211
Further hardening glibc malloc() against single byte overflows
Introduction Back in 2014, while at Project Zero, I exploited a buffer overflow of a single NUL byte in glibc . Tavis Ormandy had found th...
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 268 posts.
212
213
Mastercard Internet Gateway Service: Hashing Design Flaw
Last year I found a design error in the MD5 version of the hashing method used by Mastercard Internet Gateway Service. The flaw allows modification of transaction amount. They have awarded me with a bounty for reporting it. This year, they have switched to HMAC-SHA256, but this one also has a flaw
214
Understanding the “GPL is a Contract” court case
There's been a lot of confusion about the recent Artifex v. Hancom case, in which the court found that the GPL was an enforceable contract. I'm going to try to explain the whole thing in clear terms for the legal layman.
215
216
217
Playing with Kernel TLS in Linux 4.13 and Go
The 1600 LoC patch allows userspace to pass the kernel the encryption keys for an established connection, making encryption happen transparently inside the kernel.
218
Set up a malware analysis lab with VirtualBox, INetSim and Burp
In this post we will set up a virtual lab for malware analysis. We’ll create an isolated virtual network separated from the host OS and from the Internet, in which we’ll setup two victim virtual machines (Ubuntu and Windows 7) as well as an analysis server to mimic common Internet services like HTTP or DNS. Then…
219
A Hardware Privacy Monitor for iPhones
Andrew “bunnie” Huang and Edward Snowden have designed a hardware device that attaches to an iPhone and monitors it for malicious surveillance activities, even in instances where the phone’s operating system has been compromised. They call it an Introspection Engine, and their use model is a journalist who is…
220
Phishing with Unicode Domains
Vulnerability in Chrome, Firefox, and Opera makes users susceptible to phishing with Unicode domains
221
Zigfrid – A Passive RFID Fuzzer
Zigfrid is the end result of my RFID tinkering. Since I will most definitely forget most things described here in the (very) near future, I share this for those few who might find it interesting. P…
222
I'm giving up on HPKP
HTTP Public Key Pinning is a very powerful standard that allows a host to instruct a browser to only accept certain public keys when communicating with it for a given period of time. Whilst HPKP can offer a lot of protection, it can also cause a lot of harm too.
223
Unroll.me
Link to: http://blog.unroll.me/we-can-do-better/
224
Cypherpunk Desert Bus: My Role in the 2016 Zcash Trusted Setup Ceremony
Update: taking this down for now until some questions about the deterministicbuilds are answered; currently I do not believe the Zcash trusted setup shouldbe...
225
226
227
One Line of Code That Compromises Your Server
Demonstrating how a weak session secret can allow an attacker to take control of a server
228
Twitter Bots Use Likes, RTs for Intimidation
I awoke this morning to find my account on Twitter ( @briankrebs ) had attracted almost 12,000 new followers overnight. Then I noticed I’d gained almost as many followers as the number of re-tweets (RTs) earned for a tweet I published on Tuesday . The tweet stated how every time I tweet something related to Russian…
229
Tactics, Techniques, and Procedures of the Yahoo Hack
(.. Tactics, Techniques, and Procedures)
230
The scrypt parameters
The recommended scrypt parameters in the Go docs were recently brought up for discussion given they haven’t changed since 2009.
231
A Guide to Synthesizing Adversarial Examples
Synthesizing adversarial examples for neural networks is surprisingly easy.
232
Pastes on Have I Been Pwned are no longer publicly listed
Over the weekend, a Have I Been Pwned [https://haveibeenpwned.com/] (HIBP) subscriber contacted me after they found their Spotify credentials online. It turns out that this particular woman went searching for her specific password after finding "some guy listening to Mexican music from a foreign device on my acct"
233
Grsecurity: Potential contributory infringement and breach of contract risk
It's my strong opinion that your company should avoid the Grsecurity product sold at grsecurity.net because it presents a contributory infringement and breach of contract risk.
234
235
Patching is hard; so what?
It’s now been about a week since Equifax announced the record-breaking breach that affected 143 million Americans. We still don’t know enough — but a few details have begun to com…
236
Hardening C/C++ Programs – Executable-Space Protection and ASLR
In the first part of this series we discussed the mechanics of an exploit, the general concept of hardening, and the stack protector hardening technique in particular. Some of the concepts explained there will be
237
Regarding Marcus Hutchins aka MalwareTech
Brief background
238
239
LastPass’ Authenticator app is not secure
An easy, root-free way to bypass fingerprint protection on LastPass’ authenticator app
240
Where the Apple accounts that hackers are threatening to wipe came from
The tech news recently has seen quite a lot of chatter about an alleged haul of Apple credentials [http://www.zdnet.com/article/apple-icloud-ransom-what-you-need-to-know/], apparently about 250 million of them in all. Allegedly. Maybe. Or was it 300 million? [https://www.macrumors.com/