181
PayPal does not know how to detect fraud
Contact with an owner of tooltrainer.com domain name.
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 260 posts.
182
Buenos Aires Censors and Raids the Technologists Fixing Its E-Voting System
Buenos Aires is currently in the middle of electing its mayor and city council. With a first round that took place on July 5th, and a second round due on July 19th, the election is the first time Argentina's capital city has used an electronic voting system called Vot.ar, created by local company...
183
The Collapse of the US-EU Safe Harbor
When people who care about technology look back at the year 2015, they will remember October as the month when the EU-U.S. Safe Harbor collapsed. An international legal agreement that has been in place for 15 years was invalidated in a single day. On Oct. 6, the Court of Justice of the European Union struck...
184
FBI Returns Seized Devices to EFF Client
EFF is pleased to announce that our client, Chris Roberts, is now in the possession of all of his digital devices that had been held by the FBI since April 2015. Earlier this year, Mr. Roberts was detained for tweeting about airplane network security. When he landed in Syracuse, the FBI escorted...
185
CoreOS Introduces Clair: Open Source Vulnerability Analysis for Your Containers
No single cloud fits all. Explore how we build a more flexible future with hybrid cloud.
186
Improved Digital Certificate Security
Posted by Stephan Somogyi, Security & Privacy PM, and Adam Eijdenberg, Certificate Transparency PM On September 14, around 19:20 GMT, Syma...
187
Signify: Securing OpenBSD from Us to You
I'm going to talk today about signify, a tool I wrote for the OpenBSD project that cryptographically signs and verifies. This allows us to ensure that the releases we ship arrive on your computer in their original, intended form, without tampering.
188
Why your 'A' grade SSL is 'outdated cryptography' on Chrome
Get EV SSL certificates in hours, not days. Prechecks before you pay. We do the hard work for you.
189
190
TPP Threatens Security and Safety by Locking Down US Policy on Source Code Audit
Multiple recent reports on serious security vulnerabilities in cable modems and routers paint a dire picture of the state of security of the devices that millions of users depend upon to connect to the Internet. Such vulnerabilities can be exploited to disable our access, snoop on our personal...
191
192
Google, the Wassenaar arrangement, and vulnerability research
Posted by Neil Martin, Export Compliance Counsel, Google Legal Tim Willis, Hacker Philanthropist, Chrome Security Team Cross-posted on...
193
The Problem with Mobile Phones
Mobile phones have become ubiquitous and basic communications tools—now used not only for phone calls, but also for accessing the Internet, sending text messages, and documenting the world. Unfortunately, mobile phones were not designed for privacy and security. Not only do they do a poor job of protecting your…
194
They Live
Winter Break Of Code, Day Fifteen The 1988 film They Live is one of the last great masterpieces to come out of the Hollywood left. In the film, a drifter named John Nada discovers a box of sunglasses that, when worn, allows the wearer to really see the world around him. For instance, when wearin...
195
EFF and Eight Other Privacy Orgs Back Out of NTIA Face Recognition Talks
EFF, along with eight other consumer-focused privacy advocacy organizations, has backed out of the National Telecommunications Information Administration’s multi-stakeholder process to develop a privacy-protective code of conduct for companies using face recognition. After 16 months of active...
196
Finding MongoDB instances without any authentication
I would like to take a moment to discuss databases. Most people use Shodan to find devices that have web servers, but for a few years now I've also been crawling the Internet for various database software. I usually mention this during my talks and I've tried to raise awareness
197
198
199
XKeyscore Exposé Reaffirms the Need to Rid the Web of Tracking Cookies
Last Wednesday, The Intercept published an expose on the NSA's XKeyscore program. Along with information on the breadth and scale of the NSA's metadata collection, The Intercept revealed how the NSA relies on unencrypted cookie data to identify users. As The Intercept says: "The NSA’s ability to...
200
201
When ‘int’ is the new ‘short’
Posted by Mark Brand, Truncator of IntegersThis is going to be a quick post, just describing a pa...
202
Cookies Lack Integrity: Real-World Implications
Xiaofeng Zheng, Tsinghua University and Tsinghua National Laboratory for Information Science and Technology; Jian Jiang, University of California, Berkeley; Jinjin Liang, Tsinghua University and Tsinghua National Laboratory for Information Science and Technology; Haixin Duan, Tsinghua University, Tsinghua National…
203
204
Mongo BSON Injection: Ruby Regexps Strike Again
We do penetration testing, source code auditing and vulnerability assessments
205
EFF to Court: Lifetime GPS Tracking Violates the Fourth Amendment
All too often, new police surveillance tools are initially applied to only the “worst of the worst” and then slowly—but surely—expanded to include an ever-growing number of less culpable individuals. We’ve seen it with DNA collection. And now we’re starting to see it with GPS tracking. That’s why...
206
Users Betrayed as Australia Adopts a Copyright Censorship Regime
Since our report last week on Australia's Internet censorship bill, the bill did indeed pass the Senate yesterday, and will become the Copyright Amendment (Online Infringement) Act 2015. The new law provides an accelerated process for rightsholders to obtain court orders for ISPs to block sites...
207
Web Fonts Collateral Damage of Ad Blockers
Years of abusive implementation of webfonts has landed the feature under the umbrella of content blocking APIs, affecting those few who’ve cared all along.
208
209
A vulnerability in WebLogic, WebSphere, JBoss, Jenkins, OpenNMS and others
By @breenmachine What? The most underrated, underhyped vulnerability of 2015 has recently come to my attention, and I’m about to bring it to yours. No one gave it a fancy name, there were no …
210
Judge to DOJ: Not All Writs
A federal magistrate judge in Brooklyn took an admirable stand last week when he questioned the government’s authority to compel Apple to unlock a seized mobile device using the All Writs Act. That’s a general-purpose law passed in 1789 that allows a court to require third parties’ assistance to...