271
How Browsers Store Your Passwords (and Why You Shouldn't Let Them)
Introduction In a previous post , I introduced a Twitter bot called dumpmon which monitors paste sites for account dumps, configuration fi...
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 431 posts.
272
CloudFlare, PRISM, and Securing SSL Ciphers
Over the last week we've closely watched the disclosures about the alleged NSA PRISM program. At CloudFlare, we have never been approached to participate in PRISM or any other similar program.
273
274
275
Worthless security claims
I’ve been considering purchasing one of these t-shirts: This shirt would announce to everyone who crosses my path that I am, in fact, the world’s greatest lover. They would know this because I have a t-shirt that tells them so and it would give them enormous
276
The UK "Porn" Filter Blocks Kids' Access To Tech, Civil Liberties Websites
It fell to the UK Tories to actually implement the Nanny State. Too bad Nanny Tory does not want kinds to read up on tech web sites, or civi...
277
Documents Shed Light on Border Laptop Searches
The case of David Miranda got a lot of attention around the world after UK authorities were accused of abusing an anti-terrorism law to evade the normal constitutional restrains on police power and question someone because of their political associations. Well, a very similar abuse of power appears to have happened…
278
TextSecure, Now With 10 Million More Users
At Open Whisper Systems, we’re working to both advance the state of the art for secure communication and also reduce the friction required for ordinary people to make use of it. We want everyone to have access to advanced secure communication methods that are as easy and reliable to use as makin...
279
A Court Order is an Insider Attack
Commentators on the Lavabit case, including the judge himself, have criticized Lavabit for designing its system in a way that resisted court-ordered access to user data. They ask: If court orders are legitimate, why should we allow engineers to design services that protect users against court-ordered access? The…
280
Surveillance and the Internet of Things
The Internet has turned into a massive surveillance tool. We’re constantly monitored on the Internet by hundreds of companies—both familiar and unfamiliar. Everything we do there is recorded, collected, and collated—sometimes by corporations wanting to sell us stuff and sometimes by governments wanting to keep an eye…
281
Geohot presents an evasi0n7 writeup
Hi, I'm on a plane from SFO to New York, and made something for you. Not even a rap song. ******* geohot( @tomcr00se ) presents an evasi0n7 writeup ******* == Intro == I was bored, reversed, wrote this write-up, and wanted to do something with it. I tried to sell it to the Chinese for $7 and a trip to the Pizza Hut…
282
A Profanity-Laced Video Game Password That Breaks Everything
Most of these passwords were gibberish that required a pen-and-paper to write down and remember. One password, however, is more memorable, and much more sinister.
283
Finding Sociopaths on Facebook
On his blog, Scott Adams suggests that it might be possible to identify sociopaths based on their interactions on social media. My hypothesis is that science will someday be able to identify sociopaths and terrorists by their patterns of Facebook and Internet use. I’ll bet normal people interact with Facebook in ways…
284
RJS leaking vulnerability in multiple Rails applications
I wrote about this problem in May, without showcases, just a theoretical post http://homakov.blogspot.com/2013/05/do-not-use-rjs-like-techn...
285
NSA's Surveillance Powers Extend Far Beyond Counterterrorism
Time and again we’ve seen the National Security Agency (NSA) defend its vast surveillance apparatus by invoking the spectre of terrorism, discussing its spying powers as a method to keep America safe. Yet, the truth is that counterterrorism is only a fraction of their far broader authority to seek...
286
Linkedin's Response to My "Phishing with Intro" Post
Security and Programming Blog
287
Deceptions, Misinformation, and Word Games Used to Mislead About Surveillance
It’s been two months since President Barack Obama first said that he welcomes a debate about NSA surveillance, which he once again reiterated last week at his press conference. Unfortunately, it’s very hard to have a real debate about a subject when the administration constantly and intentionally...
288
289
Can I Be Trusted?
Slashdot asks the question: I’m a big fan of Bruce Schneier, but just to play devil’s advocate, let’s say, hypothetically, that Schneier is actually in cahoots with the NSA. Who better to reinstate public trust in weakened cryptosystems? As an exercise in security that Schneier himself may find interesting, what…
290
291
292
ISP Advertisement Injection - CMA Communications
Apple Inc. endorsing H&R Block with a beautiful bright green banner ad, compliments of CMA Communications. Tired from the day’s ev...
293
Mandiant Exposes APT1, One of China’s Cyber Espionage Units
Transform cyber defense with Mandiant. Engage frontline experts for incident response, threat intelligence services, and cyber risk management.
294
GnuPG - 16 Years of protecting privacy
In case you are not automatically redirected, please follow this link to https://gnupg.org/blog .
295
Details Behind Today's Internet Hacks
At 1:19pm, a researcher noticed that the New York Times' website wasn't loading. We know the New York Times tech team, so we emailed to check in. Minutes later, the CTO of the NYT called us back.
296
297
PuTTY 0.63 released, fixing four security holes
Home | FAQ | Feedback | Licence | Updates | Mirrors | Keys | Links | Team Download: Stable · Snapshot | Docs | Privacy | Changes | Wishlist
298
A simple solution to credit card fraud, and why you won't see it any time soon
This is the first in what will probably be a very long series of articles. Ultimately, this is the beginning of the story of why I stopped ...
299
300
Detaining David Miranda
Last Sunday, David Miranda was detained while changing planes at London Heathrow Airport by British authorities for nine hours under a controversial British law—the maximum time allowable without making an arrest. There has been much made of the fact that he’s the partner of Glenn Greenwald, the Guardian reporter whom…