3631
The Awful Anti-Pirate System That Will Probably Work
So, when I read that Assassin's Creed 2 for the PC would fight piracy by requiring a live internet connection all the time when you were pla...
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 4,335 posts.
3632
NSA's Warrantless Wiretaps (2012)
ACKNOWLEDGMENTS I thank Kent Gladstone, Science Applications International Corporation (SAIC), for a critical reading of both manuscripts. Many critical comments and corrections from Brad Howard have made the Mini-Tutorial a better adventure for anyone who follows his path.
3633
Why I’m Willing to Pay a Premium for Security, Privacy, and Peace of Mind
Miguel de Icaza's Blog
3634
Cryptographic Right Answers
Encrypting data: Use AES in CTR (Counter) mode, and append an HMAC . AES is about as standard as you can get, and has done a good job of resisting cryptologic attacks over the past decade. Using CTR mode avoids the weakness of ECB mode, the complex (and bug-prone) process of padding and unpadding of partial blocks (or…
3635
The GDPR as accidentally explained by people in the US
Bashing the European Union’s General Data Protection Regulation (GDPR) seems to have become one of American activists’ favourite hobbies in the tech field. Some criticism is entirely justified. But many claims that the GDPR is “counterproductive” or “misses the point” are based on misconceptions, rather than an…
3636
3637
Microsoft is Abandoning SHA-1 Hashes for Updates
Microsoft is shipping a patch to eliminate SHA-1 hashes from its update process. There’s nothing wrong with eliminating SHA-1—but their reasoning may be very interesting.
3638
3639
Signing data structures the wrong way
Domain separation bugs have bitten Bitcoin, Ethereum, TLS, and AWS. Snowpack solves this by embedding random domain separators directly in the IDL.
3640
The Digital Maginot Line
There is a war happening. We are immersed in an evolving, ongoing conflict: an Information World War in which state actors, terrorists, and ideological…
3641
Cracking Litter Box DRM
TLDR : My robot cat litter box bricks itself after a set number of washes with each soap cartridge so I reverse engineered and suppressed the verfication process to enable refilling.
3642
Wireless attacks on aircraft instrument landing systems
Wireless attacks on aircraft instrument landing systems Sathaye et al., USENIX Security Symposium 2019 It’s been a while since we last looked at security attacks against connected real-world entiti…
3643
3644
Reverse Engineering the Apple Multipeer Connectivity Framework (2022)
Some time ago I was using Logic Pro to record some of my music and I needed a way to start and stop the recording from an iPhone, so I found about Logic Remote…
3645
3646
Finding McAfee: a case study on geoprofiling and imagery analysis
Identify past, current, and possible future locations through the geolocation and chronolocation of media provided by a specific user.
3647
3648
3649
Reverse engineering Android from binary to source
Dmitry.GR: Full sources for Android on zWatch
3650
3651
Searching for "semicolon injection" bugs in embedded Linux devices
Introduction I recently bought a D-Link DCS-2121 surveillance camera. This is good stuff: Megapixel camera + microphone + speaker WiFi,...
3652
Wanted: Disgruntled Employees to Deploy Ransomware
Criminal hackers will try almost anything to get inside a profitable enterprise and secure a million-dollar payday from a ransomware infection. Apparently now that includes emailing employees directly and asking them to unleash the malware inside their employer’s network in exchange for a percentage of any ransom…
3653
3654
Could the XZ backdoor been detected with better Git/Deb packaging practices?
The discovery of a backdoor in XZ Utils in the spring of 2024 shocked the open source community, raising critical questions about software supply chain security. This post explores whether better Debian packaging practices could have detected this threat, offering a guide to auditing packages and suggesting future…
3655
Cloudflare's AI Psychosis
There was a time Cloudflare just made the internet better by staying hidden like Batman’s identity: protect & fight the bad people, for the sake of the global city of the Gotham… err I mean the in
3656
3657
3658
GitHub Pages generated a TLS cert for my own domain
How the hell is this blog served over HTTPS by GitHub Pages?
3659
A Sneaky Phish Just Grabbed My Mailchimp Mailing List
You know when you're really jet lagged and really tired and the cogs in your head are just moving that little bit too slow? That's me right now, and the penny has just dropped that a Mailchimp phish has grabbed my credentials, logged into my account and exported
3660
Patching is hard; so what?
It’s now been about a week since Equifax announced the record-breaking breach that affected 143 million Americans. We still don’t know enough — but a few details have begun to com…