1
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 236 posts.
2
3
4
5
6
Don't Copy-Paste from Website to Terminal
You surely know this: You're looking at some website with some useful shell commands. However, those commands are long as hell and you know you're probably not gonna need them for a few years or so (so there's no need to memorize them). So, what do you do? You copy-paste them. Here's an example:
7
New NSA Leak Shows MITM Attacks Against Major Internet Services
The Brazilian television show “Fantastico” exposed an NSA training presentation that discusses how the agency runs man-in-the-middle attacks on the Internet. The point of the story was that the NSA engages in economic espionage against Petrobras, the Brazilian giant oil company, but I’m more interested in the tactical…
8
Lockdown
Officially, Google killed Reader because “over the years usage has declined”. 1 I believe that statement, especially if API clients weren’t considered “usage”, but I don’t believe that’s the entire reason.
9
10
Fingerprints are Usernames, not Passwords
As one of the maintainers of eCryptfs , and a long time Thinkpad owner, I have been asked many times to add support to eCryptfs for Th...
11
Xerox scanners and photocopiers randomly alter numbers in scanned documents
Xerox scanners/photocopiers randomly alter numbers in scanned documents Please see the “condensed time line” section (the next one) for a time line of how the Xerox saga unfolded. It for example depicts that I did not push the thing to the public right away, but gave Xerox a lot of time before I did so. <iframe…
12
The First Few Milliseconds of an HTTPS Connection (2009)
Convinced from spending hours reading rave reviews, Bob eagerly clicked “Proceed to Checkout” for his gallon of Tuscan Whole Milk and…
13
The Internet Is a Surveillance State
Polish translation I’m going to start with three data points. One: Some of the Chinese military hackers who were implicated in a broad set of attacks against the U.S. government and corporations were identified because they accessed Facebook from the same network infrastructure they used to carry out their attacks…
14
Use "Amazon 1 Button" Chrome extension to sniff all HTTPS websites
A blog on security, malware, cryptography, pentesting, javascript, php and whatnots
15
16
17
Motorola cell phones are regularly phoning home
If you have a Motorola Android device, there is a good chance it is silently sending a great deal of your personal information (including email addresses and passwords) to Motorola.
18
Hard drive hack provides root access, even after reinstall
Apart from this article, I also gave a talk at OHM2013 about this subject. The video of that talk (minus the first few minutes) is now online .
19
A Hacker's Replacement for Gmail
Note: Since writing this I’ve replaced Exim with Postfix and Courier with Dovecot. This is outlined in the Addendum, but the main text is unchanged. Please read the whole guide before starting, as you can skip some of the steps and go straight to the final system.
20
21
Court found NSA surveillance unconstitutional in 2011
It turns out that Foreign Intelligence Surveillance Court in 2011 found that the NSA's surveillance under the FISA Amendments Act to be unco...
22
Don't be evil: Moving everything off of Google
Wherein I move many of my internet services away from Google Apps.
23
HTML5 localStorage allows sites to fill up users' hard disks
Use HTML5 localStorage to completely fill up Chrome, Safari, and IE users hard disks. Trololo...
24
25
26
27
As Feds Demand the Keys, Preparing for the Death of Public-Key Encryption
With further confirmation of the longstanding rumor that the U.S. government (and, we can safely assume, other governments around the world) have been pressuring major Internet firms to provide their "master" SSL keys for government surveillance purposes, we are rapidly approaching a critical technological crossroad.
28
29
Facebook vulnerability 2013
Click here to share This article on facebook Facebook Exploit [ post to facebook users even they are not in friend...
30
On Hacking MicroSD Cards
Today at the Chaos Computer Congress ( 30C3 ), xobs and I disclosed a finding that some SD cards contain vulnerabilities that allow arbitrary code execution — on the memory card itself. On the dark side, code execution on the memory card enables a class of MITM (man-in-the-middle) attacks, where the card seems to be…