2941
How we hacked Blackboard and changed our grades (2018)
A technical walk-through of how we hacked Blackboard and changed our grades.
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 4,441 posts.
2942
Framing Frames: Bypassing wi-fi encryption by manipulating transmit queues
Domien Schepers and Aanjhan Ranganathan, Northeastern University; Mathy Vanhoef, imec-DistriNet, KU Leuven
2943
2944
Yubikey guide for Git Signing, SSH Auth, U2F 2FA, and 1Password (2017)
Read the latest thinking, news and research from the team at Container Solutions in our Cloud Native Blog.
2945
2946
Drone Hacking Part 1: Dumping Firmware and Bruteforcing ECC
Desoldering a drone's flash chip and reconstructing the firmware from broken data.
2947
2948
Sequoia 1.3
Sequoia is a modular OpenPGP implementation in Rust.
2949
Victory for CloudFlare Against SOPA-like Court Order
Striking a blow against the continuing effort to force service providers to serve as IP police, CloudFlare and EFF have pushed back against a court order that would have required CloudFlare to monitor its service to enforce a trademark held by a group of music labels. Last week, Judge Alison J....
2950
Verified cryptography for Firefox 57
Traditionally, software is produced in this way: write some code, maybe do some code review, run unit-tests, and then hope it is correct. Hard experience shows that it is very ...
2951
Accused spy Alexander Yuk Ching Ma evidently beat the polygraph
On Thursday, 13 August 2020, FBI Special Agent Chris Jensen filed under seal a criminal complaint against Alexander Yuk Ching Ma of Honolulu, Hawaii, charging him with “Conspiracy to Gather and Communicate National Defense Information of the United States to a Foreign Nation.” On Monday, 17 August 2020, the complaint…
2952
Tencent WeChat is now a GitHub secret scanning partner
GitHub secret scanning protects users by searching repositories for known types of secrets. By identifying and flagging these secrets, our scans help prevent data leaks and fraud. We have partnered…
2953
1Password and the Crypto Wars
A series of debates, civil disobedience, and cryptographic developments have come to be known as “The Crypto Wars”. Learn how 1Password can help you protect your data.
2954
Trustworthy Chrome Extensions, by default
Incredibly, it’s been nearly a decade since we launched the Chrome extensions system. Thanks to the hard work and innovation of our deve...
2955
IP address errors lead to wrongful arrests
The Sophos Blog
2956
How the Syrian Electronic Army Hacked The Onion
This is a write-up of how the Syrian Electronic Army hacked The Onion. In summary, they phished Onion employees’ Google Apps accounts via 3 …
2957
The curious tale of a fake Carrier.app
Posted by Ian Beer, Google Project Zero NOTE: This issue was CVE-2021-30983 was fixed in iOS 15...
2958
CloudFlare enabling free SSL by mid-October
As of today, there are only about 2 million websites that support HTTPS. That's a shamefully low number. Two things are about to happen that we at CloudFlare are hopeful will begin to change that and make everyone love locks (at least on the web!).
2959
Radicle: Disclosure of Vulnerability in the Network Protocol
Sovereign code infrastructure.
2960
Lawmakers Want to Block Pornography at the Expense of Free Speech and Privacy
More than 15 state legislatures are considering the “Human Trafficking Prevention Act” (HTPA). But don’t let the name fool you: this bill would do nothing to address human trafficking. Instead, it would only threaten your free speech and privacy in a misguided attempt to block and tax online...
2961
Rustls Outperforms OpenSSL and BoringSSL
ISRG has been investing heavily in the Rustls TLS library over the past few years. Our goal is to create a library that is both memory safe and a leader in performance. Back in January of this year we published a post about the start of our performance journey. We've come a long way since then and we're excited to…
2962
Qubes OS 3.1 has been released
I’m happy to announce that today we’re releasing Qubes OS 3.1! The major new architectural feature of this release has been the introduction of the Qubes Management infrastructure, which is based on the popular Salt management software. In Qubes 3.1, this management stack makes it possi...
2963
2964
Access Now and EFF Condemn the Arrest of Tor Node Operator Dmitry Bogatov
This post was written in collaboration with Amie Stepanovich at Access Now. On April 6, Russian math instructor Dmitry Bogatov was arrested in Moscow and charged with “preparing to organize mass disorder” and making “public calls for terrorist activity” due to a gross misunderstanding about the...
2965
2966
Let’s Encrypt Receives the Levchin Prize for Real-World Cryptography
We are honored to be recognized for the impact on the field of cryptography.
2967
'; CREATE TABLE `Capture the Flag`; -- Stripe CTF Web Edition coming next week'
Online payment processing for internet businesses. Stripe is a suite of payment APIs that powers commerce for businesses of all sizes.
2968
QCSuper: A tool for capturing 2G/3G/4G air traffic on Qualcomm-based phones
QCSuper, an open-source tool, helps capture mobile network frames from Qualcomm-based Android devices, enabling analysis in Wireshark and more.
2969
2970
Privacy not included: Holiday gift list for privacy and security
Privacy Not Included was launched in 2017 to help you understand the privacy risks of tech products that connect to the internet. We are continuing that work in the form of Product Reviews at our magazine Nothing Personal, where our privacy experts do hours of hands-on testing and research on the most popular consumer…