6541
Hacking the Xbox 360 Hypervisor Part 3: Bad Update Improvements
Improving the Xbox 360 Bad Update exploit to trigger nearly instantaneously with near 100% success rate.
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 8,772 posts.
6542
Configuring a High Interactivity SSH HoneyPot
Due to continued visitation resulting in 404s to this article it has been restored from an older, and lost, version of this blog from content at – https://web.archive.org/web/20170811222717/https://www.robertputt.co.uk/2016/11/28/learn-from-your-attackers-ssh-honeypot/ , it may be incomplete, for example images being…
6543
The Cryptographic Doom Principle (2011)
When it comes to designing secure protocols, I have a principle that goes like this: if you have to perform any cryptographic operation before verifying the MAC on a message you’ve received, it will somehow inevitably lead to doom.
6544
Learning Exploitation with Offensive Computer Security 2.0
Own this domain today. We make your shopping experience easy. Friendly and quick customer service.
6545
Can sanitizers find the two bugs I wrote in C++?
A few days ago I published a short post about two bugs I wrote while developing the C++ external scanner for my TLA⁺ tree-sitter grammar. Reactions were mixed! Many people were supportive, but there were of course the usual drive-by claims by developers that the bugs were trivial, they would’ve found & fixed them…
6546
Let’s talk about PAKE
The first rule of PAKE is: nobody ever wants to talk about PAKE. The second rule of PAKE is that this is a shame, because PAKE — which stands for Password Authenticated Key Exchange — is actually o…
6547
PuTTY 0.63 released, fixing four security holes
Home | FAQ | Feedback | Licence | Updates | Mirrors | Keys | Links | Team Download: Stable · Snapshot | Docs | Privacy | Changes | Wishlist
6548
A simple solution to credit card fraud, and why you won't see it any time soon
This is the first in what will probably be a very long series of articles. Ultimately, this is the beginning of the story of why I stopped ...
6549
High-Security Mechanical Locks (2020)
Outside of a very few specialized fields high-security locks are almost totally unknown. Even in the field of locksmithing where high-security locks are known, they are often misunderstood. Today I am going to offer you a primer on the fascinating world of high-security mechanical locks, the securit
6550
Large scale Internet SSH brute force attacks seem to have stopped here
You're probably reading this page because you've attempted to access some part of my blog (Wandering Thoughts) or CSpace , the wiki thing it's part of. Unfortunately you're using a browser version that my anti-crawler precautions consider suspicious, most often because it's too old (most often this applies to versions…
6551
6552
NYPD can use more than 15,000 cameras to track people using facial recognition
Thousands of volunteers helped map surveillance cameras that the NYPD could use to track people using facial recognition.
6553
Yubico announces tiny, cheap YubiHSM 2
Learn more about what's happening within the tech and cybersecurity industry and the developments in our business and security keys within our Yubico Blog.
6554
6555
Protecting Against Browser-Language Fingerprinting
Brave has further strengthened its fingerprinting protections by preventing users from being identified based on preferred browser language. Starting with version 1.39, Brave randomizes how your browser informs sites of what language(s) you’ve set as default, and what fonts you have installed on your system.
6556
6557
6558
6559
Cryptographic vulnerabilities in IOTA
Last month, Ethan Heilman, Tadge Dryja, Madars Virza, and I took a look at IOTA, currently the 8th largest cryptocurrency with a $1.9B…
6560
CFPB finalizes personal financial data rights rule
The Consumer Finance Protection Bureau (CFPB) has just finalized a rule that makes it easy and safe for you to figure out which bank will give you the best deal and switch to that bank, with just a couple of clicks. We love this kind of thing: the coolest thing about a digital world is how easy it...
6561
California legislature agrees to upload driver's licenses to national database
Withdrawing its opposition under behind-the-scenes pressure from Gov. Gavin Newsom and lawless threats from the US Department of Homeland Security (DHS), the California legislature has agreed to fund and revise state law to authorize the upload of information about all driver’s licenses and ID cards issued by the…
6562
Komodia SSL certificates are in many products
So, as people have started turning over stones, looking to see how common these Komodia certificates are, some surprising (and depressing) things are beginning to surface. It does appear that Komod…
6563
The Most Dangerous Code in the Web Browser
Personal website of Stefan Heule
6564
DEFCON Router Hacking Contest Reveals Major Vulnerabilities
"I could take down the internet with that, and so could you." Dan Geer, Chief Information Security Officer of CIA’s venture capital arm, didn't mince words when he mentioned the security flaws in home routers during his keynote address at last month's Black Hat conference in Las Vegas. But he also...
6565
6566
6567
DOGE Denizen Marko Elez Leaked API Key for xAI
Marko Elez , a 25-year-old employee at Elon Musk’s Department of Government Efficiency (DOGE), has been granted access to sensitive databases at the U.S. Social Security Administration, the Treasury and Justice departments, and the Department of Homeland Security. So it should fill all Americans with a deep sense of…
6568
Zero Knowledge Proofs: An illustrated primer (2014)
One of the best things about modern cryptography is the beautiful terminology. You could start any number of punk bands (or Tumblrs) named after cryptography terms like ‘hard-core predicate&#…
6569
Bitbucket secrets
Research, expert perspectives, and product announcements from Atlassian on how teams can work smarter with AI. Subscribe for monthly insights on the future of teamwork.
6570
Why does mathmain need an encrypted loader?
A math solver leads to encrypted code in npm packages. Follow the loader, the trigger matrix that unlocks it, the remote access payload, and the full indicators.