571
Maybe we shouldn't skip SHA-3
David Wong writes about cryptography, security, and programming.
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 616 posts.
572
Is SHA-3 slow?
In a recent post , Adam Langley complains that “SHA-3 is slow”. Similar comments appear from time to time on the web (see also David Wong's post ). But what does it mean precisely? Let us dig into it.
573
574
Don't Feed Them After Midnight: Reverse-Engineering the Furby Connect
A Accenture oferece oportunidades que surgem a partir da disrupção tecnológica em todas as indústrias, em todos os países, todos os dias. Saiba mais!
575
‘Carbon Dating’ the Internet Archive with OpenTimestamps
tl;dr: You can now use our searchable database to download Bitcoin timestamps for items in the Internet Archive.
576
Tor Browser 7.0a4 is released
Tor Browser 7.0a4 is now available from the Tor Browser Project page and also from our...
577
Can I erase sensitive data on an old hard drive with Neodymium Magnets?
Discover secure hard drive destruction methods using powerful magnets to safeguard sensitive data.
578
Breach at Sonic Drive-In May Have Impacted Millions of Credit, Debit Cards
Sonic Drive-In , a fast-food chain with nearly 3,600 locations across 45 U.S. states, has acknowledged a breach affecting an unknown number of store payment systems. The ongoing breach may have led to a fire sale on millions of stolen credit and debit card accounts that are now being peddled in shadowy underground…
579
580
Restic Cryptography
tl;dr: this is not an audit and I take no responsibility for your backups, but I had a quick look at the crypto and I think I’m going to use restic for my personal backups.
581
Unravelling Konami's Arcade DRM
It’s well known that Konami doesn’t have complex protection on its arcade systems. Programmed World was a fan-made network replacement and update service for Konami arcade games with no support outside of Japan. Nothing of its scale and quality had been seen before, and nothing has been seen since, despite other…
582
Remote code execution affecting most iOS/macOS apps
CVE-2017-2416 Remote code execution triggered by malformed GIF in ImageIO framework, affecting most iOS/macOS apps ImageIO Available for: iPhone 5 and later, iPad 4th generation and later, iPod tou…
583
Beyond public key encryption
One of the saddest and most fascinating things about applied cryptography is how little cryptography we actually use. This is not to say that cryptography isn’t widely used in industry —…
584
Preventing AMI’s BiOS from interfering with coreboot flashing on the Librem 13
Purism makes premium phones, laptops, mini PCs and servers running free software on PureOS. Purism products respect people's privacy and freedom while protecting their security.
585
Internet Atlas maps the physical internet to enhance security
A thorough understanding of the internet’s physical makeup has only recently emerged, thanks to painstaking work by UW-Madison researchers and their collaborators.
586
Macie: Automatically Discover, Classify, and Secure Content at Scale
This blog is out of date. Please refer here for the updated info. When Jeff and I heard about this service, we both were curious on the meaning of the name Macie. Of course, Jeff being a great researcher looked up the name Macie and found that the name Macie has two meanings. It has […]
587
Amazon GuardDuty – Continuous Security Monitoring and Threat Detection
Threats to your IT infrastructure (AWS accounts & credentials, AWS resources, guest operating systems, and applications) come in all shapes and sizes! The online world can be a treacherous place and we want to make sure that you have the tools, knowledge, and perspective to keep your IT infrastructure safe & sound…
588
589
590
591
Why Security Backdoors are Bad (2016)
Recently, there has been a bit of controversy over the concept of the government or security agencies adding backdoors to services and…
592
A DoS Attack Against the C# Compiler
Generics in C# are certainly very useful and I find it amazing that we almost didn’t get them:
593
Patching Is Hard
There are many news reports of a ransomware worm . Much of the National Health Service in the UK has been hit; so has FedEx . The patch for the flaw exploited by this malware has been out for a while, but many companies haven’t installed it. Naturally, this has prompted a lot of victim-blaming: they should have…
594
Please Request Your Personal Data Held by Cambridge Analytica
By now, many people have probably heard about the company Cambridge Analytica . By its own admission, it played a major role in the succes...
595
Browser security beyond sandboxing
Read the latest about Microsoft Defender for Cloud Apps, and find helpful solutions from the digital security experts at Microsoft Security Blog.
596
597
598
WhatsApp Security Vulnerability
Back in March, Rolf Weber wrote about a potential vulnerability in the WhatsApp protocol that would allow Facebook to defeat perfect forward secrecy by forcibly change users’ keys, allowing it—or more likely, the government—to eavesdrop on encrypted messages. It seems that this vulnerability is real: WhatsApp has the…
599
600
Attacking Machine Learning with Adversarial Examples
Stay up to speed on the rapid advancement of AI technology and the benefits it offers to humanity.