Topics /
The most popular blog posts about security & privacy on Hacker News. 213 posts.
Large caches of data stolen from online cheating site AshleyMadison.com have been posted online by an individual or group that claims to have completely compromised the company’s user databases, financial records and other proprietary information. The still-unfolding leak could be quite damaging to some 37 million…
If you're setting up a service where people can register their own usernames to be used as a hostname (username.example.com), email address (username@example.com), or URL path (example.com/username) within your domain, there are some common names you should avoid letting the general public register. Many …
The time has come. I bought my second IoT device - in the form of a cheap IP camera. As it was the most affordable among all others, my exp...
This is the story of how a handful of cryptographers ‘hacked’ the NSA. It’s also a story of encryption backdoors, and why they never quite work out the way you want them to. But I…
Back in March, I parsed the declaration Nicholas Merrill submitted in his bid to reveal the contents of what he was asked to turn over via an NSL back in 2004. As a reminder, here’s what FBI permitted Merrill to reveal at the beginning of this suit. And here’s Merrill’s description of what kind of […]
During October 2015 the curl web site sent out 1127 gigabytes of data. This was the first time we crossed the terabyte limit within a single month. Looking at the stats a little closer, I noticed that in July 2015 a particular single package started to get very popular. The exact URL was…
You can be identified by how you type, even behind proxies and Tor. Protect yourself with KeyboardPrivacy.
A few weeks ago, some friends and I decided that our houses weren’t crammed full enough with useless crap and so we embarked on a journey to a large junk shop surplus warehouse. The place was a vast hangar brimming with old and curious pieces of technology ranging from IBM keyboards to VHS video editing …
I assumed this was probably due to some shutdown corruption (though I rarely hit those in OS X). It just wouldn’t come back up and showed me some font error
10 years later and still unrebutted: DNSSEC is pageantry, it's not security, which is why so few security teams deploy it.
About Vulnerability Research Grants and a little story how I could delete any video on YouTube.
Security and Programming Blog
Note: This information has been disclosed to Google appropriately, they have chosen to not fix this behavior.
In this post, I would like to share about new CSS based attack with unicode-range descriptor of @font-face rule . Using this technique, an...
There’s a story on Hacker News asking what the hell is going on with the Truecrypt audit. I think that’s a fair question, since we have been awfully quiet lately. To everyone who donate…
This blog entry is part of a series covering: Logging into your laptop and decrypting it automatically Encrypting and decrypting any passwords or secure info you have Sending and receiving encrypted mails Providing 2-step authentication codes for your web logins Doing all of the above on your mobile phone…
After just a few hours the Hacking Team emails archive has already provided many tasty leaks. I want to focus on a routing security issue since this is my main research activity for this year.
