331
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 431 posts.
332
Linux Foundation Secure Boot System Released
As promised, here is the Linux Foundation UEFI secure boot system. This was actually released to us by Microsoft on Wednesday 6 February, but with travel, conferences and meetings I didn’t really get time to validate it all until today. The files are here
333
Django Security Release - 1.5.4
Posted by James Bennett on Sept. 15, 2013
334
The NSA: ‘The Abyss from Which There Is No Return’
The Rutherford Institute, a nonprofit civil liberties organization based in Charlottesville, Va.
335
How To Opt Out of Facebook Ads Based on Your Real-Life Shopping Activity
Facebook has announced that it’s teaming up with four of the world’s largest corporate data brokers to “enhance” the ad experience for users. Datalogix, Epsilon, Acxiom, and BlueKai obtain information gathered about users through online means (such as through cookies when users surf the web) as...
336
Steps You Can Take Right Now Against Internet Surveillance
One of the trends we've seen is how, as the word of the NSA's spying has spread, more and more ordinary people want to know how (or if) they can defend themselves from surveillance online. But where to start? The bad news is: if you're being personally targeted by a powerful intelligence agency...
337
338
Insecurities in the Linux /dev/random
New paper: “Security Analysis of Pseudo-Random Number Generators with Input: /dev/random is not Robust, by Yevgeniy Dodis, David Pointcheval, Sylvain Ruhault, Damien Vergnaud, and Daniel Wichs. Abstract: A pseudo-random number generator (PRNG) is a deterministic algorithm that produces numbers whose distribution is…
339
Computer scientists develop 'mathematical jigsaw puzzles' to encrypt software
The "software obfuscation" system encrypts software so that it only allows someone to use a program as intended while preventing any deciphering of the code behind it.
340
341
Deconstruction of Pinkie Pie's 64-bit Chrome exploit
Back in November 2012, a Chrome Releases blog post mysteriously stated: "Congratulations to Pinkie Pie for completing challenge: 64-bit exp...
342
Crowdsourcing a More Secure Future
A guy from Russia just earned $100,000. Crowdsourcing a More Secure Future
343
344
Bruce Schneier awarded fellowship at Harvard's Berkman Center
I have been awarded a fellowship at the Berkman Center for Internet and Society at Harvard University, for the 2013–2014 academic year. I’m excited about this; Berkman and Harvard is where a lot of the cool kids hang out, and I’m looking forward to working with them this coming year. In particular, I have three goals…
345
How HTTPS Stops Attackers: What Every Web Dev Should Know
Hartley writes about full stack software engineering and AI-driven software development.
346
347
VLC threatens to sue Secunia over full disclosure
Protect your technology from cyber threats and vulnerabilities…
348
Applied Cryptography Engineering
Applied Cryptography taught two generations of developers what they know about crypto, and it is a dreadful instruction manual. The book to replace it with, and what you still have to learn after.
349
Multiple banking IP addresses hijacked
BGP multiple banking addresses hijacked, Author: Adrien de Beaupre
350
Facebook paid $4.5K for disclosure of my user account exploit
Back in 2009 I found a major security exploit on both Facebook and the than popular MySpace which exposed access to a user's personal data. I reported both data leaks to the social networks, and…
351
Time-lock encryption
How do you encrypt a file such that it can be decrypted after a date, but not before? Use serial computations for proof-of-work using successive squaring, chained hashes, or witness encryption on blockchains.
352
Who Does Skype Let Spy?
Lately I’ve been thinking a lot about power and the Internet, and what I call the feudal model of IT security that is becoming more and more pervasive. Basically, between cloud services and locked-down end-user devices, we have less control and visibility over our security—and have no point but to trust those in power…
353
Containers and Docker: how secure are they?
Docker is a founding member of the Blueprint Alliance, a 12-company reference architecture for securing AI agents, built around four governance questions.
354
355
Automated License Plate Readers Threaten Our Privacy
Co-Authored with Peter Bibring, Senior Staff Attorney at the ACLU of Southern California Law enforcement agencies are increasingly using sophisticated cameras, called “automated license plate readers” or ALPR, to scan and record the license plates of millions of cars across the country. These...
356
357
358
Bypassing Gogo’s Inflight Internet Authentication
Two weeks ago I attended SIGCSE 2012 in Raleigh, NC. The plane on my return flight had Internet access through Gogo’s Inflight Internet. While I think it’s incredibly awesome that Internet access is readily available to those who travel by plane, I personally feel it is not worth …
359
360