU citizens
Last summer’s Snowden revelations not only highlighted the urgent need for surveillance reform but also severely damaged relations between t...
144
Why SSD Drives Destroy Court Evidence, and What Can Be Done About It (2012)
Why SSD Drives Destroy Court Evidence, and What Can Be Done About It: Explore the challenges posed by SSD drives in preserving court evidence and discover strategies to mitigate data loss risks.
145
This working group has failed
Search IETF mail list archives
146
$300k for Cracking Telegram Encryption
$300,000 for cracking #Telegram encryption
147
New AWS Directory Service
Virtually every organization uses a directory service such as Active Directory to allow computers to join domains, list and authenticate users, and to locate and connect to printers, and other network services including SQL Server databases. A centralized directory reduces the amount of administrative work that must…
148
149
Polaris Privacy Initiative to Accelerate User-focused Privacy Online
At Mozilla, we believe that an individuals’ privacy on the Internet cannot be treated as optional. Our Privacy Principles guide us with the design of each of our products and ...
150
Unsealed Filing Shows DOJ Misled Appeals Court About NSL Gag Orders
A court filing unsealed late Wednesday shows that the U.S. Department of Justice (DOJ) made a highly misleading argument to an appeals court in October during a hearing on the constitutionality of National Security Letters (NSLs). On October 8, the Electronic Frontier Foundation argued before the...